
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier: HGg62V4LAD/FD9+6h8wq9Gf6k27X025BmBQPzBTF7o0=
Subject key identifier: AF:62:A4:0B:73:6C:34:F8:39:78:6E:83:D5:DF:B7:C8:FE:01:43:8C
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 01A1DEDE67C89ECAAFE453812356A8E6CA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number: 11DA
Signing time: Sun 15 Nov 2026 11:01:19 +0000
Manifest this update: Sun 15 Nov 2026 11:01:19 +0000
Manifest next update: Mon 16 Nov 2026 11:01:19 +0000
Files and hashes: 1: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (hash: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk=)
2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: ZkZVbUqDMFmBYJhsIsq+iUfX8zUW0TFStgKsdfs6cHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:67:c8:9e:ca:af:e4:53:81:23:56:a8:e6:ca:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: Nov 15 11:01:19 2026 GMT
Not After : Nov 16 11:01:19 2026 GMT
Subject: CN=af62a40b736c34f839786e83d5dfb7c8fe01438c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:4a:73:c9:0f:35:6c:48:fe:7d:2c:9d:ff:
e7:3c:1c:02:ce:39:84:15:d3:39:84:56:cd:ba:13:
21:9a:3a:d8:8c:d7:07:76:2b:78:09:22:b8:fd:b6:
c8:0a:a0:5e:2c:26:3a:e2:97:ac:77:f6:10:5d:14:
4e:92:e6:9b:00:af:0f:39:cc:1a:80:b3:f4:38:96:
53:4f:6c:76:9a:b4:da:f0:a7:37:5c:ed:a2:c9:11:
b3:34:31:c5:97:b4:c6:d6:b9:9f:53:96:c4:47:1e:
06:f8:be:c6:d7:44:08:f8:57:81:12:4a:77:bc:9d:
99:7f:6c:62:f1:3d:2b:39:cf:b2:6d:0c:9b:43:c2:
26:de:e7:ce:a9:af:58:6a:de:aa:48:7f:77:5f:3a:
03:df:22:ba:68:5b:c6:a8:7e:2c:93:dc:08:42:9c:
94:1e:0c:4a:8e:21:62:0b:10:55:b4:2b:19:32:08:
24:28:de:2c:8d:60:04:60:bc:fb:24:5e:0f:0d:27:
e5:71:f0:46:57:75:0b:b9:90:8e:ca:d9:39:f9:a2:
9f:81:93:33:2b:27:a0:5b:a5:ae:1d:e3:09:29:e8:
0b:64:eb:32:24:87:b9:07:e4:84:8b:1f:a8:58:6f:
1b:17:00:31:45:17:67:96:ad:6c:2d:12:3b:42:46:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:A4:0B:73:6C:34:F8:39:78:6E:83:D5:DF:B7:C8:FE:01:43:8C
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:df:17:23:be:08:ea:fb:1c:50:6b:7a:a4:78:df:00:f3:a5:
cc:ec:7d:b6:2d:9c:41:4d:c8:d1:47:c5:ab:81:96:60:54:1c:
51:d5:48:b5:c6:5b:07:ed:dc:39:78:20:57:e7:b9:53:11:77:
e8:1a:2a:62:2f:8e:b9:f0:9f:61:b2:29:d4:c3:27:95:f8:85:
a0:b4:e2:d0:ca:81:b7:a7:67:c7:75:d5:40:ef:c8:49:c4:99:
31:c5:1a:5e:72:69:4f:9d:ea:d2:ef:95:46:db:8a:4e:44:38:
e9:2c:0a:22:e1:10:d4:aa:31:b8:6f:bd:03:32:78:74:94:2f:
00:60:48:01:52:b5:61:62:6e:6a:1e:3a:1a:41:63:6f:d7:62:
2a:6e:47:fd:e4:01:e2:56:d6:1c:a5:16:c9:55:ce:b6:1c:93:
17:03:88:52:31:92:6f:9b:a2:01:50:63:0b:da:ce:8c:f4:d5:
58:d6:5a:af:e9:6b:95:5a:d1:09:48:7a:6d:f2:53:f5:b3:7c:
4d:59:63:3f:c8:91:f8:92:12:4e:01:06:dd:a4:2b:99:9b:d1:
cb:02:bc:c2:f5:f1:f6:d6:c1:4e:26:a6:5d:fc:8e:88:7d:db:
8a:e6:57:e5:91:6b:9f:aa:b4:5f:c8:ba:a9:d0:5a:cf:25:66:
d3:ee:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:49 2026 by rpki-client