Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: QTlO/pMUQDLCCMbW1DsNX72oXSPQZLdIxiuHavQ6jsM=
Subject key identifier: 2F:3A:D7:AD:A5:F2:B8:09:77:D0:84:2B:C1:33:27:4B:98:B1:1E:A0
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019F82D5273D53EDCEC5F82857214EF00F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 0438
Signing time: Tue 21 Jul 2026 04:00:34 +0000
Manifest this update: Tue 21 Jul 2026 04:00:34 +0000
Manifest next update: Wed 22 Jul 2026 04:00:34 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: NsL8CqT9BeLXkX8BQE0M6vpHFXF3zBblZHf/XRgJo5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:27:3d:53:ed:ce:c5:f8:28:57:21:4e:f0:0f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Jul 21 04:00:34 2026 GMT
Not After : Jul 22 04:00:34 2026 GMT
Subject: CN=2f3ad7ada5f2b80977d0842bc133274b98b11ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:5f:b6:f5:9c:52:5e:5c:a0:d5:2a:86:5e:
0e:79:e2:d7:37:e5:06:ad:02:95:c2:ee:33:e5:7e:
4f:0d:1c:ab:45:04:2d:77:bb:7f:24:75:49:f2:0b:
5e:00:6a:04:ef:37:7d:0b:06:fc:0e:6d:e6:81:fc:
95:6c:84:4a:a3:82:d4:39:09:27:d8:5f:09:35:5b:
7e:31:32:9f:ff:25:1a:df:17:a6:72:31:09:10:b4:
0c:0e:d5:ed:29:ef:5f:2c:10:b1:73:9e:96:c2:88:
3d:79:6d:19:fb:c1:29:e0:09:eb:3e:50:f3:fa:b4:
37:0b:07:6d:6d:8e:64:d4:85:5a:7d:14:42:f3:2a:
8a:7e:29:6e:b0:8f:22:be:cf:82:dd:33:6d:7b:c6:
7c:2c:9b:9b:c6:c8:9c:f3:93:29:ab:4a:14:a2:3d:
61:56:b8:bb:16:a3:97:1b:6d:7d:57:71:b1:2f:51:
75:3c:c7:e8:78:1d:17:08:8a:0c:d1:1f:a1:c7:8a:
03:93:35:8e:02:5b:59:d3:89:f0:e1:6d:16:6c:92:
8e:bc:e5:41:b7:ba:e4:a7:47:44:11:09:00:e7:d4:
1f:4e:ba:07:e1:09:b6:c5:6e:99:aa:20:c7:76:23:
9a:4e:ad:83:38:2f:1b:dd:59:40:1d:44:f3:fa:53:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:D7:AD:A5:F2:B8:09:77:D0:84:2B:C1:33:27:4B:98:B1:1E:A0
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:92:73:78:be:74:69:2d:c1:a6:f2:b9:8d:cc:ab:ca:da:c4:
a6:b4:7c:9b:84:df:9a:26:6e:6a:3d:41:d0:0c:f4:a2:d6:2b:
da:10:3d:68:c7:93:bc:a0:9a:2a:da:88:fc:f9:8a:78:12:20:
f7:11:2e:70:81:c2:c8:21:26:c7:4b:35:ad:52:29:4a:95:9c:
41:11:bc:98:fe:78:09:e2:04:ee:e0:8a:fc:3d:47:f1:62:02:
7e:94:f0:53:d0:9d:9d:b2:68:1c:f0:24:9e:0d:55:e6:23:e2:
39:78:cc:3d:1e:44:3d:98:b7:45:e0:28:d3:e3:d6:1a:0b:0d:
ba:95:16:1a:38:c8:75:1f:d9:c2:f2:bf:37:cc:5e:ed:2a:b0:
d2:af:24:48:92:8c:71:79:16:1e:7c:f2:b5:a7:06:a8:ec:5c:
9c:76:59:de:33:cf:ad:9c:6f:34:ce:49:19:7d:40:a3:5d:63:
37:33:3d:96:1a:8d:bd:09:7a:e4:2d:ce:fb:32:a5:60:3f:77:
13:4a:4f:b5:92:0e:b9:ef:d8:9e:82:a1:0a:20:00:45:c9:d6:
9e:e0:a9:89:f7:54:94:45:69:78:e5:c4:8c:d2:35:8d:11:10:
a3:1e:79:6d:bc:91:63:a0:91:bb:a4:fd:78:ab:20:e4:86:7f:
84:43:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:56:17 2026 by rpki-client