Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: quFOocfR5cFluwMZAknadTww+cl5rVdUR3BxqNWiAuY=
Subject key identifier: 1C:25:6C:04:38:5D:20:56:9D:BF:89:D7:45:F3:67:39:56:41:77:5B
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019D371B6DFEFAF513A35FA91510DB404BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0906
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: 1BCW9kD+wO3q9NsMuYtRb9HbjOC3FmSh9Es7HyeqgR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6d:fe:fa:f5:13:a3:5f:a9:15:10:db:40:4b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=1c256c04385d20569dbf89d745f367395641775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:d5:6c:9a:18:82:1f:84:e0:93:de:2f:e3:
29:3a:fb:e0:f5:ef:2b:a3:64:b4:50:f9:58:44:2c:
51:b4:c2:42:22:58:7c:a5:86:d9:c3:21:f0:e7:44:
b5:92:d0:37:95:2f:ea:fb:1b:35:43:04:f4:d3:dc:
1f:a3:95:4c:df:48:91:28:76:b6:fb:45:59:be:5c:
93:14:7d:c2:72:3f:d2:51:46:77:cc:6e:bd:96:d8:
01:37:57:1c:53:9f:5f:b8:c7:cd:87:da:f6:93:d1:
3b:62:3d:e1:24:5d:6c:7b:bd:f3:b6:e6:72:90:7f:
cb:70:3b:62:a1:8d:a1:19:b8:50:48:41:39:51:c7:
10:71:db:9a:73:d0:36:db:8a:ab:4a:f4:e4:d4:4e:
fb:20:e9:23:88:d5:2e:17:43:3e:08:f8:09:b5:34:
1b:30:66:87:b7:0d:90:6c:26:c5:ef:b7:69:dc:b0:
73:c5:9e:28:73:bd:78:b3:e0:52:b5:6c:37:0d:81:
c2:21:b6:c4:c1:7d:15:61:b6:db:13:2f:9e:1f:99:
fa:ef:f0:c1:b0:dd:78:c7:a5:b3:96:f8:cd:f0:a0:
55:4e:ab:19:4d:3c:76:7b:ee:2f:1e:ad:a6:04:ae:
4e:b2:f3:18:f7:ab:7e:db:c3:81:6a:4e:f3:4d:31:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:25:6C:04:38:5D:20:56:9D:BF:89:D7:45:F3:67:39:56:41:77:5B
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6c:3f:ac:2e:ec:dd:12:3f:3d:54:d4:da:e2:de:16:a4:52:
a3:dc:e5:4b:87:a1:6d:cc:11:71:3f:6c:c1:6f:b8:c2:a6:39:
f9:b2:59:4d:27:32:65:d9:ef:82:3e:03:e4:aa:79:7c:8b:3f:
f4:26:d9:c6:30:4a:1e:6b:87:33:e3:81:de:3d:48:4b:7a:ba:
1b:6b:8d:2c:18:f9:fe:bf:61:f1:32:78:58:77:3a:5c:8c:cb:
d3:c6:da:8f:32:8d:47:3e:c1:ef:7a:5b:42:22:fc:9a:81:b0:
b8:a8:a6:32:22:17:df:d9:ec:5a:d8:8f:26:95:3f:3b:3d:c7:
85:45:50:7d:56:86:5c:04:e5:b8:79:58:0d:c3:ce:a8:b6:6b:
00:7c:b7:36:d6:b8:ab:9d:07:10:64:ae:94:01:8c:87:03:b5:
91:c9:b5:6f:49:75:65:25:4a:40:19:ad:32:a2:ec:62:0a:1d:
b0:00:99:22:a2:49:b2:db:86:25:78:86:a1:10:ac:cb:d6:67:
f0:74:39:c2:d7:16:14:a0:69:40:fa:43:4c:b1:dc:c5:b8:8c:
5a:e0:a9:fa:0c:37:38:4e:43:25:ec:b3:9b:6e:29:c6:64:8c:
7d:c3:4b:b9:34:9b:94:35:9a:d4:a9:1a:a8:32:e0:75:96:d8:
50:21:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client