Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: 9k7tLeQUJFsyO/M/4CGNugVifar2Vl7RINgONhAzWOM=
Subject key identifier: AC:B1:A2:E8:9F:AE:FB:B7:AA:CE:6D:2A:6B:F8:DD:0C:36:13:A9:0A
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 019DCF07DE47FACD47DCCA2112A07996272F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 02E7
Signing time: Mon 27 Apr 2026 13:01:32 +0000
Manifest this update: Mon 27 Apr 2026 13:01:32 +0000
Manifest next update: Tue 28 Apr 2026 13:01:32 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: oHIyaQyNwbaq5jXqg3s3N8RbVWMJOpNAtpJ+CU9AqQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:de:47:fa:cd:47:dc:ca:21:12:a0:79:96:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Apr 27 13:01:32 2026 GMT
Not After : Apr 28 13:01:32 2026 GMT
Subject: CN=acb1a2e89faefbb7aace6d2a6bf8dd0c3613a90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:b9:b1:a0:6a:81:20:b4:fd:16:5a:d7:d0:
5a:4f:d0:27:07:22:72:39:ea:f3:09:a7:ec:27:88:
35:10:7b:d3:74:e2:1c:9b:7c:45:41:1c:53:95:56:
0f:fc:32:0c:f6:b3:e7:fb:34:9a:28:92:e3:55:25:
28:07:7c:28:17:dc:28:eb:89:ad:df:72:fd:06:44:
33:31:1b:5d:b2:e3:ce:f1:e2:76:66:b5:3d:9d:a5:
f2:0d:5d:91:b9:35:2c:5b:74:29:0d:fe:cf:ef:a4:
d9:43:ac:f8:7b:24:17:ff:74:b3:93:d2:1e:1e:61:
ae:5d:a2:c8:3f:db:ac:71:47:e2:f3:6f:64:5f:cb:
f2:11:21:99:b7:1a:9c:13:f9:4e:03:04:a7:19:43:
7f:05:5b:5a:df:59:86:26:a6:69:76:11:f5:21:23:
62:50:4e:14:68:83:77:42:a4:e7:a0:9b:07:7a:38:
63:dd:6e:ef:4c:25:93:99:07:63:6f:c9:5d:bc:ed:
33:c0:a1:af:0b:12:85:09:ce:b1:de:aa:77:ea:15:
77:1a:cc:85:37:91:ef:7d:97:3e:bb:81:f8:6f:9b:
f1:4b:75:80:1d:44:38:6b:75:5c:a3:b3:c9:64:5a:
4c:1f:0f:27:89:f9:73:54:42:64:23:5c:fa:f7:b6:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:A2:E8:9F:AE:FB:B7:AA:CE:6D:2A:6B:F8:DD:0C:36:13:A9:0A
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:53:8f:1a:32:3b:6d:a1:df:f6:5a:2f:ba:97:21:98:b6:
2c:32:e4:a3:99:52:7a:56:2f:7f:15:0e:86:82:a2:ce:bc:e4:
b9:74:8b:40:09:6e:51:f4:7c:c4:60:5c:17:94:3c:77:ba:f1:
82:55:f5:20:44:99:36:60:de:ee:e0:81:e3:31:ae:43:12:c8:
16:5a:e3:4f:8d:a8:0c:65:9f:c4:f3:00:ef:6e:22:24:bf:ba:
2f:dc:e9:27:82:1c:e6:29:49:c7:22:3c:ed:98:87:c2:26:53:
cb:92:e8:c6:ad:a2:0a:74:7c:c3:de:4f:bb:75:81:f3:26:8f:
dc:18:96:ef:0c:b4:8d:c0:71:63:1e:df:db:15:47:a3:d5:14:
c8:94:d8:e2:00:c1:ef:6d:33:fe:68:a5:f0:ae:26:87:88:61:
f2:45:e8:01:d1:94:0c:56:43:12:36:9c:92:9d:be:2d:ac:64:
9a:61:35:97:29:1c:a6:36:55:03:6b:f9:f0:78:30:77:7e:8e:
f9:79:7e:11:43:bd:08:b7:0b:ee:8e:c9:ae:24:76:ed:20:f8:
48:92:1e:e9:22:9e:10:28:6d:0f:c4:23:84:1a:2c:ff:83:55:
74:91:49:01:6c:9f:ab:a0:98:37:25:b8:b1:8e:42:9e:92:19:
1e:6c:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:12:52 2026 by rpki-client