Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
File: wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft (raw, json)
Hash identifier: 9oteBHZVlXC88C75ND1b8EwYv1BvPWUmlR5Av1gv38k=
Subject key identifier: EB:28:43:90:AE:59:17:B0:2E:FD:38:03:F4:06:CB:42:85:8B:5C:1A
Authority key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Certificate issuer: /CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Certificate serial: 019FA0E0A1A9930690012171BEFDC7DAF9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:43 +0000
Manifest this update: Mon 27 Jul 2026 00:01:43 +0000
Manifest next update: Tue 28 Jul 2026 00:01:43 +0000
Files and hashes: 1: n-LkYEYl_BKToTd94568MGgE5jc.roa (hash: dbNcQZB+XqGNZ6CWLvpvwNF67hivn9OZiLltxklIlbE=)
2: wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl (hash: gN2hr7uV58HF7FaGVpnPjJOWs34SIRrUQ7XlP7R9h+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:a1:a9:93:06:90:01:21:71:be:fd:c7:da:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Validity
Not Before: Jul 27 00:01:43 2026 GMT
Not After : Jul 28 00:01:43 2026 GMT
Subject: CN=eb284390ae5917b02efd3803f406cb42858b5c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:e0:9d:10:8a:d1:90:b3:88:3a:88:70:70:
59:72:22:b2:f3:ba:e6:ac:b0:8a:e5:22:93:60:9a:
d9:26:5c:34:da:64:09:fa:6a:86:2e:41:59:b5:59:
cd:f5:7a:a9:68:aa:13:79:95:cd:c3:04:7e:ef:55:
27:0b:7a:b5:a1:dd:f6:87:e1:5b:a1:f7:af:bf:81:
fe:c6:c4:79:89:d5:66:53:11:94:d5:04:93:af:46:
ec:1e:bc:d4:8c:d4:78:d4:4b:90:09:d3:43:8a:35:
05:ea:ce:af:51:4a:94:bc:87:b1:87:d4:e8:79:6f:
7c:ec:0d:09:d4:32:b0:68:45:68:d1:65:3b:52:1f:
9c:52:65:69:4b:59:64:fc:9d:68:38:a1:a9:87:a5:
85:a5:32:dd:e1:df:4a:a6:a8:49:26:7f:1d:24:d4:
40:3b:fc:a6:8e:a6:1d:2f:bd:12:94:f5:a8:7f:3d:
19:24:58:e9:1e:1b:40:f7:bd:62:41:af:eb:f7:8a:
3d:02:c1:12:a6:2a:a7:88:c6:7e:b8:e4:8e:3d:54:
46:d6:db:b5:80:fd:bc:e3:2a:7f:d6:0c:49:59:d2:
05:59:b5:c4:41:2a:f8:4c:11:f4:c1:4a:13:1b:f7:
27:a1:62:d1:56:6e:b9:bc:d8:9a:8c:60:45:85:99:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:43:90:AE:59:17:B0:2E:FD:38:03:F4:06:CB:42:85:8B:5C:1A
X509v3 Authority Key Identifier:
keyid:C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1a:49:b8:81:9f:3c:40:8d:98:85:0d:f1:f2:36:6a:01:0a:
77:89:6c:b6:ac:89:5a:b4:d5:6d:08:e2:6a:43:9d:73:a4:cd:
2e:74:18:1b:96:d9:24:03:a9:3d:dc:ab:7c:0f:ba:f5:42:85:
9c:27:35:e2:9d:04:ab:d3:7a:04:77:81:23:79:ca:18:49:fb:
52:62:07:53:70:da:e6:47:d5:ee:d6:36:2c:ee:f5:99:b1:fc:
93:81:61:25:55:02:31:ce:6e:76:fd:83:16:f7:64:c9:d8:4e:
84:f2:08:77:ed:a0:7f:15:ef:29:02:cd:61:cb:dc:37:24:02:
62:dc:1b:1c:55:50:a1:4d:ac:b4:87:7b:26:00:49:f6:1e:a7:
b7:93:53:af:f3:24:de:06:39:09:7c:1e:c9:d6:75:44:80:29:
71:0b:a1:5d:0a:57:e3:25:69:5c:6c:54:89:1b:45:84:1f:6a:
fc:34:8e:5f:b7:7c:37:89:0f:e7:59:7d:c3:bb:23:cb:c2:e4:
03:4f:3a:57:ba:62:c6:c9:3d:af:a3:c9:40:ca:59:91:57:cc:
21:c2:d5:e7:d5:64:12:f8:00:80:93:4c:e3:56:db:e2:6a:90:
20:1f:1f:a5:b0:f9:85:f9:45:5e:f2:6b:53:76:e1:3e:9e:52:
07:5d:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:27 2026 by rpki-client