Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: Ohws2SHPycQDuvmm/pspjN3W+0TDzTY3nLNlFUnoioc=
Subject key identifier: 8A:12:92:20:A1:41:F7:82:99:7B:4B:FD:DC:E5:88:D9:B5:4C:C0:BB
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 019FA1BBEB7726AA0C9B8B81909363DC6FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0FEF
Signing time: Mon 27 Jul 2026 04:01:14 +0000
Manifest this update: Mon 27 Jul 2026 04:01:14 +0000
Manifest next update: Tue 28 Jul 2026 04:01:14 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: vNhmLoWgmR/ywap+GjZYDrwgSfG0Mhwg6tP9upYkdbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:eb:77:26:aa:0c:9b:8b:81:90:93:63:dc:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Jul 27 04:01:14 2026 GMT
Not After : Jul 28 04:01:14 2026 GMT
Subject: CN=8a129220a141f782997b4bfddce588d9b54cc0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:6a:bc:ca:28:89:3e:b6:2e:f1:47:df:b4:
08:1f:28:6b:02:27:71:46:62:04:81:75:c3:da:65:
ae:3a:cf:a1:3e:80:a3:30:92:5b:6c:d8:24:4d:58:
6a:97:af:ab:90:7a:43:44:3d:2d:6e:b9:b2:19:09:
fc:2d:a8:52:c0:89:59:b7:05:7a:62:d1:7c:86:34:
02:e5:c2:bd:f3:ca:c1:cf:fc:a8:97:43:41:17:9d:
b0:6e:15:89:20:09:95:6f:26:eb:a4:51:36:8b:90:
b6:7c:77:e3:28:64:40:cc:52:1a:8e:e1:bc:a4:ba:
21:fa:9d:a5:f2:2b:b0:cc:0e:28:83:ee:d5:46:82:
cb:0e:66:77:c7:28:6c:29:e1:10:4d:5b:9d:7f:5f:
af:2f:48:35:2e:c5:ff:cc:37:cc:55:25:a1:5a:c4:
28:cb:87:94:38:9d:25:5a:2d:d4:f6:81:07:e5:c5:
60:6a:37:9e:e8:f3:dc:27:6f:76:2f:f0:cd:21:ac:
79:8d:85:da:64:b4:18:a3:72:5d:9c:b1:7b:f3:88:
19:f9:04:ed:6f:41:fb:83:eb:01:65:a8:6c:80:c3:
72:37:0b:15:4f:9c:fd:9e:03:9f:55:ea:2b:ba:47:
cc:f4:3b:6b:aa:a0:9e:56:ec:70:7a:c3:92:0c:23:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:92:20:A1:41:F7:82:99:7B:4B:FD:DC:E5:88:D9:B5:4C:C0:BB
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:a1:bf:9a:8c:b2:18:db:92:c1:b0:2e:27:dd:e2:84:f4:
15:7f:ec:35:f3:a1:d4:9b:12:24:3c:7a:15:2a:b9:6d:2d:5f:
9f:58:bb:e0:98:46:b8:b9:11:dc:a1:c6:7d:7a:62:ec:1f:a2:
42:f1:08:75:72:a6:55:98:4f:4c:ba:59:e8:43:39:73:bd:49:
49:68:3e:a9:66:a1:47:08:36:07:36:2b:c4:60:6d:1b:f4:5f:
06:24:0e:dd:b9:98:34:4e:9a:9a:fd:c3:81:7a:f5:5a:fa:83:
d8:d9:20:2c:96:a6:0d:20:6f:bd:a6:41:30:07:63:40:81:73:
be:91:ab:92:5f:dd:72:50:f7:24:40:84:99:87:01:86:00:6a:
2b:18:57:e7:6e:50:0f:a7:6c:7d:2a:6a:37:09:8f:e1:03:0e:
ce:5b:a5:c1:55:2a:76:74:cb:96:91:16:b8:d0:cd:4e:0d:83:
1a:90:51:aa:ae:db:9a:10:44:72:8c:3c:59:cf:cf:7e:19:1f:
c7:7d:ce:7e:c8:d2:60:75:9d:c4:75:28:9b:c1:09:bd:e0:67:
2e:6f:ac:9e:0d:fb:f6:aa:db:45:e3:94:cc:29:32:1d:70:c7:
75:0f:aa:96:0b:86:d3:f2:1c:48:eb:0a:50:7a:a8:28:73:5e:
8a:67:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:37 2026 by rpki-client