Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: ed82gQTCGJJ8n6eJHW2fwACVJpHQ+h6BRCDyqZrsoRM=
Subject key identifier: CE:5E:1A:9E:43:84:91:21:67:FE:61:8C:02:A4:9B:E6:0E:24:9A:13
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019F36AA5D5ADDCAC8CA2337F6B66D7A779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: 0112
Signing time: Mon 06 Jul 2026 09:02:42 +0000
Manifest this update: Mon 06 Jul 2026 09:02:42 +0000
Manifest next update: Tue 07 Jul 2026 09:02:42 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: R4y8T79E55o/68cj4+MxKVEDJDjKri9rKFNspP7EztM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:5d:5a:dd:ca:c8:ca:23:37:f6:b6:6d:7a:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: Jul 6 09:02:42 2026 GMT
Not After : Jul 7 09:02:42 2026 GMT
Subject: CN=ce5e1a9e4384912167fe618c02a49be60e249a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:1c:26:5b:7a:5b:e2:e1:12:d6:ab:0d:56:
14:2a:1d:ac:27:8c:83:51:11:93:de:59:b9:78:60:
67:a6:12:d4:6d:8d:b4:6c:83:c7:3f:c7:8b:02:c9:
ec:c5:35:e6:cf:79:f9:9a:47:94:5d:48:f7:3a:0d:
63:20:29:05:fa:54:67:2e:84:08:25:af:60:7e:32:
87:16:90:2a:5a:25:06:92:90:a4:51:79:9e:62:9d:
2f:62:5c:59:20:e9:87:8f:3e:4e:2b:4d:9b:9a:55:
49:24:ae:a2:02:bf:6e:75:b9:7a:a3:62:d7:e7:43:
93:cd:5e:c8:4f:91:03:a8:49:eb:04:fb:5a:87:f4:
d0:cf:95:8e:b5:35:c0:9f:00:a4:01:ce:88:e2:94:
45:73:7f:44:b3:dd:4e:4b:e3:ef:b3:5f:9a:bb:d6:
c8:6f:a9:21:87:4e:ec:89:36:7e:c8:13:97:90:a7:
20:13:f2:2c:82:e0:46:01:ff:25:0f:d0:e1:2c:e9:
e3:05:91:0e:a9:31:19:53:90:94:d6:59:0e:9a:51:
7b:01:f1:17:ca:65:cc:a7:72:64:2c:0d:52:b6:e4:
68:52:22:20:1c:29:13:5e:61:90:8b:ee:85:dd:fd:
f2:59:e8:1d:b7:4f:a1:62:29:59:12:d9:9d:2c:29:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:1A:9E:43:84:91:21:67:FE:61:8C:02:A4:9B:E6:0E:24:9A:13
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:10:eb:e5:92:5c:ec:71:9d:bd:a9:d2:c5:6b:ae:bc:9e:6a:
76:cf:e0:be:57:f3:30:4e:5a:0c:a8:c5:bd:6d:7f:01:bd:8c:
dc:fa:17:dd:be:46:bf:2e:8c:ff:24:99:73:f5:96:5e:fb:1e:
b7:89:54:62:ad:ae:71:04:ee:ac:96:c1:95:f1:53:36:c1:7b:
37:70:9a:c7:c8:01:73:fa:6e:42:57:f8:27:43:14:97:59:2e:
bf:63:70:bc:ad:83:35:4e:e9:1a:4d:f7:60:64:82:bf:04:6d:
0d:ee:c9:41:88:22:31:41:6c:35:61:6c:43:7d:a3:9f:5c:78:
ff:35:44:a8:a5:4e:64:de:90:51:04:8a:75:df:b6:5a:dc:7f:
df:dc:36:b6:52:15:55:e0:ec:95:53:2a:dd:f4:a4:1d:e5:59:
81:74:9d:85:58:56:af:d9:7e:79:68:45:15:85:c5:57:c4:5d:
8a:9e:f8:48:a8:3f:28:2c:03:23:72:72:2c:79:d1:20:74:72:
07:68:98:bd:a3:ea:0c:ac:ec:7b:04:04:c1:b5:34:a8:63:3e:
fa:9d:b7:0d:d6:1f:d7:28:4e:b1:34:2c:ed:d3:6b:5a:5a:26:
f5:2f:56:fc:dd:fc:61:61:04:2f:b6:17:9b:82:c5:3e:14:a8:
e4:86:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:11 2026 by rpki-client