Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: kZMdQwkEYtGhvMZYT1nc4XrrKDmTEYDHs/hTG6TkPEo=
Subject key identifier: 74:A8:6F:35:30:1B:55:51:DE:4F:6C:10:D2:35:D6:75:C8:46:F7:71
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019E1EDA28A31D9CE1989FB4A70D4D0A37EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 097E
Signing time: Wed 13 May 2026 01:01:14 +0000
Manifest this update: Wed 13 May 2026 01:01:14 +0000
Manifest next update: Thu 14 May 2026 01:01:14 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: KyTl24B822tni1Nf5K38QDJwFciEZysNw4C4wHqBgU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:28:a3:1d:9c:e1:98:9f:b4:a7:0d:4d:0a:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: May 13 01:01:14 2026 GMT
Not After : May 14 01:01:14 2026 GMT
Subject: CN=74a86f35301b5551de4f6c10d235d675c846f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:2b:d4:d3:f2:16:25:e1:48:a9:b8:57:64:
e2:cd:41:b1:75:d4:cd:38:23:d5:48:71:14:cd:d4:
73:98:ca:1a:b7:fb:98:f4:a1:f9:5b:12:08:3f:36:
32:8b:97:29:66:45:2c:3c:4f:cd:e0:64:b5:c2:c4:
5c:a8:cc:cb:ed:9f:72:d6:6f:df:12:f9:84:80:25:
60:ed:12:3a:71:b2:8a:c3:a3:65:d1:c8:76:a5:0d:
90:54:cb:d5:02:39:e4:9a:1c:2b:39:b6:25:5f:14:
41:e0:2e:84:f2:bf:a6:f1:f0:91:71:6d:00:f5:12:
63:3a:8b:24:d5:18:58:06:36:e0:3d:e3:86:07:0d:
bd:18:c2:50:ac:6f:37:8f:98:e8:3e:2f:d6:d1:82:
b1:13:c2:71:b8:bd:6a:06:8d:47:5e:25:e8:da:7a:
f9:b1:c3:b9:fd:ec:ff:5e:ec:36:0e:96:81:ed:f2:
4b:36:4b:50:23:f8:0e:f7:79:4e:71:29:15:ae:53:
18:06:a8:f7:a8:4c:87:8d:39:d5:2f:61:33:7d:c5:
7b:9e:b5:fe:70:5b:f8:e8:d9:9b:97:0e:44:73:66:
fb:fa:68:67:47:16:17:b1:5d:05:6c:b2:aa:a9:c3:
39:f8:99:ea:70:82:98:2a:33:79:64:44:e3:62:e3:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:6F:35:30:1B:55:51:DE:4F:6C:10:D2:35:D6:75:C8:46:F7:71
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:cf:e8:84:80:06:3d:5c:06:28:20:b9:f5:e3:b1:7c:86:
3c:91:51:77:0a:65:7a:f6:19:8d:d5:2d:6e:6e:d8:63:4c:85:
e8:88:d8:12:62:58:75:dd:c4:e9:f5:fe:b5:60:94:30:59:e1:
a5:d8:fb:87:aa:a2:b6:25:d6:4e:3f:7e:b8:03:17:cb:04:41:
4e:59:1a:f1:fd:d7:00:13:d4:a0:e4:81:5f:fb:c3:ee:7a:6c:
8d:22:df:04:bf:41:5b:28:0d:f9:ae:19:4b:c4:38:09:bc:df:
bb:3d:2f:6a:9e:d3:90:ec:5c:f1:8e:7e:c3:3b:76:c1:79:7e:
ca:01:29:53:ff:4a:b1:be:c8:f4:8a:46:06:24:5b:9e:5d:c7:
89:07:98:cc:bd:80:c0:42:f6:25:ae:92:18:3d:b2:e4:c2:dc:
93:1a:2a:7f:35:b9:61:e0:b8:c5:5f:8e:35:9c:dd:53:17:05:
42:8f:05:9c:d9:79:de:aa:e5:d2:4b:8d:e8:7e:a7:aa:f1:4b:
b0:ed:59:d1:2e:82:47:4f:d4:bb:84:6b:c2:f0:da:a7:bb:e7:
29:88:73:7d:40:82:08:cb:4b:1c:ff:9f:9b:e6:12:05:2a:d7:
6b:73:82:c4:86:6d:f6:e9:ad:58:f8:7c:69:26:bb:bf:28:13:
2f:65:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:07 2026 by rpki-client