
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: BbfzRCzyuAT8nvMbe6VOzXJ15oV2vmtw0ylUt55f26Y=
Subject key identifier: 66:C1:B0:67:59:93:5C:2F:CA:76:22:8E:38:E8:47:D5:7F:84:81:50
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 01A0FCEBAB057C70AAD997D15ACAB55D1232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 10E4
Signing time: Fri 02 Oct 2026 14:01:38 +0000
Manifest this update: Fri 02 Oct 2026 14:01:38 +0000
Manifest next update: Sat 03 Oct 2026 14:01:38 +0000
Files and hashes: 1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: nhtXWNDUzOMQaDEjNMhxL3EYb3WDLyCGMdi9Wki2tps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:eb:ab:05:7c:70:aa:d9:97:d1:5a:ca:b5:5d:12:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Oct 2 14:01:38 2026 GMT
Not After : Oct 3 14:01:38 2026 GMT
Subject: CN=66c1b06759935c2fca76228e38e847d57f848150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:81:59:74:43:4a:2a:49:95:c5:9e:1a:82:
56:37:f1:c9:97:4d:3d:53:03:2f:88:8d:1c:4d:0e:
ef:c1:8a:68:15:b2:ab:78:df:c1:c5:d3:26:be:40:
7b:57:d1:4f:75:78:39:79:e8:2f:5d:13:e0:fd:45:
04:5e:76:b5:f0:9d:ec:61:e5:3a:e9:11:d5:cd:5c:
5c:ff:27:d3:e5:c2:0b:b0:34:01:62:0b:ce:96:72:
ef:35:ec:02:36:ed:ee:af:2c:d6:f5:e5:88:df:1f:
d8:e7:bb:2b:2a:3c:e5:c8:3d:a2:d2:48:32:18:63:
27:b9:ff:ee:28:9e:3c:7e:05:ef:a1:d6:b1:0e:a3:
ec:af:76:de:b9:1f:7e:fe:ce:54:fa:08:dd:ab:47:
33:c7:ee:d8:df:45:c7:6f:76:97:1e:ac:87:49:15:
46:8c:96:70:0b:14:5f:90:a8:4d:46:9e:d7:05:72:
15:b5:21:13:d1:f9:2e:02:a0:67:76:52:9a:26:89:
af:0b:5a:17:43:25:29:99:05:58:3f:b4:d3:ac:81:
a4:7f:90:e8:0d:ea:4d:08:b4:83:de:12:d5:2a:6c:
ad:bb:7e:38:75:e1:7f:3d:e8:03:ad:e4:a0:94:f9:
0c:80:63:c9:7c:62:f9:39:67:c9:74:d7:0b:4e:2f:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:B0:67:59:93:5C:2F:CA:76:22:8E:38:E8:47:D5:7F:84:81:50
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:9d:4d:09:86:41:a1:fb:86:73:ae:b9:60:6d:82:0b:85:
a2:6c:dd:dc:70:0f:d9:87:ba:86:51:04:f2:f6:86:25:0d:e2:
0b:72:42:87:5b:4e:a4:f3:c4:da:aa:e0:c7:a0:b2:07:09:e5:
bc:22:3d:47:a0:89:4e:fc:8e:a8:ed:be:64:2f:b9:f2:23:f3:
29:e2:4d:fa:7a:a1:2e:74:9c:f8:80:15:f3:81:69:9c:d3:4a:
26:06:43:0c:c1:ba:07:41:e1:34:87:e0:4e:eb:6e:46:b8:4a:
52:0f:f2:94:f7:1d:1b:b4:4d:a9:19:9e:06:d7:8d:96:34:32:
2d:6a:f3:00:75:c1:1b:12:73:44:4c:5a:50:99:dc:dd:d5:aa:
2a:c7:f5:b8:5c:c5:34:31:41:1b:10:e7:26:74:3b:83:fc:70:
08:4e:b0:ab:4b:84:52:92:d8:90:26:c8:bb:eb:db:be:b8:6f:
4d:92:b9:03:ed:f9:96:cf:4f:36:e0:d1:9c:ec:98:a0:30:f6:
55:b4:d2:aa:d5:14:f0:b7:f3:e8:e2:51:24:1b:9f:54:94:23:
6c:e7:c6:f2:44:9f:3f:73:be:b4:40:20:13:72:30:ec:2c:99:
c8:06:7b:1a:f5:d5:44:a1:e8:3b:15:89:96:01:95:8d:5d:b3:
93:17:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:28:29 2026 by rpki-client