
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: aDBHtlWnNvsycFPnVECLg4sLt+OHz489UQ+mRLOVCk0=
Subject key identifier: 56:B1:C2:E3:AF:DD:62:22:94:C5:0E:AD:9C:AE:75:F4:7D:A7:48:A5
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 01A0D1244A7AB9E885A49632C41277F5ECD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 0AFA
Signing time: Thu 24 Sep 2026 02:00:11 +0000
Manifest this update: Thu 24 Sep 2026 02:00:11 +0000
Manifest next update: Fri 25 Sep 2026 02:00:11 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: 3aS8dK4vMV2zzw3iiWI7Omqe8VdBDLWbGIEO0b1oY/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:4a:7a:b9:e8:85:a4:96:32:c4:12:77:f5:ec:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Sep 24 02:00:11 2026 GMT
Not After : Sep 25 02:00:11 2026 GMT
Subject: CN=56b1c2e3afdd622294c50ead9cae75f47da748a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:a5:a8:b3:68:78:bd:28:66:8c:b6:1f:03:
86:6e:5d:7d:2b:5f:67:e6:6c:42:ec:67:90:84:c0:
ef:31:75:9e:0d:e8:0d:bf:12:2c:cd:72:cd:bc:0e:
cc:f6:b5:98:d3:bb:fc:f5:a4:7b:c9:d5:94:1e:2d:
08:f8:be:6a:5d:17:7d:c6:b9:d6:c0:38:bf:07:ee:
87:ec:d2:a1:7f:8b:dc:96:10:d6:11:9c:8f:c2:7b:
75:62:dd:f0:1c:99:ad:55:35:52:69:4a:47:28:26:
8a:48:a5:c4:f8:47:5f:41:92:c9:ee:94:74:7e:84:
fa:ca:85:08:0c:a1:c6:b6:fd:cf:25:3a:0e:b5:0a:
10:41:33:df:53:d0:94:5d:ba:52:49:52:d1:cf:16:
d7:40:b6:8a:d7:47:b8:f3:66:cd:88:2b:3f:c5:9b:
e3:3b:88:48:b4:94:65:2c:5b:80:23:5e:bb:b2:f7:
ae:23:b5:ee:5b:86:4d:69:28:4b:07:b3:d0:e7:7a:
81:e1:7f:f9:70:01:53:53:40:68:32:41:77:20:bd:
80:66:26:92:37:bb:ef:47:36:06:c9:84:a0:ff:e8:
a2:05:20:fb:7c:0e:1d:25:35:ec:01:fe:75:56:a3:
33:a8:e3:f4:69:60:a0:d1:da:dd:90:69:42:2f:bc:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:C2:E3:AF:DD:62:22:94:C5:0E:AD:9C:AE:75:F4:7D:A7:48:A5
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:77:4b:81:33:78:8c:69:e4:ec:35:c7:35:2f:90:9f:42:
40:b3:73:7c:c4:ed:e7:da:89:dc:e7:5a:66:5e:d5:f7:db:41:
64:0b:c6:68:f1:e3:a6:ea:5c:f3:4d:bd:32:d5:43:80:ec:82:
7e:64:10:75:15:03:31:8b:0c:0e:82:55:67:4a:70:21:b5:7a:
98:99:7a:44:2a:f3:08:f6:8d:fd:7b:da:e1:10:9f:99:af:fa:
77:61:3c:c6:a5:04:4f:25:f4:f1:9a:5f:b1:35:6c:6d:2e:31:
b0:25:d1:a9:24:06:a5:2d:2a:48:10:6d:99:8c:2c:f4:98:90:
f4:d1:39:f3:77:71:e6:dc:23:34:9c:3a:6a:b3:a2:63:7b:81:
3b:37:fd:9e:da:65:50:b9:22:ec:f7:57:bd:c4:de:d3:c8:7e:
27:52:e2:8f:7a:f0:be:ad:22:1b:75:02:83:17:89:db:8a:63:
f8:e1:0d:01:8e:d8:df:9c:93:4c:72:96:87:c7:bc:33:87:5f:
cd:1e:e0:47:00:f3:7c:ed:2d:b5:93:ee:1f:ca:73:d1:34:7b:
e9:56:55:30:ba:11:cd:79:d4:d0:af:50:aa:88:73:be:f9:8c:
8c:10:31:f9:80:0b:09:71:61:cd:cf:78:ec:dd:64:6e:0d:65:
99:3f:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:41:46 2026 by rpki-client