Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: i+kphatG+qnq7wtpxq5clpS9GqK+EOqrdL5x1U3t1Dg=
Subject key identifier: A4:CA:84:11:D0:E9:5E:53:57:4F:A7:94:BB:AD:FA:EC:4A:3D:5F:EF
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019FA1BC2CF6EBB46AEF9BBEE3595488957E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 04:01:31 +0000
Manifest this update: Mon 27 Jul 2026 04:01:31 +0000
Manifest next update: Tue 28 Jul 2026 04:01:31 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: A15wxtoa5UrxzBI2ty2OlalqOLYA+oOr2TDJM3/KmNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:2c:f6:eb:b4:6a:ef:9b:be:e3:59:54:88:95:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jul 27 04:01:31 2026 GMT
Not After : Jul 28 04:01:31 2026 GMT
Subject: CN=a4ca8411d0e95e53574fa794bbadfaec4a3d5fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:7f:dc:32:c1:57:ad:20:55:bd:3b:b8:08:
58:50:cd:e8:2d:45:8c:e9:9e:92:28:af:b6:33:46:
bc:93:66:a2:67:f8:03:ed:1b:d2:6f:58:d9:69:ed:
be:77:87:48:2a:77:7e:19:b1:54:d0:91:cf:1b:02:
83:88:fe:35:f0:c0:1f:fb:7d:32:58:38:93:33:84:
3e:e9:66:ef:74:1a:08:97:66:50:7b:02:8d:e2:e2:
9b:f3:62:26:89:46:fe:90:25:56:3f:b1:c1:c2:2e:
72:43:54:7c:bf:1b:e9:b0:32:c5:70:8e:5b:a3:fa:
41:5c:97:c7:af:97:0f:df:f8:a1:09:ef:2b:0b:42:
dd:c2:a1:9a:17:de:6a:d6:eb:08:e8:87:78:35:f6:
3d:89:f5:dd:13:42:da:c9:bf:bd:85:fa:9c:07:f8:
68:70:68:ff:e0:43:7d:e1:c1:91:85:21:0b:47:92:
40:74:23:2d:84:1e:4b:04:9c:67:38:4a:b4:06:e4:
8e:62:fe:19:d7:0c:86:a5:fe:72:e7:9f:86:2d:55:
e1:fa:82:b3:6a:41:a5:d4:e5:0c:59:60:bf:0b:33:
8a:33:83:ce:92:3a:75:69:be:35:e5:16:4c:ed:e2:
55:d1:40:1f:5d:1c:1a:a4:aa:52:bd:42:af:42:3f:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:84:11:D0:E9:5E:53:57:4F:A7:94:BB:AD:FA:EC:4A:3D:5F:EF
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ac:a5:cd:2f:f5:f7:d1:1b:9c:a7:ee:e0:88:61:95:8a:0e:
f2:a9:9f:23:32:61:97:12:37:a9:73:8a:3d:53:79:33:9f:09:
07:f1:5c:bd:ae:11:51:17:79:98:48:08:a1:b9:1f:59:33:51:
f8:49:a9:61:5b:d5:cb:a7:4d:a5:c2:94:27:6d:ad:9e:92:6e:
c9:41:60:c1:27:2c:87:b5:b0:42:65:19:94:46:88:20:88:0a:
60:5d:87:da:15:e7:64:2b:73:c8:61:57:2e:c3:c8:f5:56:84:
d4:87:65:44:26:30:8c:67:dc:c4:d5:d0:f7:7a:4e:2a:34:22:
ea:5e:29:28:0a:4e:1a:68:36:6a:1e:79:c9:17:bd:cc:d4:60:
41:1c:ef:3b:e0:3f:ff:68:40:63:20:38:a9:95:59:fd:97:77:
fb:e9:c9:db:11:b9:f5:1d:d3:f0:b3:f2:17:b5:7f:06:49:35:
ec:e6:2d:14:9d:bf:c5:33:e5:16:5f:ae:a5:06:d5:8c:08:dd:
e5:1d:51:6a:62:bc:25:71:f8:22:2e:8b:12:ae:24:36:5f:79:
5f:0f:d6:d7:79:73:cb:44:12:45:05:21:ac:b1:90:19:ab:ec:
c4:1e:57:5a:9e:94:4f:5c:34:13:23:c8:a7:78:c6:04:67:94:
95:a2:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:40 2026 by rpki-client