Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: pPamnwRlsa8dWsPW2Vyfrg+aFpxE/ev3F/cvnxAXANs=
Subject key identifier: 2C:45:F2:1F:33:6E:86:F2:5B:35:75:CD:9D:8C:20:AC:BD:AF:B1:F9
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 01A024D726E82927E9A9DCF074C01556818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0B57
Signing time: Fri 21 Aug 2026 15:01:14 +0000
Manifest this update: Fri 21 Aug 2026 15:01:14 +0000
Manifest next update: Sat 22 Aug 2026 15:01:14 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: a/eqwUS4OoocbxzhZyltIjnis2BH6ZQ3gVIHug48Jyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d7:26:e8:29:27:e9:a9:dc:f0:74:c0:15:56:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Aug 21 15:01:14 2026 GMT
Not After : Aug 22 15:01:14 2026 GMT
Subject: CN=2c45f21f336e86f25b3575cd9d8c20acbdafb1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:f6:0e:36:ae:b6:d1:30:7d:42:d6:0c:d3:
8f:19:8a:dc:00:a7:aa:af:dc:aa:8d:cb:af:61:62:
63:82:db:26:a4:90:4b:48:bf:53:95:e0:f8:ca:8c:
05:74:04:83:b8:26:97:c4:3b:38:3b:48:28:10:a1:
6a:db:29:1a:90:86:ce:21:73:38:34:9a:eb:17:9e:
70:58:3d:3d:d2:e4:4b:b6:20:ba:db:0b:9a:9d:f3:
d1:4c:62:a6:57:30:f5:81:73:3b:d8:d6:e0:29:2b:
6d:87:1e:66:01:63:d8:37:40:60:ca:7d:6f:b6:30:
2e:0d:94:4c:9a:e1:bc:6a:31:1f:d1:a4:1c:c6:c8:
1f:0e:55:b0:cf:25:6e:50:f7:3a:5d:59:4f:07:61:
42:8f:47:18:30:58:44:b5:87:fd:79:3a:bb:7a:1a:
bf:81:4e:77:f4:c9:3c:38:ce:b3:bd:b4:16:66:35:
72:57:5b:0f:d1:9c:bd:64:0e:e3:c5:28:7f:b8:97:
cd:64:c7:7c:55:be:a0:a8:60:91:7b:5e:ce:1e:82:
c8:e5:18:cb:a9:ee:c6:37:13:c8:3e:53:e6:93:36:
02:bf:b9:59:22:20:c0:d1:1d:da:60:9f:42:e1:8e:
d2:66:ab:de:c1:48:c4:30:64:a0:aa:0d:32:6d:f4:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:F2:1F:33:6E:86:F2:5B:35:75:CD:9D:8C:20:AC:BD:AF:B1:F9
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:e2:a8:76:1f:c3:26:2d:43:6a:73:65:65:f3:38:5d:1f:
9d:59:31:40:96:7f:6e:e6:78:cf:cb:cb:c7:e3:a1:b8:ee:95:
ed:a4:0f:25:1a:16:89:b9:64:f3:0f:36:4a:a4:0a:c3:88:7b:
55:26:fb:06:83:db:48:cf:c9:3d:d2:c3:2b:94:61:1e:9d:5f:
89:51:93:5d:0d:c4:1a:65:c7:12:5b:c8:11:89:75:e2:a9:f8:
f6:ec:6c:a3:b5:77:ec:bd:ec:ce:18:71:83:53:92:7d:c7:a3:
5d:af:db:c5:b0:ee:71:c8:be:bc:11:a2:61:9a:f1:ce:09:e9:
3e:7a:8a:0c:64:83:c4:05:57:fb:f7:eb:97:97:bd:f9:10:0b:
79:2c:6d:be:61:36:e1:34:7c:00:a2:cd:48:df:d4:27:9c:99:
99:3b:ef:ac:1f:28:e6:91:ec:b3:5d:ee:73:8e:27:25:d0:f2:
4d:71:9f:9b:32:5f:af:85:60:b6:d3:6b:4e:c1:c6:2f:ae:f8:
99:41:ec:d9:7a:e9:d4:5e:2a:b9:20:2e:15:16:f1:db:9e:9a:
88:26:4e:d4:47:56:b2:aa:3a:e2:3b:d4:12:46:93:89:0c:4f:
96:53:83:93:6a:3c:57:5a:3b:6e:80:e1:9d:30:ca:3d:08:d3:
05:7e:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:34:16 2026 by rpki-client