Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: kLT3cRq0nIaSXmqu3ssPZAXSbG9TiYbzvQJ1zZXPMqg=
Subject key identifier: F3:D0:A4:C1:51:6D:D7:68:E1:AF:77:47:DD:92:92:04:24:75:7D:DB
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 01A0054C7621B64667D8A83D0312903D34F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 09B2
Signing time: Sat 15 Aug 2026 12:01:32 +0000
Manifest this update: Sat 15 Aug 2026 12:01:32 +0000
Manifest next update: Sun 16 Aug 2026 12:01:32 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: Ni5jS5NKEAyOyo8vL7XvUZmUUZu2YQfJ4AxSy5v/Dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:4c:76:21:b6:46:67:d8:a8:3d:03:12:90:3d:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Aug 15 12:01:32 2026 GMT
Not After : Aug 16 12:01:32 2026 GMT
Subject: CN=f3d0a4c1516dd768e1af7747dd92920424757ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:19:ee:4f:dd:5e:6f:3c:a3:2a:1c:75:81:
1d:25:24:7c:d8:e1:49:fa:0d:2c:9f:7f:6d:17:96:
7a:28:13:92:f0:eb:d3:8d:4a:58:1f:f8:6d:31:9e:
85:3e:53:53:5a:1b:f0:c3:e7:6f:df:27:3b:8f:aa:
c7:d6:c8:6f:4c:f4:06:9e:77:a8:4f:55:05:11:c9:
43:c2:85:90:f4:97:45:13:08:63:f9:3e:6c:bc:6b:
c8:d0:c3:6b:02:8a:08:7f:17:88:91:7c:b0:47:5f:
4e:db:f7:2c:6a:cd:2c:ec:67:90:21:1b:0b:2f:bf:
7b:37:04:7d:d1:d2:f2:ff:dd:a7:9c:91:fe:23:c3:
ad:a6:9e:e3:da:ab:aa:4f:75:09:11:23:8f:89:05:
a3:c8:ad:dd:25:29:6f:7c:9b:f4:34:db:36:0a:f3:
e7:2b:70:31:09:7e:03:e6:55:7e:40:37:9b:9a:a7:
01:f6:9b:81:be:04:ed:db:1f:8d:64:a3:04:8a:60:
d5:8a:df:20:ba:c9:8a:d6:60:ba:fe:b7:83:81:9d:
55:85:fb:e8:80:22:28:26:79:8e:b0:cd:f2:03:84:
6d:28:25:cd:d8:01:ab:a1:db:5f:05:44:62:f7:90:
60:e9:e8:fd:92:ae:f3:d2:0b:4e:54:cb:d8:0c:7a:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:A4:C1:51:6D:D7:68:E1:AF:77:47:DD:92:92:04:24:75:7D:DB
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:aa:a7:8a:0a:ed:b4:4b:68:83:7d:02:0d:eb:54:62:d9:99:
ec:8a:d0:df:8b:ab:0b:cd:03:38:2e:cd:da:85:a7:d2:db:fe:
f9:d1:ea:41:76:ec:52:44:b6:ac:3e:7d:0a:3f:bf:76:2d:0a:
db:0d:a3:d1:59:46:3b:6f:39:82:8f:e0:b4:05:ba:a2:2b:c3:
35:ce:58:18:62:f8:32:42:ed:68:3b:f5:dc:3c:8b:5a:9f:82:
fd:6e:4c:bc:a3:36:1b:36:6c:1f:ab:b8:58:9e:21:7e:3d:11:
97:08:45:a0:e6:bb:b4:ed:05:ee:3e:27:da:ef:d2:38:da:f1:
cc:3a:85:13:09:8f:de:b1:11:45:66:3d:c6:3d:5a:26:03:34:
a4:36:2e:24:55:61:f2:08:6b:a4:a9:2d:c3:ff:49:04:dd:32:
7d:70:47:ea:87:e1:fe:d4:84:66:0a:2f:a3:60:37:fc:3e:14:
95:b9:cb:9a:1b:95:1a:12:f2:c1:77:0a:6f:d0:11:75:ea:f2:
2e:7a:54:6b:36:dc:4e:98:c2:6c:a4:df:ee:0b:66:49:bd:85:
d3:ec:e0:8e:44:55:33:37:71:d6:fa:25:de:70:11:e1:7a:b6:
b5:af:a9:9d:20:ae:55:c6:1a:1d:f0:a8:ea:bd:5a:ca:dd:3f:
32:32:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 17:51:59 2026 by rpki-client