Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: gZ5T63+i/wZoEjiV1+fyjNVfMi49Iism+CaFTCmGxDs=
Subject key identifier: 3D:E4:02:31:89:D0:D5:A7:60:67:8B:39:65:BB:61:CF:9F:3B:4B:D4
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01A0D237296A8F70FCADC97281A1424BB6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0AE4
Signing time: Thu 24 Sep 2026 07:00:25 +0000
Manifest this update: Thu 24 Sep 2026 07:00:25 +0000
Manifest next update: Fri 25 Sep 2026 07:00:25 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: g3Ew8kvxN7gDTm1474ADexYG9gBqFI0G8LBUvKT9W0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:29:6a:8f:70:fc:ad:c9:72:81:a1:42:4b:b6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Sep 24 07:00:25 2026 GMT
Not After : Sep 25 07:00:25 2026 GMT
Subject: CN=3de4023189d0d5a760678b3965bb61cf9f3b4bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:07:1c:11:92:84:51:14:e0:52:1c:4d:3a:
9c:a3:17:fc:79:3a:69:ed:0e:5d:28:c9:7e:11:a1:
a2:aa:e6:6f:f4:55:7e:98:fc:e5:f6:d9:4f:c2:6f:
78:54:99:1b:40:63:7e:dc:be:89:a6:05:c1:57:b4:
18:c4:18:64:89:56:05:53:36:4f:15:8b:7f:ee:7b:
ed:6a:fc:28:46:5c:3e:35:8a:9f:c4:73:7a:63:e9:
8a:da:05:60:05:3c:c6:39:14:8b:fb:76:6e:30:06:
68:ad:5b:7c:a1:c4:63:66:b8:b5:2f:23:ec:93:ec:
28:a2:c1:26:31:47:c7:76:18:a2:64:04:8b:27:89:
89:8b:be:64:b4:ee:70:c2:a8:24:f9:59:b6:61:89:
5c:b0:ec:c8:14:99:e5:56:37:8a:c4:80:f1:9e:04:
74:5d:b5:8e:a7:b5:c7:5b:59:46:6f:6f:43:d9:70:
fd:f6:24:61:c5:14:e0:0f:52:55:f3:f2:8e:41:3f:
5f:3c:63:7f:4b:df:09:1f:07:c4:e3:3c:08:b0:f1:
67:07:0d:b7:2b:46:ad:db:7f:a5:69:21:1d:32:fa:
24:54:e4:09:83:f8:e6:11:cc:ef:16:c2:9e:43:d1:
41:99:f4:23:60:dc:2f:ff:96:2d:fb:b7:22:79:6c:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:02:31:89:D0:D5:A7:60:67:8B:39:65:BB:61:CF:9F:3B:4B:D4
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:e4:a3:5b:71:b3:d9:c3:c4:e4:0b:1e:b8:38:88:3e:0d:
36:29:b3:83:84:a9:62:96:c3:f8:9d:c2:80:23:68:dd:27:e9:
98:57:3d:10:e0:ce:79:6d:50:7e:26:2a:1e:25:e0:0e:fe:a6:
3e:50:93:df:67:6f:cf:1d:b9:ad:bb:3d:87:19:9b:d2:22:20:
ab:98:91:78:bd:dd:75:b6:43:f1:47:f9:1d:44:57:27:02:d2:
a8:9c:1f:83:72:40:c4:9e:23:ba:d2:be:fb:d8:32:30:25:c2:
2b:3b:ec:67:ab:f5:ef:a3:05:61:9d:87:99:a7:cd:11:e8:40:
c1:cd:67:49:f0:38:4a:b8:56:51:2c:0c:ea:0f:de:41:97:31:
2b:03:c7:9f:3a:1d:e4:40:18:19:d2:78:7b:f0:1f:97:ae:86:
e1:e5:59:2d:9a:a5:ff:1f:e6:eb:aa:27:c4:fb:22:aa:63:e4:
ca:fe:4a:e6:b7:0e:5d:f4:af:f0:9e:9e:9c:3d:bd:43:6e:49:
bc:43:2b:98:1d:33:da:e6:00:81:08:c5:a5:d3:2f:ec:bf:d1:
31:11:0f:8f:d9:0f:47:a4:af:94:fb:23:ff:42:d4:1e:86:cf:
5d:bd:73:ae:95:d3:73:ec:d7:64:03:76:56:f1:e8:bb:2d:62:
86:6d:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:09:40 2026 by rpki-client