Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: KkN8WPXnNmqYkgFDrVcR3TEjENH/QXhZmwhJjPUJ2C4=
Subject key identifier: DF:68:57:86:50:63:41:52:AA:3A:11:EB:66:6B:19:A4:3B:3D:79:3B
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019F197A5AD2AA6402D8C8AA51D1448BA99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 17:01:16 +0000
Manifest this update: Tue 30 Jun 2026 17:01:16 +0000
Manifest next update: Wed 01 Jul 2026 17:01:16 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: 6PjXQxx8Vgyx6Tq8qT3FGcf5e3PJGXm49PwcC7/apMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:5a:d2:aa:64:02:d8:c8:aa:51:d1:44:8b:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Jun 30 17:01:16 2026 GMT
Not After : Jul 1 17:01:16 2026 GMT
Subject: CN=df68578650634152aa3a11eb666b19a43b3d793b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:3e:60:17:62:1d:00:85:4f:0d:ed:65:c3:
96:f9:c9:a1:97:1a:46:53:6d:63:37:66:fd:22:bb:
ef:cd:84:31:10:57:3e:53:f3:4d:00:17:ac:76:c9:
23:e5:3a:7e:aa:e6:ea:5b:43:45:ab:e9:74:24:0f:
10:55:43:24:10:94:1c:17:28:b0:2d:a4:bd:10:f6:
ba:49:5f:18:cc:b8:2a:7d:58:56:72:f5:f5:ad:fd:
e1:1b:22:d1:d0:39:0c:24:a7:e0:4c:31:69:19:ac:
7e:0d:f2:c9:5f:b7:4d:d9:be:3c:83:30:04:85:8d:
aa:94:c3:f1:5d:44:8c:1b:ba:b1:0e:0f:17:f6:06:
4c:bb:0b:6e:ca:10:a3:40:27:80:9d:e5:b0:16:ed:
dc:fe:61:df:c9:a8:92:be:32:f9:da:55:e1:d9:81:
e9:49:66:ea:c4:7f:5d:44:6d:b0:50:4f:63:79:97:
4b:fd:14:29:aa:5d:65:33:16:83:ac:5f:1f:0d:58:
49:27:39:5f:05:63:3a:bb:5b:5b:08:88:ba:8e:ba:
df:af:d7:59:09:c9:7e:66:4a:8c:37:e0:bf:b4:c3:
09:9c:65:46:0f:43:1a:76:ea:e6:d8:16:bb:48:a8:
a6:4e:c5:31:18:92:1b:bf:87:0d:8c:1b:95:09:af:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:57:86:50:63:41:52:AA:3A:11:EB:66:6B:19:A4:3B:3D:79:3B
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:b7:03:91:c3:0f:ce:a2:14:09:ae:39:ff:5c:31:8f:d6:
3e:6b:e1:cd:21:8c:6c:16:e1:09:8f:e1:5c:e8:2a:90:6f:61:
e3:b8:7b:00:00:48:d3:e0:2b:2f:0a:8b:8f:37:33:07:bb:8e:
3b:b7:4a:ca:30:7f:58:6b:d0:eb:4b:87:b6:ca:57:53:6c:79:
7b:7f:b2:20:0d:e1:49:08:23:ca:2b:69:21:25:50:32:87:ed:
f6:7d:c7:cf:33:c0:b8:1d:55:b8:08:02:61:9f:01:46:27:fc:
34:b5:e0:1f:75:dc:4e:53:58:97:ec:2c:7b:7a:27:6f:b7:a9:
0f:4f:86:1b:21:bb:51:0f:a3:02:7b:10:43:01:a5:56:a1:e2:
03:20:8f:78:77:f8:e1:17:c8:27:d9:1c:70:34:fa:f0:f7:53:
e3:5d:00:1b:bf:c3:57:72:bb:cc:10:96:ea:47:72:fd:b3:40:
fd:9f:34:27:5e:ca:ca:a0:ea:a4:bb:95:ec:11:76:65:b4:c9:
d0:c5:16:7f:f7:85:38:b1:8b:a7:b3:43:21:ed:26:f4:67:b3:
bf:d0:d2:11:84:9e:15:10:2e:f5:c4:3c:d2:4e:d3:ea:b1:cd:
66:df:6d:e8:a6:e0:bc:df:98:3c:95:87:92:08:36:8d:b8:1c:
09:03:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:37:09 2026 by rpki-client