Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: 2Ol+L0m8fzHUtDjLDgiTfZLikEU+vk0dpzI/JXY51mE=
Subject key identifier: D9:BF:E0:53:CF:EC:1A:44:47:F8:EC:4C:AE:53:F0:89:70:E4:3C:AF
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01A08CB246554BB25F33EB77E8321FC40473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0AC0
Signing time: Thu 10 Sep 2026 19:01:28 +0000
Manifest this update: Thu 10 Sep 2026 19:01:28 +0000
Manifest next update: Fri 11 Sep 2026 19:01:28 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: 1vvrPmVFI8dwuN+of/k14f7FRKZDrmOwifMn27MFKqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:46:55:4b:b2:5f:33:eb:77:e8:32:1f:c4:04:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Sep 10 19:01:28 2026 GMT
Not After : Sep 11 19:01:28 2026 GMT
Subject: CN=d9bfe053cfec1a4447f8ec4cae53f08970e43caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:c2:73:c0:0a:a3:b8:12:4e:d4:b7:ad:27:
b9:2f:59:91:22:76:70:6b:f2:2d:6c:f3:e3:99:4c:
31:c5:fb:a6:8b:e6:47:b7:f2:83:7f:54:3c:38:1e:
e7:2a:1b:8e:b8:88:6e:7f:62:8e:1f:a0:55:82:c2:
4b:f3:80:c9:7d:43:27:dd:69:7f:a6:d7:68:cb:16:
77:36:b6:03:0f:e0:5a:33:1f:c5:59:57:0c:21:3f:
aa:5c:44:6e:07:26:ab:77:96:54:b1:a7:12:50:22:
41:0b:20:91:fc:44:9e:ad:c1:de:6f:60:27:3d:14:
b9:a1:a5:d6:c6:19:cd:bb:a5:ea:3e:93:08:b1:13:
ed:82:98:10:d7:21:50:21:82:03:aa:fc:8f:a9:4d:
dd:c0:88:69:cb:7c:a7:a6:c5:51:6d:d0:e8:af:92:
b9:2c:33:a8:1a:fe:b2:ca:82:a3:b7:a9:f6:24:f7:
39:3e:7e:61:09:e3:ff:b2:15:ce:26:9f:15:60:c8:
76:48:2b:57:dc:7f:fc:74:96:5d:64:1c:7b:40:04:
99:c5:34:4b:50:26:e6:82:c6:90:84:44:32:84:f8:
24:fc:82:1c:b0:46:3a:f3:7f:80:e6:81:d0:31:d6:
e6:c2:3e:41:07:e0:bc:54:49:37:3a:b1:0f:91:9b:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BF:E0:53:CF:EC:1A:44:47:F8:EC:4C:AE:53:F0:89:70:E4:3C:AF
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:44:35:f4:cc:1a:0d:92:6d:2b:f2:f9:42:65:f2:25:1d:
1d:3a:b7:0f:09:8d:25:b0:96:c3:34:18:47:00:9f:c0:65:50:
9e:f4:a3:42:18:1e:df:ae:2d:3f:2c:b0:7f:52:41:0d:08:36:
f5:7d:dd:e9:79:27:c7:68:48:d0:a1:74:17:cb:a2:e1:70:d8:
41:8d:1b:46:16:7b:72:ef:27:00:6e:11:13:2c:53:f7:e8:55:
c3:00:56:f0:45:7c:d8:d1:87:0e:cc:b9:ed:fe:ab:55:7c:cb:
79:2a:4d:26:f8:88:20:13:ac:39:6f:c6:b8:07:e3:af:29:de:
ae:67:6b:6f:2f:db:54:76:9f:ab:8d:54:50:0a:01:1d:d1:10:
57:e8:2d:ce:df:0d:44:28:34:2d:c7:3c:1d:dc:01:d8:c4:61:
15:4f:1c:91:43:b8:47:24:f7:a7:7a:c0:52:ff:35:e6:4f:4f:
16:0a:a3:21:cb:d1:06:46:aa:02:6f:62:f7:1a:3c:d0:9d:d1:
78:6a:0b:86:c5:b6:12:f8:3c:a1:ea:df:32:73:ba:34:b4:2f:
ca:fa:51:de:e2:14:f8:1e:4b:8e:14:67:ef:f3:5b:6b:31:a7:
a5:f5:b3:58:a3:11:a1:a3:d9:74:23:2a:17:ec:76:b6:bf:92:
cd:ea:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:46 2026 by rpki-client