Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: R3CukabqKjVFh3q0PRq32HpqYuffYX218zDKi1r3eJg=
Subject key identifier: 77:6C:41:C9:9D:80:7C:DC:D1:86:98:AE:CE:0C:09:CF:CE:D7:17:9A
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 019FA0722ECE573AE20C4D77BE66D1B2E3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 03D8
Signing time: Sun 26 Jul 2026 22:01:05 +0000
Manifest this update: Sun 26 Jul 2026 22:01:05 +0000
Manifest next update: Mon 27 Jul 2026 22:01:05 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: DY+LDAdhDkcicM4ZlCWtfBegZSSK82m6SClMmNW65Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:2e:ce:57:3a:e2:0c:4d:77:be:66:d1:b2:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Jul 26 22:01:05 2026 GMT
Not After : Jul 27 22:01:05 2026 GMT
Subject: CN=776c41c99d807cdcd18698aece0c09cfced7179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:ba:e8:c0:65:fe:f6:b4:b5:2f:ec:fa:07:
cd:1c:ee:9b:fe:d6:7b:cf:90:76:54:59:52:c3:e1:
36:78:29:84:d6:0c:8f:a9:d1:ad:1f:0c:e9:d3:a7:
67:bf:7b:f6:cf:19:66:08:87:67:85:ea:24:df:c2:
6e:96:39:ef:9a:8f:34:39:fb:68:61:5f:26:74:11:
49:19:c5:5e:28:8c:5a:47:4b:55:f7:9d:0e:2c:13:
d3:ee:f2:52:46:fb:3a:35:19:dc:a9:e9:e5:b1:85:
61:73:d5:39:f0:0b:b7:cb:4d:98:c6:18:45:eb:fa:
4d:17:7e:3c:6b:4e:2c:f0:06:c2:30:02:89:06:ec:
a2:ec:8b:4e:67:77:e7:25:70:81:23:63:ac:a9:d4:
c4:d5:2f:06:60:64:3d:6c:2f:7d:b8:e9:c2:7c:36:
05:cb:42:99:b5:af:0d:db:ce:42:46:69:41:2d:3f:
bb:76:ba:66:0d:ef:01:b1:34:85:56:1f:45:30:50:
4b:84:6d:1a:c2:35:65:2b:8f:b3:3b:57:f0:e2:83:
99:5d:97:1a:95:60:05:97:1c:bb:f8:82:cc:62:ed:
c9:48:a1:e0:b5:6f:6f:c2:7e:09:ac:32:74:7b:1b:
1c:ec:87:44:33:60:18:3b:40:33:74:74:fa:76:0b:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:41:C9:9D:80:7C:DC:D1:86:98:AE:CE:0C:09:CF:CE:D7:17:9A
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e7:69:e4:8f:04:b0:ae:84:59:56:9e:3e:46:7d:9c:ef:12:
92:74:40:89:d8:cb:1c:25:93:be:14:4e:a2:89:fb:d6:09:0d:
ca:85:a3:7f:eb:54:c4:28:c4:6e:15:e1:d3:17:e1:bd:12:e2:
0c:4a:f3:77:c7:09:06:38:41:3b:02:18:10:3d:45:cd:86:9d:
c9:a0:26:dd:d4:20:0d:38:9d:d6:d7:f1:3c:c5:a8:b7:bd:f3:
23:07:4e:a1:81:bd:ce:9b:3e:84:82:4b:a9:9a:62:ec:3e:e3:
62:83:35:83:1f:7e:c9:13:3d:01:32:4e:bf:d5:20:01:ac:20:
c0:b6:8d:7e:c0:bf:c4:a6:49:1b:40:c6:10:24:d9:ff:63:a4:
77:dd:af:d0:08:da:df:85:2c:38:db:11:84:72:dc:fe:db:2d:
fa:d6:8f:2a:2e:f3:90:b3:eb:80:bd:0c:78:d6:ca:79:80:79:
d5:c0:f3:7d:e9:f3:e5:59:7b:49:ef:b3:a8:68:74:00:1b:88:
58:1a:68:81:d1:b6:ae:9e:4d:92:6c:2d:77:03:96:15:17:2a:
5e:04:fb:87:b2:2f:fe:c9:8b:69:85:34:55:01:ab:41:20:58:
81:a1:7a:b0:b5:64:a0:a6:7a:10:bd:b1:e6:76:76:d8:d9:7e:
0a:0a:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:00 2026 by rpki-client