Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: +5FyVmg8OyBwqITj0FE0Cbj3tlOGr27YXW2KUpN0ZjM=
Subject key identifier: 23:A5:D4:EE:28:EA:E8:8E:04:DD:A7:BF:4A:70:EA:08:14:EF:0B:6F
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01A17E186629EEB0E110D49DD48B760DF5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0B3D
Signing time: Tue 27 Oct 2026 16:01:30 +0000
Manifest this update: Tue 27 Oct 2026 16:01:30 +0000
Manifest next update: Wed 28 Oct 2026 16:01:30 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: Wql9AHA1FdLfyRKM2sqN7JXII+81mfjmjT7QdNxGCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:66:29:ee:b0:e1:10:d4:9d:d4:8b:76:0d:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Oct 27 16:01:30 2026 GMT
Not After : Oct 28 16:01:30 2026 GMT
Subject: CN=23a5d4ee28eae88e04dda7bf4a70ea0814ef0b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:7e:91:09:60:9a:89:3c:e3:73:ac:8b:d0:
6a:24:59:ec:14:5b:a2:7e:7d:7a:8a:84:6a:53:5c:
eb:a8:26:e8:c5:db:51:41:88:4e:73:5e:3b:de:aa:
29:3b:39:c6:5f:39:bc:43:c4:44:a3:82:39:7a:76:
3e:27:47:d2:25:6d:c6:69:10:23:c7:a0:3e:55:b3:
da:6d:59:d7:ac:2c:ad:56:58:48:5f:47:45:63:10:
0b:77:4a:e1:07:29:a8:f1:01:c4:31:2a:99:ab:12:
e1:14:af:f1:a7:ab:4a:b7:8a:75:1d:c1:12:a7:74:
05:59:27:58:17:86:85:f2:7f:e2:48:cd:10:3a:a8:
6a:7d:81:7b:94:d9:d3:da:86:a7:7f:26:6d:c9:82:
a0:2f:4d:68:7f:47:36:57:1d:cb:9f:b0:b2:9a:31:
2e:df:84:39:22:fd:ae:ce:f9:b6:85:3f:12:11:a0:
b1:ed:d6:c2:ee:4a:aa:68:32:e4:30:53:7e:78:f9:
ee:f8:75:93:56:ab:3d:9e:f6:4a:bf:13:0f:3d:1a:
fd:eb:1e:ac:d8:61:18:05:4f:64:d3:cc:5d:a9:4c:
c4:36:de:ae:03:fe:e5:6d:8b:f1:49:55:8e:44:39:
28:fe:aa:3b:61:f7:e3:0e:48:25:b5:6c:49:16:5e:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:D4:EE:28:EA:E8:8E:04:DD:A7:BF:4A:70:EA:08:14:EF:0B:6F
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:93:c2:4b:cc:96:e3:b3:ed:b7:e8:d6:2f:19:72:e4:3e:
ec:9f:a8:bf:36:82:3e:e6:f9:97:94:f8:27:13:d4:84:65:b9:
d2:8c:6e:ef:81:31:c0:b7:7c:64:48:0d:72:61:10:a5:7e:d4:
8e:ad:dc:59:ee:59:16:ca:45:5d:0c:85:aa:80:28:73:ca:94:
12:2a:f3:7c:ac:9e:db:32:77:df:e4:1b:9f:f7:8f:9b:e2:7d:
fa:a2:05:8e:28:7a:24:81:9a:d2:89:57:dd:ab:c7:63:b1:01:
d3:17:32:c9:fc:a2:6f:57:f2:10:34:db:54:49:b9:ca:c3:e1:
bc:37:fb:b9:f7:d4:7e:d0:b8:89:cb:c8:94:1d:b4:ef:2f:66:
29:96:9b:71:31:1d:fd:10:5f:a8:bc:ec:cf:30:74:82:95:34:
3e:8d:20:7a:86:3c:c2:02:e2:4c:1b:8d:74:61:52:c7:09:10:
f9:4c:b0:d5:5d:ed:5a:36:cf:c5:a3:f1:7d:ea:63:60:10:0d:
e4:2a:7b:0d:20:b7:3a:9c:03:ef:30:6a:58:cb:9e:91:42:63:
c6:ce:a2:4e:67:4f:45:b3:92:98:68:1f:25:17:c4:c1:05:d6:
e6:fc:90:02:0c:9d:26:8d:5f:d9:5b:11:37:e5:7e:70:7e:0d:
2b:7e:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:35 2026 by rpki-client