Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
File: wSWw9XiOWBEj5eSfAB1S16f89a8.mft (raw, json)
Hash identifier: cLM0NRD+0KTFqld3y69jywKa0R6Z5BuEPjeIwxaxLvo=
Subject key identifier: 3A:C8:F0:0E:06:40:13:C8:19:D1:C6:5C:5D:54:68:FF:4F:06:77:C4
Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
Certificate issuer: /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Certificate serial: 01A03D15DC9EDCFE52FF579BB6F20BCFBB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
Manifest number: 047A
Signing time: Wed 26 Aug 2026 08:00:37 +0000
Manifest this update: Wed 26 Aug 2026 08:00:37 +0000
Manifest next update: Thu 27 Aug 2026 08:00:37 +0000
Files and hashes: 1: vmkoqoQ_otv0F89R60xz-Vuo-2g.roa (hash: iq0VYDEcTpvgBWZIkkSwVuASLLS7URTHNl2Z2J0KqqE=)
2: wSWw9XiOWBEj5eSfAB1S16f89a8.crl (hash: lRQoYM6UXmwhlqxLGAyDpxcD4rvlc2OFfCsKFb+fnAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:15:dc:9e:dc:fe:52:ff:57:9b:b6:f2:0b:cf:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Validity
Not Before: Aug 26 08:00:37 2026 GMT
Not After : Aug 27 08:00:37 2026 GMT
Subject: CN=3ac8f00e064013c819d1c65c5d5468ff4f0677c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:80:2c:31:27:cf:29:3d:1f:88:90:84:9b:
8d:91:38:e2:00:a7:33:58:4c:a1:cb:bf:23:65:74:
96:ef:f7:a5:83:35:a9:4a:14:bf:b0:55:86:c8:cb:
26:22:99:bc:04:db:6b:28:1b:37:f0:3c:6a:04:fa:
d3:86:be:37:0f:4f:72:b9:7f:75:a8:5b:88:95:80:
d8:55:34:1f:5f:c3:f4:09:e8:af:84:b6:af:79:0c:
a9:13:c4:f0:d2:94:1b:70:90:62:df:1e:fd:fa:36:
63:4d:fd:86:52:ad:dc:f6:3a:1e:c3:95:29:21:bd:
89:4a:30:ed:70:70:32:52:52:d3:95:44:0b:ba:51:
e1:4f:e8:07:b9:d5:c7:b9:48:83:a8:54:21:83:ab:
d7:7a:a1:f6:59:51:6f:8c:85:54:64:d2:dc:d3:cb:
67:f3:fe:28:f7:12:91:41:6a:27:60:67:b9:fe:a2:
61:ec:c9:d1:74:82:cd:a7:5d:8a:cf:04:23:e0:eb:
c7:28:3e:21:87:e1:e8:d7:83:8c:2f:ae:a3:6c:a3:
d5:44:c5:41:f4:93:c6:fc:72:c9:f2:57:ad:cd:11:
c1:42:d4:e3:f6:d5:7f:ac:cc:9f:cf:05:f1:b3:6d:
f1:3e:aa:28:0e:c3:57:17:33:6f:34:b5:7b:13:66:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C8:F0:0E:06:40:13:C8:19:D1:C6:5C:5D:54:68:FF:4F:06:77:C4
X509v3 Authority Key Identifier:
keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:6f:44:14:a0:89:75:bd:64:12:64:68:a0:8f:e7:d8:e2:
52:d8:73:18:85:e6:c1:e1:f0:c8:f7:47:c4:95:9a:03:07:3c:
63:21:35:ac:d3:a6:2a:d9:e8:43:e4:0e:d4:fe:b0:47:ef:ae:
3a:50:a4:f0:24:10:09:81:d5:0a:c8:58:2a:58:98:6f:bd:aa:
d9:d1:ee:c6:ce:2a:dc:53:bd:81:49:08:ad:00:fb:24:5f:de:
94:62:15:8e:b7:da:6a:c0:07:0f:78:87:79:62:71:06:da:8c:
86:d6:25:cd:f5:7d:ce:20:4d:5e:44:d0:21:90:ea:e6:64:31:
e0:c6:2f:76:b0:e0:cd:9e:4e:11:f1:f4:22:01:98:e6:25:8e:
a0:ae:ac:a0:8a:a3:af:bd:a0:c0:c0:51:63:34:b6:b0:ce:fe:
65:c2:41:85:95:64:7c:96:b8:d6:1d:e7:0a:27:d1:6a:6a:4f:
c4:48:68:0b:3c:e0:33:2d:5f:63:94:81:68:7f:bb:d3:ea:45:
43:a9:00:45:8a:5e:9a:0b:31:d6:9c:6c:30:a9:e3:f4:66:8d:
96:b7:b0:ce:b1:d7:dc:7c:b1:ac:ac:b2:3d:cb:f5:94:10:09:
5e:3d:fa:d0:ad:88:b6:e5:9a:64:25:c1:53:8a:06:00:1a:32:
93:33:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:18:02 2026 by rpki-client