Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: fTKPFv6/3vm236JQMT2OsOcsW8t1/CwuqFjnufARrIU=
Subject key identifier: 4E:E5:1B:34:D1:59:23:0C:CA:A2:4C:67:96:8B:D2:23:36:A9:5E:E5
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 01A06EDE6BD122A038E0A7B82FB21454ECB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 00:01:05 +0000
Manifest this update: Sat 05 Sep 2026 00:01:05 +0000
Manifest next update: Sun 06 Sep 2026 00:01:05 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: FbzsTbGXPBxS8KJQ+GZRoRuVCOa4wfkXaR+kSydHnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:6b:d1:22:a0:38:e0:a7:b8:2f:b2:14:54:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Sep 5 00:01:05 2026 GMT
Not After : Sep 6 00:01:05 2026 GMT
Subject: CN=4ee51b34d159230ccaa24c67968bd22336a95ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:b2:56:40:ee:4f:8f:bb:15:fa:e4:69:d6:
ac:0b:b7:02:e4:ba:f2:b2:f7:87:bf:6d:06:fc:45:
10:35:3c:ec:7f:d0:ed:15:b9:d2:77:58:1d:79:2e:
4d:55:1e:52:b4:88:08:6d:7a:5d:fd:15:d8:18:75:
46:ea:8d:ed:55:66:31:b1:0f:f0:07:35:2c:71:b8:
43:f1:85:34:22:1e:46:c2:0b:a5:1d:37:6c:e8:a5:
da:87:31:a7:65:59:f1:ca:52:d2:33:37:34:00:70:
c1:d4:30:c1:e7:b4:a3:85:0f:99:f6:28:bc:8d:9e:
c0:8a:af:f1:87:66:f3:24:b3:d9:ed:a4:88:9e:b6:
47:53:a2:92:e4:ad:4f:3f:3b:eb:00:a2:f4:29:14:
3f:c5:42:74:cf:b5:8c:f5:99:fb:a7:af:0e:7a:2f:
57:48:75:22:24:2a:a4:22:03:ae:0e:a8:ac:93:42:
3f:90:0b:25:c0:e6:de:d3:73:65:90:29:21:2a:d0:
d2:20:83:22:78:3a:2f:ab:1c:fa:d6:5e:ea:0c:ad:
67:f5:86:b2:13:06:08:db:77:57:82:18:47:1f:1d:
d5:86:5e:da:ec:74:f0:77:0e:ed:23:4e:a7:bc:e8:
1b:fb:ba:92:21:0b:aa:f7:6e:22:b0:b0:e5:22:8a:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:1B:34:D1:59:23:0C:CA:A2:4C:67:96:8B:D2:23:36:A9:5E:E5
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:df:13:cf:15:f2:dd:e6:55:47:d4:ea:0a:90:53:2d:9f:e0:
3a:c0:6b:2a:90:94:c7:51:43:5b:f2:9f:82:b3:87:18:7f:48:
57:e8:21:d8:b7:96:d9:d6:43:60:e9:aa:d3:3d:d7:88:45:97:
d1:5b:ea:82:61:5b:0e:dd:8e:0a:96:ec:bc:04:23:18:c5:3b:
7f:2c:c2:ba:10:2c:34:bb:0f:b5:49:b2:28:1c:e7:46:20:02:
1c:59:d2:53:22:e9:0e:ea:28:7f:20:34:91:14:f7:1e:6e:fc:
d0:1f:ca:12:00:d0:93:10:16:c0:63:40:67:45:62:91:b3:72:
73:b2:65:93:a1:6c:85:cc:5b:07:bb:2f:49:fd:04:d3:58:a6:
00:bf:a2:8a:50:50:db:6d:73:3f:99:05:22:a5:a0:3f:8c:ec:
50:1b:64:09:80:56:6c:04:9d:8d:0b:20:f0:e9:e6:d2:a1:cd:
fb:38:30:e5:b8:3e:c3:25:78:b3:25:8d:c7:5d:b9:0d:07:da:
95:5d:27:dd:e7:13:44:7e:64:79:f2:cf:b6:ba:7d:8d:e4:53:
1a:cf:0a:7a:7e:60:26:4c:8b:1a:fa:d0:d3:0b:a4:af:4d:1d:
4f:2d:68:93:be:dc:e6:77:b0:14:2d:d9:de:3d:8a:c3:f9:2b:
2f:35:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:25:48 2026 by rpki-client