Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File: WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier: 2FHrqSz+gBO8D2F2/JsF6le8SSNtb+llpRoB+RMSBbA=
Subject key identifier: 49:49:A6:79:7D:3D:C7:9D:95:B2:99:AA:5E:53:13:E6:0D:C3:90:DD
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial: 019FCBCAE1DA9E6B7FA4A0F71A171AAFE932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number: 0DCD
Signing time: Tue 04 Aug 2026 08:01:38 +0000
Manifest this update: Tue 04 Aug 2026 08:01:38 +0000
Manifest next update: Wed 05 Aug 2026 08:01:38 +0000
Files and hashes: 1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=)
2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: Adc97pSlL4AHJ6FumhlisjRoy7eJCdbmkafeV1wsNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:ca:e1:da:9e:6b:7f:a4:a0:f7:1a:17:1a:af:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Validity
Not Before: Aug 4 08:01:38 2026 GMT
Not After : Aug 5 08:01:38 2026 GMT
Subject: CN=4949a6797d3dc79d95b299aa5e5313e60dc390dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:93:28:3a:f4:af:fb:e9:af:a9:38:94:3c:
f3:98:e5:88:46:a8:71:5b:30:83:6e:2c:66:6e:00:
ee:60:2e:09:9a:25:66:44:06:30:bf:87:4f:8c:e2:
8f:bb:c7:dc:12:70:4e:49:67:15:54:f8:ec:e4:10:
6b:9d:0b:36:f2:d3:89:50:6d:59:c8:83:15:cc:25:
a4:50:e8:72:b5:fd:9e:c4:ee:29:79:2c:ba:17:50:
f9:27:96:10:bb:d9:e0:84:12:2e:7e:67:c9:ee:80:
ad:cc:7c:fa:8b:8f:0b:2f:fe:c6:e3:10:ac:64:ee:
ec:71:29:7e:b1:79:0f:e5:3c:81:c4:dc:4b:c4:b6:
7c:30:27:dd:aa:49:e5:9d:ec:a6:f4:40:b9:6f:ef:
51:6a:90:32:de:4d:41:8f:a6:68:5d:d1:f4:48:8f:
cd:f5:8b:02:ac:4e:cc:06:94:3a:c0:29:51:89:33:
64:7e:5d:95:19:d7:0b:05:80:88:89:c7:0a:64:e7:
2b:53:bf:63:f7:b5:83:94:93:3f:ae:70:b5:7a:62:
c3:b2:a9:f0:b9:01:ce:b7:70:4c:01:a1:46:30:cf:
c7:e3:bc:50:65:4f:e1:9d:12:0d:cf:87:7f:63:98:
62:9b:ef:30:9c:ac:68:d8:27:29:6c:c3:fd:57:2a:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:49:A6:79:7D:3D:C7:9D:95:B2:99:AA:5E:53:13:E6:0D:C3:90:DD
X509v3 Authority Key Identifier:
keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bd:7e:ac:63:14:2a:f5:5f:d4:f4:30:c6:1f:68:87:43:36:
a7:bb:53:e9:01:c1:78:52:11:25:fb:ca:57:70:62:77:8d:5b:
67:64:3e:b5:7a:18:98:f1:3e:13:64:ac:f0:29:cd:61:4c:56:
cf:92:b4:a7:3f:1f:da:cf:eb:4e:81:71:b3:5b:36:ad:73:cd:
b2:ea:1b:42:33:be:44:29:ff:e7:2e:98:bb:22:00:f9:b7:79:
19:4a:c0:5e:7b:6b:91:80:57:d8:1c:85:e3:77:9f:bd:00:d5:
42:81:80:3f:4e:0a:03:6f:85:fc:d3:3a:59:65:34:b1:7f:fc:
33:15:8e:ad:ea:e4:b3:3d:91:2e:c7:08:ae:83:14:b1:1c:81:
df:33:64:a0:5e:31:a3:fd:7f:e9:db:70:52:ce:31:2a:3b:b5:
1b:c4:e7:20:8a:12:e7:d5:cf:ca:b3:b2:8a:b5:24:a0:fb:21:
9a:c4:89:87:b3:95:08:9d:b8:22:8a:19:04:14:89:10:f2:16:
1b:f8:60:68:fe:21:2c:69:69:02:61:ce:fe:b1:6d:77:b3:87:
b5:06:32:6c:eb:41:8b:b4:5e:24:ac:53:1d:d1:5c:d8:59:da:
5f:7d:a7:41:cd:9a:f7:2a:42:fb:5c:97:e6:7a:0b:4b:b3:e1:
5f:e1:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:56:59 2026 by rpki-client