Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier: FX9UpwHXf66/pbWZ61nlXkVV4BbVKROzbIHIKErkrYc=
Subject key identifier: F9:8A:64:EE:67:AB:FA:C9:28:6C:F9:5E:AC:CA:83:47:42:B3:E0:65
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 01A08AFA797A911D6FE92EFC36ED523A9AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number: 0EA7
Signing time: Thu 10 Sep 2026 11:01:05 +0000
Manifest this update: Thu 10 Sep 2026 11:01:05 +0000
Manifest next update: Fri 11 Sep 2026 11:01:05 +0000
Files and hashes: 1: _7mKcHkP3uOTS3kjipFm2tPGwgM.roa (hash: ngQx3yfqLseWqUcTbW2AyI+1iXtC1eJXGPQDz+lGjDw=)
2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: prW/2btkVglX0C1aEh8gVDPZy3iF85MYe7O8f1M05BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:79:7a:91:1d:6f:e9:2e:fc:36:ed:52:3a:9a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Sep 10 11:01:05 2026 GMT
Not After : Sep 11 11:01:05 2026 GMT
Subject: CN=f98a64ee67abfac9286cf95eacca834742b3e065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:05:39:86:25:0c:e3:35:f1:0a:36:35:34:
da:99:f8:1a:93:57:cf:67:d6:49:01:f4:22:dd:07:
b8:a6:e3:3f:d3:b1:85:65:61:91:88:50:36:43:7f:
46:95:29:a7:ce:2b:ca:22:b9:eb:ff:5a:4a:ec:63:
ea:be:b0:81:99:42:28:54:de:eb:6d:7b:52:89:ac:
99:ea:cb:86:26:58:49:ff:9b:6d:02:a4:65:56:23:
74:25:b4:df:cb:f7:16:6c:a3:c8:db:8d:05:1b:e9:
b3:72:4a:47:7a:f8:5b:7d:ce:ec:b8:c5:9e:93:ed:
30:94:3f:a3:ac:8f:58:04:04:b5:28:88:f0:a8:23:
55:03:50:21:29:83:a3:ba:6f:c8:2a:34:6c:3d:e6:
65:6c:5b:9e:91:b3:a2:cb:ff:d4:72:85:cd:87:8a:
a1:c5:f4:e5:0c:2a:e7:4b:d0:31:54:22:59:6c:4d:
65:c4:d5:73:b3:cb:f7:a8:29:e6:81:b5:b7:ef:25:
a4:07:26:fd:29:95:17:18:8a:72:26:47:d8:75:ec:
9d:9a:cd:db:8a:af:54:65:1b:94:df:f0:c4:10:65:
23:ec:e3:79:03:08:58:24:11:24:e3:cd:26:03:94:
bc:79:1f:c6:53:69:fd:54:a6:d6:18:3c:d9:56:b6:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:64:EE:67:AB:FA:C9:28:6C:F9:5E:AC:CA:83:47:42:B3:E0:65
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:71:c8:46:b7:84:7e:56:1b:4f:60:5a:8e:bc:b5:ef:ac:4d:
fc:54:44:93:f3:a9:52:f8:20:b9:71:30:f5:5f:8b:9f:a2:be:
1b:f2:ca:8e:7b:1f:b6:b5:33:bc:f4:9d:a3:80:74:27:f1:76:
06:72:0d:68:42:a8:70:34:ec:2d:54:7d:ab:be:5d:97:40:52:
b8:3b:c5:d8:71:73:fc:19:b4:a6:c1:68:a1:d8:ed:80:62:82:
91:01:af:e1:2a:7f:62:9f:52:6b:a7:78:50:19:65:f5:f7:d4:
86:6f:7b:3d:f7:9b:63:dc:b5:e0:30:f9:c1:83:6c:54:34:f4:
06:67:58:ee:cc:3b:c6:d1:e5:80:a4:79:8b:86:c8:9a:12:06:
37:f2:0a:c8:74:2d:93:85:fe:6d:56:5d:af:21:7d:3d:c7:43:
2e:2b:7e:14:d8:30:b1:82:60:7f:c7:e1:81:68:94:be:04:0c:
24:9d:f8:c8:c1:3e:ce:07:20:84:dc:a7:9f:19:ce:ba:77:a8:
fd:e1:5b:a4:53:29:33:06:97:2a:1c:0d:35:80:95:21:eb:8c:
cd:a8:09:67:a1:db:c7:09:6c:25:da:7b:c6:ea:68:56:fc:9d:
82:3e:60:eb:68:54:a5:92:76:25:47:15:3b:cd:88:63:6d:4d:
b2:1b:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:10 2026 by rpki-client