Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: eiF8x4EgyQe/BOGEkvC1doo0cOkqvCu7z1bEMcVL4l4=
Subject key identifier: B4:91:9D:02:BA:3E:CD:AD:10:9B:36:1A:B3:33:E3:83:4C:04:B7:91
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 01A1163C885F21D43B79CC0CA29FBF2E20A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0BD4
Signing time: Wed 07 Oct 2026 12:00:27 +0000
Manifest this update: Wed 07 Oct 2026 12:00:27 +0000
Manifest next update: Thu 08 Oct 2026 12:00:27 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: PYv7Go7xApUaq/Ikya9ohJulQ+hwiJ9ovuuJ0azXRZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3c:88:5f:21:d4:3b:79:cc:0c:a2:9f:bf:2e:20:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Oct 7 12:00:27 2026 GMT
Not After : Oct 8 12:00:27 2026 GMT
Subject: CN=b4919d02ba3ecdad109b361ab333e3834c04b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:37:b1:b7:16:c2:8d:b9:51:38:5e:fd:0a:
9b:a3:de:e4:3c:a1:85:af:1a:ab:9c:75:09:b2:48:
c4:b5:90:28:c5:39:a5:77:2d:91:71:43:f9:85:85:
55:4e:de:3b:90:fc:f5:90:37:da:24:2e:f1:7f:aa:
4b:fb:1b:c4:64:86:80:90:03:6d:63:89:53:9d:0e:
96:e5:f3:22:c7:6a:bc:b1:2a:40:c1:17:46:e9:d7:
a2:10:10:ff:38:40:d0:47:9b:a8:45:be:a5:5e:e7:
7a:1a:d4:d9:d5:ac:13:6c:fb:f8:b2:22:b1:f0:ac:
f8:29:28:0c:f7:96:57:c0:60:f2:cf:35:b9:10:3c:
9d:c0:ce:ea:72:69:f0:53:b3:35:ec:44:17:82:9a:
e4:7a:d4:24:06:31:7c:96:f4:38:87:b4:de:ef:6e:
3c:5d:f0:5f:7f:b8:2c:bc:59:de:8f:42:ba:cc:bd:
07:f5:f4:4a:e5:a6:a7:f2:9d:7c:c5:3e:0e:00:95:
b4:cd:f3:e8:d6:cb:c0:df:40:76:73:3c:80:c6:6d:
c5:85:f4:ce:4a:8f:9f:b3:98:c9:ae:35:1f:72:0d:
f9:37:05:a8:7c:a3:7e:59:2e:10:1c:da:3b:72:5a:
6e:51:d9:72:97:b4:30:c3:21:ee:41:2d:25:f0:bf:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:9D:02:BA:3E:CD:AD:10:9B:36:1A:B3:33:E3:83:4C:04:B7:91
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ba:34:fe:fb:36:52:c1:13:77:47:82:9a:c2:1b:0b:cf:a3:
8f:26:43:ff:7f:71:ff:63:48:98:6c:5d:4a:4a:c8:c6:ca:aa:
7b:9e:c5:c5:57:d2:aa:6d:07:69:e5:5a:c8:08:9b:70:b5:18:
e1:08:3a:af:04:e5:f3:3e:85:96:02:b1:54:4a:93:48:05:e8:
2e:30:ea:5c:50:07:ca:10:e9:8c:9a:36:27:99:8e:95:79:d4:
4a:cd:39:86:8c:1f:07:6c:ee:16:53:81:0b:1c:df:c1:26:96:
6d:17:62:4c:12:2c:31:3f:e3:46:cd:f0:a2:a4:82:87:c2:fb:
96:93:1d:5d:6a:d3:79:5e:c8:b0:0c:05:f5:de:54:16:cf:9b:
1f:00:b3:65:11:a8:b9:6f:22:f1:d4:53:00:dc:a0:76:d7:a1:
20:f4:2d:89:91:ab:30:9a:d9:b9:e6:e5:41:72:02:a4:a1:3b:
f4:30:5c:3a:5f:e7:de:18:d7:4e:44:91:a7:68:79:93:57:ee:
ce:a5:25:0c:b5:c1:f8:fb:f9:d4:e7:74:56:75:b7:97:49:17:
0b:e3:88:ad:47:2d:92:b0:b6:45:17:1f:d1:0d:af:9e:b6:5b:
83:11:59:78:71:bb:01:36:4c:9b:53:cf:6b:9e:f1:83:54:71:
fd:e1:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:23:37 2026 by rpki-client