Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: Fp/7DlWy2VvPOjVFyML1WDmVbgwFbKdCZrTMTokl0qU=
Subject key identifier: 3D:7A:6C:69:0D:38:F2:C2:F8:FE:90:2E:55:42:7A:03:75:C4:5E:87
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019F848C9824DBFE3D402BE8BAECC682EDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0FC4
Signing time: Tue 21 Jul 2026 12:00:34 +0000
Manifest this update: Tue 21 Jul 2026 12:00:34 +0000
Manifest next update: Wed 22 Jul 2026 12:00:34 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: MVeswNafsALelnlXahHXvwJyeTg7g/vyj8Bs4o/qMq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:98:24:db:fe:3d:40:2b:e8:ba:ec:c6:82:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Jul 21 12:00:34 2026 GMT
Not After : Jul 22 12:00:34 2026 GMT
Subject: CN=3d7a6c690d38f2c2f8fe902e55427a0375c45e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:9c:b5:85:e4:71:56:12:16:0e:31:f7:a2:
18:6a:fd:8b:4e:7a:2b:84:80:03:8c:46:13:23:55:
2b:58:66:4e:47:5c:95:8f:51:f9:dd:2f:0a:bd:0d:
f9:87:20:95:a2:62:40:79:b9:ae:1a:b1:c9:3f:81:
f2:34:53:ae:8a:de:3e:e1:2f:fc:06:83:f4:66:b0:
3b:a9:03:6e:c7:d3:ec:ab:f4:65:d3:1e:1f:8f:55:
82:94:a0:05:d2:3b:e9:7f:0d:66:e3:d2:d0:9e:a3:
38:26:0f:98:2e:4a:b0:2b:31:a5:bf:a7:bc:2a:e8:
34:a6:0b:e8:85:73:5f:58:e6:3a:d9:4a:9b:f3:b9:
78:6c:87:ba:b9:a7:a3:b8:7c:ca:56:e1:cc:6d:7d:
74:ab:17:65:70:fd:b8:7c:45:97:81:d5:23:33:03:
17:85:01:f7:45:24:d0:02:b0:82:aa:05:20:26:a8:
dc:21:43:f3:cb:50:84:fb:4c:cf:14:fe:ea:5e:cc:
dc:da:33:0f:57:36:97:3c:45:69:22:22:3c:c8:ec:
0d:ea:84:f9:2a:cd:89:d7:00:4a:84:c9:3d:53:dd:
e0:6c:6d:b7:ff:11:e1:d4:5d:1c:27:3f:58:56:f1:
ee:e6:13:e8:ea:a3:cf:15:a9:fd:2d:7c:6e:7d:4f:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:6C:69:0D:38:F2:C2:F8:FE:90:2E:55:42:7A:03:75:C4:5E:87
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:57:b6:1d:56:01:90:fa:6d:57:77:ef:de:fa:d0:8d:d3:
d8:8c:a8:88:0f:7d:77:b4:19:28:21:dd:54:09:95:c6:8f:2b:
6a:97:37:ef:36:f8:a4:30:e2:83:ee:3b:59:9f:11:f9:8a:65:
04:f1:85:78:d8:50:4f:b9:c4:ac:08:d5:8c:16:8a:df:28:12:
3a:11:e7:5e:a7:19:8e:6a:14:c6:ab:e5:73:b3:07:1b:0d:9b:
b8:63:2b:e2:ba:2d:38:86:ab:0c:c5:4d:b9:54:ec:6c:36:21:
62:7f:57:fa:8d:ec:57:04:be:d7:49:f1:e7:58:7d:87:2c:b8:
c2:ae:73:cd:e4:26:e2:83:1d:88:24:52:85:54:2e:49:29:65:
55:dc:e4:f8:ef:c5:53:43:33:b3:d3:8d:ee:77:42:6d:6d:da:
bd:65:cb:d3:26:d8:a5:e2:c4:d6:d5:eb:df:60:da:3b:6c:a8:
27:c4:d4:58:6f:6b:da:50:1c:34:65:2a:94:d5:c3:c1:69:42:
38:c8:99:ea:43:83:14:47:80:6a:37:c5:3e:51:1c:a1:21:d1:
a3:e0:f0:f1:fa:c0:55:f7:5d:d2:71:36:a9:2e:83:ec:f4:96:
33:8b:77:c0:c4:48:1d:e4:51:33:2f:c3:ac:7a:da:0b:37:01:
77:41:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:44 2026 by rpki-client