Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: ocEimTfXSZMgxIZZuExPV06bu8WsqPC89Kg/dLOoIec=
Subject key identifier: C1:29:65:44:F0:F9:C3:49:FF:BD:A0:31:AD:F1:16:A0:5C:7E:94:AB
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 01A1DE02FEFFB40209CF9E83E08580CD6415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0BC7
Signing time: Sun 15 Nov 2026 07:01:40 +0000
Manifest this update: Sun 15 Nov 2026 07:01:40 +0000
Manifest next update: Mon 16 Nov 2026 07:01:40 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: zhNQbkJOZ+7Uwl4o0onmwlWfNRHrLt6nRLnQzj+JLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:fe:ff:b4:02:09:cf:9e:83:e0:85:80:cd:64:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Nov 15 07:01:40 2026 GMT
Not After : Nov 16 07:01:40 2026 GMT
Subject: CN=c1296544f0f9c349ffbda031adf116a05c7e94ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:02:3c:2f:a1:b6:fd:6d:fd:c1:03:ef:88:
ad:c9:bf:0c:17:6b:e3:37:bc:fa:5e:a0:5d:6d:18:
8a:4f:9c:28:a7:19:4f:9a:1a:e1:33:f8:4c:ea:36:
60:bd:4d:d0:d3:7e:a4:6f:ef:89:99:44:60:f5:04:
ec:1e:28:23:7f:88:3f:66:e3:e2:50:78:54:7b:1b:
d8:7a:cb:b7:8e:c5:c0:16:25:de:64:1f:f6:dc:a1:
03:e1:61:e5:e6:30:ac:b6:0e:56:c2:72:db:08:5a:
94:a6:bb:16:4a:10:f6:21:c2:cd:69:a0:7f:4b:38:
07:f4:b0:7c:48:4b:a5:28:28:b2:3b:f5:e1:17:b0:
33:eb:c1:b1:07:fb:87:d5:7f:8b:83:5c:d9:f7:e2:
5e:af:20:44:5c:ef:a0:eb:4d:2e:f8:af:8d:f4:24:
ab:a7:03:ad:ef:d0:f2:18:f5:c7:32:a3:2d:76:c4:
4a:5d:a9:80:cc:5b:dc:f4:9c:71:4f:9c:00:2a:5e:
23:df:a6:73:d6:ab:49:8e:b9:3d:18:0f:70:71:2b:
38:99:09:68:60:74:e5:c4:f8:f1:ab:f0:ff:94:0c:
e1:b9:3b:ca:5b:0d:e9:30:cf:8e:0c:cf:f9:18:d1:
8f:af:4e:d9:00:66:83:08:02:e8:c3:33:44:ec:4a:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:65:44:F0:F9:C3:49:FF:BD:A0:31:AD:F1:16:A0:5C:7E:94:AB
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:77:76:cb:80:79:70:b2:76:4b:62:d3:ba:53:1e:84:22:da:
02:15:04:c2:12:59:d0:16:f6:63:14:da:11:f0:0c:74:b3:b2:
c9:d1:f2:80:72:3b:d8:20:71:07:cd:d3:e7:90:b4:c6:13:32:
fd:4d:0a:9a:d4:6a:b0:68:dc:78:a2:d1:9a:9a:57:0c:58:ca:
b7:de:b3:fe:99:12:6b:98:07:c7:85:49:fb:b8:01:f4:43:74:
a2:73:77:94:5a:bc:bc:e1:53:42:2e:4e:7d:37:43:24:a0:86:
4c:be:c4:16:c7:aa:fe:b0:c8:5f:1c:83:a0:2f:a5:78:9e:60:
dd:54:82:68:02:d0:8a:84:41:b3:6c:14:8d:e2:f6:0b:f0:d3:
c5:82:be:c7:3c:be:a5:7c:7d:0f:82:ea:fc:c5:a4:fb:02:76:
9e:01:93:64:80:bc:09:3c:50:72:5b:8d:a5:db:9e:d5:fb:cf:
fa:6d:86:62:82:15:d3:e3:98:93:1e:35:41:17:29:e1:92:08:
79:20:e7:ed:52:fd:c8:37:d8:6b:c6:a8:07:9a:30:b4:90:07:
c5:3f:d4:8d:c8:92:00:a4:5d:9b:51:e4:7f:d1:4d:75:bd:8d:
47:ab:67:f5:e1:ca:9b:be:2d:43:c9:d6:c6:d6:53:b3:ff:0d:
99:78:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:44:50 2026 by rpki-client