Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: Poa8SwXX5U81S/DP8LWSrAqXLniuXV8/960l9pXWN3Q=
Subject key identifier: 06:6E:34:A3:2A:63:76:FC:A2:AA:FC:F6:85:D2:55:44:11:9D:41:6B
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 019F11F808AD6CA3FBAB54C9A322A64A9DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 1532
Signing time: Mon 29 Jun 2026 06:01:35 +0000
Manifest this update: Mon 29 Jun 2026 06:01:35 +0000
Manifest next update: Tue 30 Jun 2026 06:01:35 +0000
Files and hashes: 1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: cmRyT0QKX2rwlvDFzgFDyLNd9B03raGxMreDKokk6wQ=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:08:ad:6c:a3:fb:ab:54:c9:a3:22:a6:4a:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Jun 29 06:01:35 2026 GMT
Not After : Jun 30 06:01:35 2026 GMT
Subject: CN=066e34a32a6376fca2aafcf685d25544119d416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:fa:09:4c:84:06:ea:12:4d:9d:02:fa:fc:
33:f3:61:59:e1:85:00:c1:be:05:d4:30:18:1a:ba:
6f:60:a8:73:91:35:3b:af:44:7f:14:ad:65:ab:0a:
85:ae:24:26:a4:16:f6:51:b4:f2:91:3c:de:1c:7a:
4a:f8:ad:32:43:a7:a8:b7:01:aa:db:ca:e7:af:61:
c7:16:d9:03:28:34:21:f9:cf:29:60:fa:a0:d0:0a:
c9:20:1b:83:40:c6:16:88:f3:de:dc:89:df:86:1a:
0c:41:e5:24:4a:f6:e6:38:3e:85:7d:37:a4:bb:35:
86:dd:4f:ad:a4:9f:50:94:ba:b1:8d:b7:41:5d:b3:
71:8e:73:1b:54:1d:0c:c0:51:ee:cb:c2:1a:20:9a:
23:98:d0:1c:50:4b:da:0e:8b:8f:e0:b9:f7:f7:f9:
82:1c:87:25:f8:b1:de:7c:95:83:01:0b:1d:2e:85:
50:1d:75:03:1e:81:49:95:90:7f:8f:b1:e9:6e:d7:
77:92:b6:fd:7b:70:c7:7d:74:1a:c8:d7:25:2e:ed:
79:9a:4e:cd:af:80:35:89:69:89:5d:79:2a:23:6d:
88:16:74:86:03:92:62:50:4b:b9:ee:91:2a:53:88:
99:2d:46:ae:49:5d:da:c2:ed:31:07:40:43:5f:29:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:34:A3:2A:63:76:FC:A2:AA:FC:F6:85:D2:55:44:11:9D:41:6B
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:a5:60:e0:93:31:84:88:3a:e0:d1:40:b1:e3:88:bc:d7:
6d:e3:d4:f6:b5:20:73:fd:70:8e:d3:8c:c7:4f:92:7e:f1:30:
c0:46:50:c2:e8:78:19:eb:78:ac:7f:3c:16:21:ca:68:80:9f:
a3:c3:38:37:00:3b:12:ca:59:84:98:5c:83:21:6e:66:4d:de:
00:f4:a1:64:c6:62:07:66:4d:2e:4e:0f:c1:dc:74:24:35:c5:
70:ec:b4:19:27:ae:9f:52:1f:99:ec:71:48:00:16:4a:dc:46:
60:58:d5:51:9d:44:76:78:82:f2:6a:c3:7b:d0:60:b4:54:c0:
6f:f2:95:b7:55:96:72:c8:2f:4a:14:36:17:73:84:fd:2f:a0:
cf:3b:5e:18:aa:c8:57:93:c5:d3:24:30:67:cc:f0:44:04:42:
4a:c7:16:60:cc:6b:c9:49:59:d1:fc:68:14:47:9b:6f:c5:2d:
b6:50:50:53:bb:c3:2d:45:ad:4f:c0:75:6f:e5:e1:46:6a:a5:
a9:1f:6d:42:3a:b6:91:f9:1e:9a:a3:a7:a1:74:1f:97:b5:33:
1d:11:ac:30:2b:72:f8:5d:ad:f9:8d:4a:0c:5a:2d:7e:45:47:
c4:3e:97:a3:2b:a5:2c:b3:94:41:75:b0:c2:96:94:62:dd:6c:
7e:f4:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:26 2026 by rpki-client