Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: WW8fscnm7mFL8G3hMMU01rDMqvr1Q+ZCEX+Xdh5Vmoc=
Subject key identifier: 47:25:99:35:AD:E9:85:D5:3A:92:6C:37:88:68:08:7D:A4:CE:CB:9F
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01A0028179E2BF2DEDE47CFED4E59F76E00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 1A07
Signing time: Fri 14 Aug 2026 23:00:34 +0000
Manifest this update: Fri 14 Aug 2026 23:00:34 +0000
Manifest next update: Sat 15 Aug 2026 23:00:34 +0000
Files and hashes: 1: Be5RoMw-ds5u2XTKB0fRW06anJM.roa (hash: /kKlE5noyKkxWgeKwC5k06c0zlzs+Aq9eYc5li0SiaA=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: ivhgaiC67Mqz3fDiCmo+IX0rlUuqQU6ULm5lMmSyUjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:79:e2:bf:2d:ed:e4:7c:fe:d4:e5:9f:76:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Aug 14 23:00:34 2026 GMT
Not After : Aug 15 23:00:34 2026 GMT
Subject: CN=47259935ade985d53a926c378868087da4cecb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:ec:10:76:d9:a4:4b:14:cc:3c:2b:35:0c:
e2:6e:85:e3:84:0b:b5:c3:0b:23:bd:51:bd:7e:40:
bb:4f:bc:ad:3e:a2:e9:f7:70:95:52:6e:c2:4d:55:
f4:c3:3c:43:a7:85:96:ba:3d:4e:dd:52:5c:63:09:
32:0a:9e:f0:85:c6:16:24:7f:40:14:f9:13:73:26:
22:ad:dc:7f:43:f2:ff:89:04:84:bc:61:22:ef:ef:
ee:63:23:a7:a1:90:f2:84:8e:83:01:f7:e8:ae:17:
3e:7a:d4:27:ce:97:95:30:67:c4:65:e6:c2:0d:81:
2e:47:72:37:01:1c:b0:e4:9f:2c:d4:1a:3a:cb:c0:
04:d6:65:95:5a:fa:73:6d:25:54:ca:41:59:9e:b5:
41:7b:b9:c1:81:0f:5d:e5:ad:f7:3b:45:cc:a6:d3:
e9:8c:b5:78:a7:b6:e4:88:f5:bc:9a:9f:5b:5c:3a:
32:ad:fa:20:38:6a:ac:df:66:73:00:99:94:94:9b:
41:d4:45:39:f6:e2:97:ce:d9:6e:aa:55:7b:2f:c5:
bb:42:67:09:86:43:13:e9:1c:da:13:7f:de:8a:c1:
bc:ef:c2:fe:e6:9d:39:29:1a:ee:06:5e:69:9e:5d:
e7:70:7e:8b:c8:39:b1:c7:eb:04:e0:1d:fe:fc:c5:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:99:35:AD:E9:85:D5:3A:92:6C:37:88:68:08:7D:A4:CE:CB:9F
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:77:5c:50:05:1b:e4:a4:ab:7f:99:eb:ac:9e:35:2c:3d:6d:
17:7b:a9:78:79:89:59:d7:49:27:80:b0:8b:fc:72:9f:94:a0:
ef:c4:76:76:63:02:ce:0a:ef:47:30:ab:b0:97:41:4f:23:8a:
2c:fd:9e:5a:32:69:ef:f7:4b:9e:0c:27:2e:9a:ba:b1:5b:01:
88:70:88:44:f8:98:db:13:72:3a:cc:f5:62:c9:e6:7f:04:23:
68:26:ef:0d:34:67:cd:9b:85:0c:45:07:3b:28:87:0c:e2:62:
f9:ee:e8:be:38:92:0e:24:24:17:86:23:8a:63:58:d3:8f:15:
2a:41:38:f1:22:e9:2b:ed:cc:57:9e:bd:f5:a5:c2:bc:e8:ab:
14:e2:5a:04:4d:72:2a:b4:7f:22:e0:2b:d0:89:b4:e2:79:fc:
48:c9:5f:bd:11:2f:d0:73:be:09:b8:8f:49:17:a6:78:d3:0d:
08:fd:55:55:42:8c:19:ab:c5:24:bf:59:2e:7f:97:69:e5:6d:
f8:82:9c:10:d3:3e:c9:f1:bb:70:98:e8:2c:a0:fe:f0:5c:98:
38:a3:7c:f8:82:f4:29:c5:1b:4f:32:60:4a:f5:e0:0a:b4:b5:
e7:37:cc:6a:8f:3b:16:11:ea:f3:00:68:fa:50:e7:68:9e:94:
6e:ad:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:59 2026 by rpki-client