Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: KmHji2UfSy/Cpks0fLcGYY3adkZ4Pm7CL+nDsUXPDr8=
Subject key identifier: E1:5D:0D:BF:1D:1D:C1:C4:D2:F1:6B:1D:13:0B:B8:1D:11:5B:8F:23
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 019FA260EEAD55D0A863DF9EDC5B97EC2816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 1965
Signing time: Mon 27 Jul 2026 07:01:29 +0000
Manifest this update: Mon 27 Jul 2026 07:01:29 +0000
Manifest next update: Tue 28 Jul 2026 07:01:29 +0000
Files and hashes: 1: 7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa (hash: eTH+b7uyka3O9YkXOpD+DkbzSM2UIMZvJWqni2nrhis=)
2: 8gg12X3s1LPBf_d0sIf23T4p0tk.roa (hash: 319DbafJhZd2xmNMsWkQ3NZC3fYpVLzj/Zav+e/7chk=)
3: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: yEXqR7+sZK1X/aZRbzXlsekJXlPpLp4CJfqyFyV33dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:ee:ad:55:d0:a8:63:df:9e:dc:5b:97:ec:28:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Jul 27 07:01:29 2026 GMT
Not After : Jul 28 07:01:29 2026 GMT
Subject: CN=e15d0dbf1d1dc1c4d2f16b1d130bb81d115b8f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:ed:55:4b:b0:13:f6:0f:2d:34:03:f0:b3:
b4:d0:e5:6a:4c:d2:64:0f:38:2e:ee:c2:3c:2e:a9:
5a:9f:06:5f:a7:c4:b1:7d:db:75:b4:da:58:82:7c:
81:3f:08:3e:51:a2:01:c5:7b:14:dc:cf:5b:d4:ea:
a1:d2:8d:c9:a2:ba:38:82:cb:58:b8:6d:40:99:f0:
4c:fa:ee:37:7e:45:4d:fe:91:94:5e:df:73:b5:76:
92:32:ff:d9:16:fd:d2:cd:46:bc:2a:29:53:a7:82:
c3:bc:07:40:23:3d:ff:9d:6c:bb:f5:0a:a5:f3:5f:
01:95:2c:a7:78:56:c4:6e:c5:15:d5:bc:d4:c1:fa:
8e:05:64:42:52:a7:4e:0b:83:13:40:de:e3:4d:e2:
6c:18:3f:dd:f5:cc:80:9b:3d:aa:ab:64:05:e7:b0:
ab:ad:c2:e9:16:2c:0f:88:6a:a2:75:73:14:1c:fb:
0f:c4:ad:d9:5c:e8:e0:df:02:e4:be:80:8f:85:1e:
a6:c0:7a:96:c8:37:d4:cb:33:b0:d1:6b:b1:5b:bb:
6a:a6:e2:c9:82:37:9b:cd:bb:7f:fd:31:41:20:f3:
41:b7:88:6e:52:22:51:97:19:4d:e9:3f:48:3f:25:
51:2c:f6:0e:e2:9f:e9:8c:13:88:30:33:0e:cd:4d:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:0D:BF:1D:1D:C1:C4:D2:F1:6B:1D:13:0B:B8:1D:11:5B:8F:23
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:cc:de:ee:f9:15:28:27:4f:04:b0:84:9a:7d:3f:6d:66:
bf:7e:a8:e8:ab:48:d5:c8:28:c9:d5:1f:34:68:ee:ed:f7:26:
e4:23:fe:ce:b3:c2:e8:e1:fa:67:97:82:56:6e:72:84:11:ad:
d8:54:aa:20:04:28:c6:8e:3c:d5:9e:33:08:25:8a:78:9f:90:
30:c3:77:a1:86:6a:6e:ee:eb:8f:9d:93:a9:8a:05:1f:4d:03:
c1:6e:99:76:cf:ea:12:c8:a7:8e:aa:15:7e:4b:27:ee:2d:61:
c4:d9:9b:4f:cb:20:51:d5:8e:20:93:59:b0:a1:f0:ed:ee:e5:
d7:8b:f0:2e:52:a5:10:92:b8:39:b2:2a:06:01:8d:0e:52:a3:
72:0b:5d:d7:ef:e2:13:c1:d3:29:2f:17:64:ef:01:c4:aa:da:
af:e6:b1:53:82:e1:74:3c:d0:36:64:69:5e:74:31:39:b1:23:
f0:16:0e:88:f8:82:84:36:81:50:65:fe:d8:41:d2:75:f1:e8:
73:cd:cd:3b:84:63:1b:7d:3d:81:bd:ea:eb:ff:54:ed:35:76:
50:66:c5:c3:74:2c:0b:35:2c:68:6d:78:48:e1:26:c9:5c:19:
21:11:41:2a:7c:07:b6:f4:8c:12:c7:5f:fb:68:d4:81:ac:12:
29:85:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:50 2026 by rpki-client