Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: wnLDzUsKr6FlKh1MiF63E8aG3Y220iU8pSTxt/801zs=
Subject key identifier: 63:F3:40:C6:4B:6E:94:32:2B:3A:FA:AD:A2:95:97:D9:0D:91:BC:D0
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019F72BD52B60DC5A742C17001ECD13AC681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0A2E
Signing time: Sat 18 Jul 2026 01:00:37 +0000
Manifest this update: Sat 18 Jul 2026 01:00:37 +0000
Manifest next update: Sun 19 Jul 2026 01:00:37 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: tFVNFM65ROskiZi7BNWuE+CTcjTMY7OeadogDriEoXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:bd:52:b6:0d:c5:a7:42:c1:70:01:ec:d1:3a:c6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Jul 18 01:00:37 2026 GMT
Not After : Jul 19 01:00:37 2026 GMT
Subject: CN=63f340c64b6e94322b3afaada29597d90d91bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:ce:29:65:ca:90:49:1f:ea:d4:57:c2:02:
d2:fb:f2:33:26:66:bb:d9:f6:e7:f4:3f:e9:18:1e:
0c:b2:96:e1:74:d4:86:f3:60:fa:1c:4b:46:77:d3:
28:f2:63:56:1c:10:26:14:6a:f8:b3:d9:ca:14:78:
4c:eb:4a:ed:5c:84:7f:8e:77:2a:ca:bb:89:ea:e3:
08:bb:63:3b:00:b1:f1:26:b1:92:b6:eb:8c:85:1c:
44:14:2c:8f:40:f5:a4:03:99:17:35:9e:49:86:3d:
ee:1c:b2:50:96:df:9d:af:ff:bb:15:94:f1:b0:0f:
62:c8:6e:a2:43:48:8b:df:5b:02:36:3a:84:49:4f:
9e:f6:5e:73:17:e3:ad:67:bc:f7:66:4d:3d:20:59:
6c:3a:cb:30:d2:75:34:5f:a5:d7:08:e8:cf:ea:39:
87:b5:70:ee:1b:23:2f:d2:99:c5:da:0e:9a:2b:13:
16:a7:2f:7b:60:4f:fe:bf:0a:38:99:26:f5:f8:59:
c6:3d:74:a5:22:52:45:33:71:c5:a2:b5:ad:22:e4:
40:56:92:7c:ee:d8:f9:a6:90:a1:0d:6c:4f:1f:f4:
5c:9c:b7:da:06:b3:e0:ca:c3:2d:98:cb:de:b6:e7:
3e:db:e0:19:9b:d8:80:ee:91:f4:0e:d8:dc:c4:30:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:40:C6:4B:6E:94:32:2B:3A:FA:AD:A2:95:97:D9:0D:91:BC:D0
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9d:5b:76:7e:b6:41:23:b5:f1:24:af:fa:58:e1:fc:37:bc:
4d:be:7a:10:d4:4a:7a:b0:e0:b5:d8:4b:0f:70:3e:01:37:99:
bb:ef:e2:05:a3:fd:4c:3e:f7:6a:f0:1e:00:be:16:aa:de:a5:
5e:b5:ed:87:34:3d:24:10:ac:72:68:c3:9c:e9:17:84:29:4d:
c3:ff:53:a1:09:3a:29:98:d7:d6:18:ee:62:2f:29:d4:03:0f:
44:4a:5b:ca:f8:ba:65:7e:62:5b:67:3a:19:40:d5:e3:a8:04:
a2:70:0b:aa:7e:1a:65:44:8b:ef:2e:46:81:63:06:a0:f4:4f:
a7:15:15:99:39:30:51:43:00:17:59:31:d4:9f:3e:c8:1b:59:
b2:09:c0:5c:ae:66:65:09:68:b3:62:98:18:dd:66:3f:3f:46:
ef:96:a2:04:da:d7:79:72:3a:d4:db:e4:72:65:75:87:60:a7:
31:b9:6d:a6:15:d9:3c:cc:ea:5d:98:bc:52:c7:f6:96:34:89:
1f:d4:f2:97:4c:e5:28:5e:70:d4:78:3e:e4:5f:ad:46:38:c6:
e8:10:9e:cd:f7:0a:2c:0f:07:8d:65:8c:0b:dc:4f:6f:b8:6e:
57:25:12:17:9a:f5:ed:f2:ec:58:09:ea:60:c3:09:d8:16:f1:
f5:12:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:45:58 2026 by rpki-client