Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: 0JOA133CuLQ3I2QacS8RnKeTzqApbRUt0ClCShiHl8Y=
Subject key identifier: 0D:13:AA:94:CE:FA:59:B0:22:6F:2C:52:33:43:09:43:8A:7A:35:BB
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019F94371E4B2A67E4FE3C14F9CAB0E5BCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0619
Signing time: Fri 24 Jul 2026 13:01:07 +0000
Manifest this update: Fri 24 Jul 2026 13:01:07 +0000
Manifest next update: Sat 25 Jul 2026 13:01:07 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: tt4cxTlco2xwuiXsp1kKGReB0MoRamaosaAowxibXO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:1e:4b:2a:67:e4:fe:3c:14:f9:ca:b0:e5:bc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Jul 24 13:01:07 2026 GMT
Not After : Jul 25 13:01:07 2026 GMT
Subject: CN=0d13aa94cefa59b0226f2c52334309438a7a35bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:72:ff:6c:fc:b1:f8:a3:bf:b7:02:72:d4:
1f:68:c7:f8:c7:50:d5:27:f7:7a:39:73:cc:ae:1a:
94:1a:ce:42:2e:7a:6d:67:72:c9:71:7b:61:25:1e:
04:e6:d3:5b:72:6a:6b:36:36:4b:0e:72:eb:c8:99:
cc:91:28:ca:1a:e0:2b:3a:8f:2d:25:d5:38:c9:f6:
60:4c:a3:28:54:18:02:2f:44:01:9a:27:37:19:42:
4c:d0:c2:9f:03:97:a0:b7:4d:9e:63:59:d9:11:bd:
0f:d4:cc:e3:1e:69:9b:84:67:85:36:8f:4d:1e:94:
cb:b8:bf:47:14:f8:73:ad:b2:d1:76:fb:c2:c6:e5:
4d:89:61:e7:ea:85:0e:81:f5:e9:62:40:dd:b9:4f:
9a:7b:c1:b1:3e:cd:e2:48:9c:fe:f8:14:38:c0:48:
7f:9a:03:43:cf:18:0e:b8:6b:49:16:bf:06:aa:47:
e4:66:0f:45:8b:e8:41:ae:aa:b5:39:c2:26:24:8c:
f1:d7:1b:77:3c:cd:76:9f:51:88:e0:a7:58:e8:3a:
4a:89:80:df:eb:cd:00:cc:93:61:40:ed:27:af:88:
1c:86:6f:e6:3e:34:34:24:62:b7:57:65:53:3c:ea:
28:22:5c:df:24:c5:c1:07:7e:70:55:5c:55:b9:31:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:AA:94:CE:FA:59:B0:22:6F:2C:52:33:43:09:43:8A:7A:35:BB
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:27:11:47:d9:e0:8c:93:8f:0c:bd:f3:9e:f4:72:57:af:ad:
fd:f7:3c:6f:9d:74:45:d2:57:08:b4:9e:b6:98:4d:8b:c3:ab:
24:ae:e2:c1:2e:a2:84:da:d2:44:7c:a4:96:f8:8b:db:d0:51:
1f:b9:5d:b0:3f:88:1c:77:32:55:e6:4d:ff:90:b5:b5:7c:23:
59:7b:37:79:ae:59:d0:da:06:7b:60:c4:3a:51:14:04:76:f9:
96:d9:30:55:f7:c6:22:05:c0:cf:57:38:0a:8f:f0:a1:25:0b:
24:aa:8b:f4:ae:04:d0:cd:8c:00:08:f7:29:2f:89:f7:9e:45:
d5:75:9c:85:c3:6a:c6:0f:e0:95:a8:d5:08:fe:30:d6:22:9f:
cf:58:32:90:58:80:35:06:6e:88:ab:cf:86:76:df:08:55:ce:
ba:9c:dc:b4:3f:e7:6a:ed:57:68:96:83:f3:db:f1:cd:9a:b3:
bb:58:b7:9d:cb:fb:72:83:01:85:77:52:95:d7:f7:ce:5e:a1:
e5:35:f9:66:7b:10:a0:bf:c8:37:22:e1:fa:77:0e:0a:a4:68:
ea:0d:53:80:90:12:a7:4f:4a:92:e0:c4:15:66:86:02:d6:00:
0c:3e:64:75:07:25:c5:80:13:d1:45:85:62:6c:f5:2b:2d:8f:
64:89:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:49 2026 by rpki-client