Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: bmwx4GCFqfn3FvsISFEr+MOJqVOs0p0zsrYr5wGS0kc=
Subject key identifier: 0C:FF:7C:2A:3C:FB:E3:8B:5C:A1:9A:23:D1:E2:FE:BD:07:5E:8D:E9
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01A17C291D53F74E60604C10F063ED48F7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0B3C
Signing time: Tue 27 Oct 2026 07:00:31 +0000
Manifest this update: Tue 27 Oct 2026 07:00:31 +0000
Manifest next update: Wed 28 Oct 2026 07:00:31 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: Rd+JkDVnJpBMtbdvKZ3IZczEor+GiycM7b7yPWxecUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:1d:53:f7:4e:60:60:4c:10:f0:63:ed:48:f7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Oct 27 07:00:31 2026 GMT
Not After : Oct 28 07:00:31 2026 GMT
Subject: CN=0cff7c2a3cfbe38b5ca19a23d1e2febd075e8de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:78:86:80:fe:d8:52:db:4e:d0:92:b6:74:
53:49:67:fa:ce:db:5a:68:06:f9:e2:6b:a7:f6:5d:
39:39:2b:00:e1:e3:cc:6d:43:21:6f:09:63:56:87:
0a:9f:aa:99:55:1d:67:06:21:47:07:e1:20:45:8b:
cf:b0:fb:3d:f5:0e:38:b3:20:aa:b5:53:ec:25:48:
5c:16:9c:3d:dd:df:91:4f:eb:f3:01:ac:f0:61:20:
38:1a:d9:2e:eb:c4:e8:db:77:dc:6c:ac:f3:5f:49:
60:4b:c5:da:98:66:d0:90:31:94:7b:52:a9:aa:10:
3e:09:e5:64:e3:3d:c2:80:5b:a3:a8:d0:d4:5f:5c:
09:12:d4:86:b0:25:da:c7:b8:24:a0:c4:65:40:1f:
49:12:02:58:54:7c:c2:0f:50:4b:6b:c8:7f:4a:f4:
29:18:06:a5:e7:d9:7d:e0:87:ef:10:e5:22:74:b2:
6d:04:da:b5:1d:75:24:38:0f:5c:59:c1:e6:29:f4:
c7:18:0a:fd:c4:af:f6:0c:6a:83:9d:53:ce:2d:4f:
09:a9:64:a8:19:f5:02:33:9c:47:73:b9:79:db:eb:
ce:63:87:b5:f6:39:01:a8:4a:a9:1d:0e:4d:7f:06:
75:38:c6:7a:50:27:40:30:1b:07:bb:29:23:78:0f:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FF:7C:2A:3C:FB:E3:8B:5C:A1:9A:23:D1:E2:FE:BD:07:5E:8D:E9
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:a6:fb:5f:7f:7d:36:1e:d7:e8:3b:1c:d8:22:5f:80:e2:
41:8e:ce:f0:8d:96:ec:6d:28:36:ef:a9:73:4a:e9:bf:e8:36:
a0:fe:06:62:1d:c7:96:d5:92:eb:99:e5:68:7d:c7:74:2f:52:
80:02:01:c1:c3:ef:0b:50:2b:a0:8b:03:91:dd:76:c0:8c:f8:
a6:99:48:da:3f:27:6a:60:46:f6:8c:2d:84:c9:7d:1c:d5:51:
14:d7:64:7d:db:68:d1:bb:5e:2a:3b:14:89:db:f8:26:9a:52:
03:ee:26:3e:76:09:49:9a:ce:c5:82:d3:58:96:7c:30:c2:73:
3a:b7:9b:70:2d:dc:2f:b3:1b:8b:a0:c7:33:94:2f:c1:08:5e:
07:60:ba:71:4f:80:d3:86:1f:18:83:80:28:ec:fb:8b:3f:9f:
c9:0f:cb:f8:c2:98:74:2f:d0:49:dc:a7:e2:2c:0b:66:a4:c5:
05:38:5f:7e:21:22:c9:15:9e:e1:71:13:4f:0f:d5:cc:63:d2:
6e:a2:94:f4:14:f4:79:0f:58:3a:fa:66:c6:99:f1:97:d9:41:
f7:9b:9e:a0:4b:c4:bb:e8:fe:cf:76:e3:9a:95:79:2a:35:b2:
ef:1b:9a:b3:c1:87:74:f1:48:a1:3e:6d:54:0d:4d:db:2a:f4:
31:35:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:56 2026 by rpki-client