Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: QdPEYz4c95PbJmG7hTcwCH+ME9cJX+QcYczSaU1AE+4=
Subject key identifier: 41:A4:BF:40:52:88:CE:EB:76:CC:3F:FC:66:07:66:F6:73:02:08:7F
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 01A0E1072D8E91D8B7D76B4220EDBDA42225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 047E
Signing time: Sun 27 Sep 2026 04:02:19 +0000
Manifest this update: Sun 27 Sep 2026 04:02:19 +0000
Manifest next update: Mon 28 Sep 2026 04:02:19 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: 9sMhbywN3KvHWC389hsJ0Wh+GmCv9jUNKZhh4B0HdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:2d:8e:91:d8:b7:d7:6b:42:20:ed:bd:a4:22:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Sep 27 04:02:19 2026 GMT
Not After : Sep 28 04:02:19 2026 GMT
Subject: CN=41a4bf405288ceeb76cc3ffc660766f67302087f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:a2:95:f3:fa:6c:18:5c:6e:23:21:5f:02:
e8:b6:a1:ac:8e:49:7e:60:ff:88:88:e4:82:37:ce:
17:b3:b0:70:cd:b0:f0:74:e1:51:1d:fd:08:27:5f:
cc:27:46:83:44:83:1e:b7:31:2b:b4:f5:a3:f9:85:
1b:35:f7:2d:ec:58:2b:fc:c5:68:4e:a3:a1:09:73:
9c:4f:d9:b4:c7:b8:e7:20:77:87:8a:b4:0d:b7:e6:
44:0f:15:f6:40:7a:13:cb:64:59:e4:84:38:d0:21:
40:7f:23:50:d5:32:87:82:4d:86:b5:a1:3f:0d:35:
6c:ba:87:d7:b3:f9:b0:d9:61:6c:78:a6:26:02:f7:
f3:0b:5e:d7:54:cb:f5:91:f4:d8:83:9e:57:e8:df:
59:a3:52:83:03:d9:bc:9c:7c:2c:48:29:1d:17:0d:
64:cd:63:31:75:36:c5:3c:70:bd:84:29:0f:79:d4:
e0:a3:8e:2c:9c:64:e7:34:2b:31:2e:24:2b:b5:2f:
e5:37:52:80:de:40:31:d3:91:ae:39:38:d0:e0:e6:
2b:a2:ec:25:73:60:80:d2:23:19:88:58:d0:b6:0d:
be:d2:97:5d:32:b9:01:7a:cf:69:24:76:c9:29:1b:
0e:0a:7a:96:d7:b1:82:be:aa:cb:ad:8b:1a:2f:c9:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:BF:40:52:88:CE:EB:76:CC:3F:FC:66:07:66:F6:73:02:08:7F
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:57:dd:f1:a6:be:8f:fd:16:5a:0d:cc:7f:67:63:36:f3:
ed:b2:c2:b8:16:d5:7c:c7:56:5f:f1:d3:86:5c:b6:4e:ef:ee:
b4:dd:45:1a:2c:c9:d7:6f:a6:e8:3f:ab:a2:02:ea:c7:e7:86:
5a:c5:13:45:88:72:a9:94:d0:75:f7:85:47:02:16:a0:ec:89:
b6:7b:99:b5:8c:e4:85:bb:12:21:aa:95:19:49:db:83:b6:fc:
a3:ac:19:e8:a0:ca:2e:5c:0b:8d:93:56:c3:18:e0:9a:31:87:
e5:bc:28:d0:a5:da:ec:df:49:4a:fe:61:6a:4c:ea:46:57:15:
ac:cf:dc:8c:01:6a:e3:c0:1b:c9:7a:0e:9d:4a:48:d3:33:45:
2b:5e:cc:20:a0:db:7f:a1:3c:b1:7b:cb:14:0a:d8:54:b4:bb:
5a:34:79:7d:f1:f5:a0:f7:bf:d6:4e:62:6e:db:a0:d4:20:81:
82:40:18:db:85:ce:13:1e:35:66:a0:b4:7d:b5:96:be:a5:3e:
c4:ab:38:7a:4c:01:e1:8c:5b:2e:3d:27:2d:c6:1e:0b:e0:f8:
bc:d8:60:f5:c3:fd:5c:04:07:cc:d0:71:34:c1:7a:e0:4a:ed:
0d:42:be:96:dc:6e:42:cb:41:4b:d2:3f:61:29:a0:88:85:da:
50:cd:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:56:14 2026 by rpki-client