Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File: wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier: imSkMDQ2GsDon3RzM4RfdpGQIsAv85IR1NwKwyWEBTw=
Subject key identifier: C8:88:45:E7:8D:60:7D:9C:47:84:BD:D7:29:E0:A3:76:BE:47:7D:4A
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer: /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial: 01A0EC9CAC4F74B67270FA050A88552ACEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 10:01:25 +0000
Manifest this update: Tue 29 Sep 2026 10:01:25 +0000
Manifest next update: Wed 30 Sep 2026 10:01:25 +0000
Files and hashes: 1: XhVmXM4K4HCBlMG1ngBraE1XDdo.roa (hash: Lr9nUJJLPlvbbArNTq9/86G0Uy2dThr703k1XnKZ2HU=)
2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: WCNjyDZCnrOUaO941Lr8uxTsJF3GTpqaw1xdfeVpgyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:ac:4f:74:b6:72:70:fa:05:0a:88:55:2a:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Validity
Not Before: Sep 29 10:01:25 2026 GMT
Not After : Sep 30 10:01:25 2026 GMT
Subject: CN=c88845e78d607d9c4784bdd729e0a376be477d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:24:1e:e2:33:4d:14:91:7f:cd:84:29:c6:
6d:5e:0c:a8:d1:ce:c2:12:eb:23:5d:b1:e3:7c:1e:
bd:f5:ee:cb:b1:04:2c:aa:b4:a3:bb:1e:1a:eb:04:
9b:09:58:a2:69:69:d7:a2:a6:9a:7c:73:d3:b7:a9:
e1:9e:44:75:d2:32:65:61:8b:82:67:6f:a5:f6:ab:
82:df:09:60:82:a2:fa:48:52:cc:fd:f0:3c:32:fa:
7a:43:78:3b:51:22:00:eb:e9:9a:a5:c7:88:78:8e:
7d:1b:13:a7:12:d3:cf:5f:af:ab:af:0d:45:b7:79:
0c:1a:70:df:a3:36:c1:2c:4b:74:d7:2d:20:0d:e6:
eb:44:3a:71:e2:47:7e:c5:1c:0b:c5:74:9d:4c:9d:
82:8f:d3:70:f8:a9:74:d8:e1:82:05:ce:8b:55:a7:
11:fd:5b:89:f5:59:c0:a5:e2:12:68:2e:63:fd:f5:
df:6e:25:20:dd:e4:03:e0:1f:f0:ab:c6:30:50:91:
ca:13:a4:f3:41:94:79:66:af:10:87:e5:9d:c6:0b:
0f:19:aa:56:80:80:fb:f5:3e:34:1c:0e:51:68:00:
65:44:45:88:81:35:6f:fa:32:4d:af:cb:1a:c4:ec:
56:23:a5:72:dd:e7:eb:3a:3d:f2:96:03:82:bc:9b:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:45:E7:8D:60:7D:9C:47:84:BD:D7:29:E0:A3:76:BE:47:7D:4A
X509v3 Authority Key Identifier:
keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3a:27:84:39:da:74:80:c1:a5:b8:e2:b7:4d:ab:f6:77:aa:
2c:d3:73:58:6a:a2:bd:df:3a:34:63:c7:71:48:51:4b:2d:40:
11:d3:e9:3b:69:66:3d:a0:51:df:bf:55:bc:59:3a:d0:a2:f2:
5c:64:aa:f5:42:cb:9d:54:85:25:d6:82:ab:d6:4c:e5:19:49:
f6:96:63:fa:36:4a:ee:d7:e0:a9:4c:58:5d:02:ee:79:f2:c0:
bd:74:46:15:bb:58:23:bf:d1:69:a2:18:a0:c6:19:0a:db:9f:
b3:38:58:f6:d8:9c:5b:08:ec:7a:27:d5:c9:ba:00:87:80:8a:
60:3a:a5:d9:7d:b9:1f:b6:0c:c5:99:3e:10:4d:5d:72:28:47:
f0:b1:a9:73:d8:eb:eb:4c:3c:00:cb:4f:f2:fc:b4:a8:61:51:
4e:be:48:ba:ff:ea:d3:c5:00:b0:83:cc:57:9c:47:a3:d2:ac:
ba:e9:d8:6e:9b:62:59:ee:1e:7f:17:41:de:9e:f2:3b:44:a4:
d0:d2:07:77:55:51:2c:09:f8:58:ec:8b:a2:8c:60:e1:40:54:
da:a0:9b:63:f6:da:54:e9:8e:0d:8c:15:d8:81:e8:aa:19:18:
b2:35:9c:f0:46:46:5d:ea:5d:d5:e4:c0:63:5f:19:07:12:78:
be:7a:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:10:52 2026 by rpki-client