Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.mft
File: W0MXLlLY9VHpIWRSfAYb7DedhnE.mft (raw, json)
Hash identifier: gcuyKCADwfkKtrQui5SmweY1SKYIOA9asnmnHsWRIiw=
Subject key identifier: DC:1F:BC:F1:FF:AD:43:06:7D:EA:BF:F4:0B:B5:E3:33:B6:D4:08:66
Authority key identifier: 5B:43:17:2E:52:D8:F5:51:E9:21:64:52:7C:06:1B:EC:37:9D:86:71
Certificate issuer: /CN=5b43172e52d8f551e92164527c061bec379d8671
Certificate serial: 01A1DE032E4CA7D314BBD5A0932ABD8E1DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0MXLlLY9VHpIWRSfAYb7DedhnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.mft
Manifest number: 2F
Signing time: Sun 15 Nov 2026 07:01:52 +0000
Manifest this update: Sun 15 Nov 2026 07:01:52 +0000
Manifest next update: Mon 16 Nov 2026 07:01:52 +0000
Files and hashes: 1: FDegULGzvfG-gNS-LUXKoPdnj9A.roa (hash: h1P7Z0bSly3+qrMo8xryY2Ga1F0erUT3h3+flgUiiBk=)
2: W0MXLlLY9VHpIWRSfAYb7DedhnE.crl (hash: QYTAJuj3mXDvms2LdWpr8vBdx480g4kT/h+8lg1h7PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0MXLlLY9VHpIWRSfAYb7DedhnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:2e:4c:a7:d3:14:bb:d5:a0:93:2a:bd:8e:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b43172e52d8f551e92164527c061bec379d8671
Validity
Not Before: Nov 15 07:01:52 2026 GMT
Not After : Nov 16 07:01:52 2026 GMT
Subject: CN=dc1fbcf1ffad43067deabff40bb5e333b6d40866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:49:0b:24:d4:97:68:12:df:39:66:f5:c2:
56:b5:41:d4:56:c2:d7:47:b4:8d:c8:8e:f9:f1:2b:
3e:81:67:7a:5c:fb:64:c0:b4:91:df:a7:90:1f:16:
e3:8f:5a:ba:24:ec:b0:39:68:df:74:d1:74:3a:60:
ff:f2:7d:ca:06:82:22:0d:70:d4:c3:ef:ec:6b:88:
96:67:0a:39:16:df:33:ea:68:84:82:a6:5c:20:dd:
c0:8e:c6:2d:48:eb:8e:a6:c0:14:f8:e6:90:60:77:
b4:c5:cf:47:44:1e:51:ea:ee:d0:1e:a1:60:4c:ae:
49:bc:82:f7:b5:df:b3:50:64:a4:f2:fb:f8:c0:35:
81:e4:ec:64:60:2c:08:3b:11:93:c9:0e:4e:0b:1a:
1b:e6:aa:2c:11:c5:a8:ce:d2:50:21:d0:eb:b3:a9:
d4:07:96:21:ee:93:9a:5c:6a:14:a6:b8:24:03:b8:
d6:e6:f1:5f:b0:dc:31:83:4b:df:0f:e6:05:02:bb:
08:a7:7c:0f:4b:0a:c7:a9:16:5d:fd:02:97:76:1e:
08:84:0e:9f:73:03:24:6d:0b:43:c0:ee:e7:60:a8:
0e:92:6f:5b:fb:e2:44:90:1f:d8:3d:5b:6c:17:63:
ad:73:99:08:08:42:e1:4a:4c:4b:65:a3:30:22:c7:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:BC:F1:FF:AD:43:06:7D:EA:BF:F4:0B:B5:E3:33:B6:D4:08:66
X509v3 Authority Key Identifier:
keyid:5B:43:17:2E:52:D8:F5:51:E9:21:64:52:7C:06:1B:EC:37:9D:86:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0MXLlLY9VHpIWRSfAYb7DedhnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7f:c3:f0:6d:dc:ef:bc:90:58:3e:3e:ec:a0:29:75:0b:34:
7d:4f:a8:64:26:2f:01:0c:3c:26:ae:c0:6f:72:9f:8c:f5:c4:
31:01:27:15:04:ad:a4:f5:c0:87:94:5f:76:c3:7f:ae:39:34:
aa:1e:14:b0:9a:5a:81:03:a8:68:b4:07:c8:e9:9d:ae:50:1b:
21:d4:cf:24:91:9d:75:fc:da:2e:ee:34:7f:44:e8:9f:11:dc:
d6:10:f2:9c:c7:03:61:41:3d:44:be:87:ad:aa:5c:4f:10:d7:
d8:c3:9f:ee:4c:d6:f6:a6:d0:e8:b6:b1:a3:5e:da:ed:c1:a8:
18:9e:2f:0e:47:54:c8:24:fe:1c:6e:8a:44:6e:9b:b6:39:4c:
4f:2c:6a:db:c9:a8:43:90:88:4d:c9:31:f9:80:e5:b4:5c:63:
f7:fe:4d:7c:92:65:34:7b:6d:ff:66:d1:6c:83:72:79:19:46:
16:41:e4:22:d8:37:e0:8a:1f:ba:1d:e6:05:bf:0a:e4:2c:74:
03:7a:aa:9d:0c:8c:6f:c4:cb:3a:a5:af:63:ef:43:52:31:1d:
92:6d:f2:c3:9f:b4:38:79:7d:46:9f:b2:01:cb:6b:9e:c7:59:
49:0b:fe:06:23:2a:20:38:ae:27:f3:72:c0:db:ba:49:4f:5a:
fa:20:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:42 2026 by rpki-client