Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: 6SPxtGHLgHTG1eEuUbRtakLEcxpLyD9TpMRI5dDlXx0=
Subject key identifier: A4:B6:D1:BA:23:B4:2E:84:E5:98:F6:52:87:79:8B:13:6F:22:1D:F0
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 01A17F6150182B3DDA02B0C8F03FCB6E3DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 04D0
Signing time: Tue 27 Oct 2026 22:00:46 +0000
Manifest this update: Tue 27 Oct 2026 22:00:46 +0000
Manifest next update: Wed 28 Oct 2026 22:00:46 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: CydEuNhgTEgVA/lGUUJUG7bRvA/2svchJH5fFSo4YJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:50:18:2b:3d:da:02:b0:c8:f0:3f:cb:6e:3d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Oct 27 22:00:46 2026 GMT
Not After : Oct 28 22:00:46 2026 GMT
Subject: CN=a4b6d1ba23b42e84e598f65287798b136f221df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:74:4a:52:da:0f:6a:97:89:b0:9f:24:c0:
d9:26:ba:ea:52:99:bb:96:19:fa:da:85:7a:0f:59:
42:d4:e0:ca:6f:f1:36:49:3b:59:2f:f3:bb:33:38:
a1:a4:4d:d5:69:e8:b6:25:4b:d4:85:82:07:b8:d1:
69:25:0f:8b:c3:38:e5:84:66:0e:56:09:41:34:b3:
19:3a:0a:ba:82:99:02:00:d7:a2:b2:e1:7d:fd:3e:
5b:2d:4f:14:da:e3:08:63:df:78:1a:21:ed:df:47:
6c:d2:13:ab:bf:21:d3:45:39:38:db:ea:ea:8c:e1:
a9:89:88:69:89:fa:7c:9c:0f:33:d9:d5:00:d5:e0:
61:bf:74:aa:c8:71:26:31:ae:dd:3b:68:4b:15:d7:
12:39:a8:38:d4:b1:b2:10:98:78:f7:ba:d8:9d:1a:
53:e8:75:6b:50:43:d0:27:c6:f2:f6:be:24:05:36:
7e:8f:b2:55:65:19:ec:a0:80:64:77:fc:4c:8d:09:
05:28:3a:71:b2:fc:22:5c:e4:a5:7e:3b:a0:75:30:
ba:18:22:d1:0d:f2:14:79:d2:41:d3:aa:fa:95:f0:
fc:54:5d:82:a4:7c:50:1d:22:2f:ae:d8:73:1b:64:
c9:2f:96:ef:48:ca:c9:ed:9c:91:9f:d7:d3:de:ab:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:D1:BA:23:B4:2E:84:E5:98:F6:52:87:79:8B:13:6F:22:1D:F0
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8c:a4:72:94:db:a0:a7:0f:58:fb:a0:c4:35:10:b3:fc:39:
9e:ea:6d:2f:6d:d9:4d:ed:1a:e2:8c:66:1a:0b:90:83:0a:66:
1c:1f:da:14:8a:da:b5:b0:91:7d:3e:e2:f6:37:f9:50:8f:19:
01:d9:fe:45:0a:e9:97:f7:62:b5:a3:26:b6:d3:fc:17:d9:e2:
c2:dd:2f:aa:48:58:fc:0c:79:10:70:84:10:5c:4b:02:38:18:
73:0d:86:b9:1d:e2:ba:e9:cf:e9:bf:62:bd:74:63:f5:07:dc:
15:76:00:14:7f:0e:51:43:95:21:2f:b1:b3:74:67:a6:d6:fc:
fd:90:c8:ae:a7:e1:43:f8:5c:ba:39:d2:9c:2b:2d:79:d3:c2:
b2:ab:75:f7:d2:f5:cf:b5:87:e4:1e:ed:d2:38:f9:25:8b:7f:
9b:76:4d:50:a0:06:f0:88:a2:c6:58:3b:4c:fc:cd:f3:f5:27:
a3:d0:3e:17:67:b2:a9:4f:da:3a:bd:36:8c:14:fa:d6:11:c2:
d8:7a:b2:69:13:9b:df:da:6d:43:c3:db:43:14:aa:8b:13:04:
eb:13:bc:21:df:e0:ca:87:f3:1f:fd:e2:19:7f:85:e0:b8:e3:
ff:67:51:ac:81:c7:13:d6:54:5f:7b:5f:3b:9e:7d:85:ce:e4:
6f:40:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:56 2026 by rpki-client