Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
File: Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft (raw, json)
Hash identifier: xHk543qfkml+xYN/vboidLRzTN5ad6MokS5Y4lwXSRo=
Subject key identifier: 2D:1A:F0:4A:4C:CC:D9:AC:04:0C:59:D3:03:24:C1:4B:E7:F8:82:E0
Authority key identifier: 5A:3A:66:7F:6A:52:F5:40:DD:C7:0C:B9:18:20:FD:44:02:22:45:3F
Certificate issuer: /CN=5a3a667f6a52f540ddc70cb91820fd440222453f
Certificate serial: 01A1DB016B46C23265A947493A2A5E05672E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
Manifest number: 5A
Signing time: Sat 14 Nov 2026 17:01:05 +0000
Manifest this update: Sat 14 Nov 2026 17:01:05 +0000
Manifest next update: Sun 15 Nov 2026 17:01:05 +0000
Files and hashes: 1: E2AVz0be9DczQYIdeT7XbjaGIzc.asa (hash: Z3nGQuj1cWuIOa9IA/KVJ62saQljJdjBNSSf/ubofz0=)
2: Wjpmf2pS9UDdxwy5GCD9RAIiRT8.crl (hash: HTHEXC/8ENUqRGxhj+UxgqoBvrUIVAuKhV2BEsyl98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:6b:46:c2:32:65:a9:47:49:3a:2a:5e:05:67:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3a667f6a52f540ddc70cb91820fd440222453f
Validity
Not Before: Nov 14 17:01:05 2026 GMT
Not After : Nov 15 17:01:05 2026 GMT
Subject: CN=2d1af04a4cccd9ac040c59d30324c14be7f882e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:57:92:ca:6a:e0:0c:fc:ce:b7:3c:49:ab:
c7:d7:f9:31:d5:e2:32:ce:a8:7a:2f:20:e9:ac:f3:
8a:6a:e6:40:83:68:3c:a5:f2:fa:5e:da:89:c8:bb:
6e:d6:3e:bf:55:e6:6f:b6:a3:f6:21:12:d7:64:3e:
64:e8:5c:39:88:72:c0:eb:23:20:e6:d8:f9:26:a1:
12:4e:4f:96:cd:e2:72:b4:5f:2b:0c:bf:6a:ec:78:
59:bc:81:d7:d5:94:6d:52:a7:cd:9a:df:9e:9c:ab:
fa:59:54:f9:09:2e:97:c9:8c:b1:43:65:ae:8f:c8:
0e:74:2e:30:22:08:10:9c:6f:f5:22:39:2b:00:e5:
ac:53:9b:99:49:d3:41:d3:20:00:05:64:5c:6f:25:
bc:7d:06:51:ff:60:73:bb:51:f1:f8:cb:91:f9:43:
8d:f3:d3:47:bd:42:7a:1a:06:c4:d4:af:a1:ae:58:
c1:c5:83:a6:1a:92:97:39:d1:60:a3:89:a7:3e:d6:
e6:f2:fe:86:c5:40:ab:9a:16:d8:bf:08:b1:1b:24:
31:0d:6b:85:8f:63:0a:b2:41:32:35:5e:8a:f2:42:
4f:bf:3b:61:1a:1e:21:5d:4d:35:be:0a:d9:55:00:
5f:b6:b1:6b:62:80:5c:9d:33:00:3c:d3:d9:e5:a9:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:F0:4A:4C:CC:D9:AC:04:0C:59:D3:03:24:C1:4B:E7:F8:82:E0
X509v3 Authority Key Identifier:
keyid:5A:3A:66:7F:6A:52:F5:40:DD:C7:0C:B9:18:20:FD:44:02:22:45:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e7:c8:35:44:7f:24:20:c1:2d:38:ed:a0:30:19:c4:c7:e4:
8d:db:9d:9a:2d:ca:33:82:de:57:8f:9b:be:c6:e4:44:4f:ab:
39:28:21:9b:bd:3a:cd:96:cf:c6:ae:c8:cf:ca:eb:c1:c4:27:
64:c7:54:c6:ae:ab:18:e3:6e:49:5a:15:ef:22:2d:3e:83:13:
02:c0:84:5f:7e:8c:b2:c4:78:d2:ac:aa:02:36:8b:12:4f:d0:
b7:8b:b0:b9:98:f7:33:db:12:c6:24:a5:3d:f2:2f:87:ac:c6:
e7:ad:7e:39:3d:0c:0b:a0:73:0d:5e:92:a0:c3:49:48:3b:24:
46:dc:f8:d8:f6:e5:34:fc:24:e7:d1:35:b4:ed:25:7b:1a:3c:
0b:64:67:11:e8:65:ea:ea:94:9c:7b:5d:ec:d5:1b:ea:af:ab:
fb:70:ed:0b:be:99:b3:b3:30:af:2a:90:61:ad:fb:3b:13:80:
62:84:2f:cc:8d:e1:00:4d:7d:90:04:ae:92:b0:7f:e4:de:a3:
4c:22:1e:c6:a3:23:c4:b2:f2:c0:49:ef:46:6d:fe:36:b3:96:
59:f3:b3:5e:1b:f1:87:b7:22:cc:5c:6d:43:8a:86:68:09:ac:
6d:60:91:11:46:19:33:d3:b3:9d:e7:b2:5a:63:24:69:10:71:
b0:87:cb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:49 2026 by rpki-client