Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: Toe5MPN3bCSJAlU/+YjWAmaV2vMhhGYFmjVi/yXPA8U=
Subject key identifier: 86:01:63:80:F1:B0:67:A8:C5:25:CA:9E:01:93:12:F7:80:3E:2B:69
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 01A0DACD47D24402ABBC328BCE79D0ACF34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0D88
Signing time: Fri 25 Sep 2026 23:01:21 +0000
Manifest this update: Fri 25 Sep 2026 23:01:21 +0000
Manifest next update: Sat 26 Sep 2026 23:01:21 +0000
Files and hashes: 1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: M5n/bn5xc7usQl57bvt5QkGCPG2ODvuWoM1O3J5/ImQ=)
3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:47:d2:44:02:ab:bc:32:8b:ce:79:d0:ac:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Sep 25 23:01:21 2026 GMT
Not After : Sep 26 23:01:21 2026 GMT
Subject: CN=86016380f1b067a8c525ca9e019312f7803e2b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:7e:04:c2:a3:98:84:77:80:8f:32:25:27:
f3:29:13:26:a9:fa:f1:15:36:93:2b:4e:9d:10:23:
7e:31:76:80:61:7f:4e:e1:bb:7d:19:e7:20:7c:59:
17:f2:89:a0:7f:8f:d0:a0:d3:b5:81:42:29:49:37:
ce:f8:da:ed:20:12:60:32:ac:23:87:06:82:f5:92:
0c:f2:ce:09:15:34:82:b2:6e:94:be:a1:53:95:db:
0b:ef:89:f3:c0:eb:6d:81:90:a9:c5:c3:f0:ac:f9:
6a:8e:1f:67:6f:ec:7f:14:23:10:86:96:75:ed:cb:
92:e9:9f:6a:84:7a:f0:95:4a:e3:71:cf:58:0b:9d:
11:d8:5a:7c:47:27:48:24:e0:88:57:19:93:07:01:
96:74:f2:d1:ca:8e:30:64:7e:ae:48:22:de:06:06:
22:47:0f:31:9b:95:83:22:66:ac:d4:ca:d9:01:39:
ec:21:a8:36:c4:de:8b:1b:78:93:d0:3c:f8:7f:0f:
f9:0f:c9:5f:d9:f4:c5:ff:aa:e6:e4:f7:c9:9b:4e:
9a:83:19:a9:24:25:3b:74:0d:79:36:d3:92:f0:41:
34:bb:21:45:cc:6b:41:df:81:07:bc:06:4f:f3:79:
2a:7d:86:1c:6c:82:95:02:bf:10:25:4a:64:69:e4:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:63:80:F1:B0:67:A8:C5:25:CA:9E:01:93:12:F7:80:3E:2B:69
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:34:8a:fc:d7:05:f7:68:6b:1e:3e:f6:d2:d1:da:30:ff:
7c:89:46:38:75:51:14:6c:15:31:7b:be:5d:7f:f1:97:50:a9:
11:ef:45:58:d0:1f:e3:25:c0:cb:4d:fb:03:1e:a4:9c:40:e2:
03:3d:bf:8a:da:22:e2:2f:d0:52:19:93:d8:8c:68:bd:16:75:
65:55:74:f3:0a:36:04:67:0c:dc:f6:43:72:ab:bd:09:c8:b0:
bc:2c:c0:ca:98:fb:2d:d0:b1:3e:dd:29:5a:22:eb:40:fb:4e:
f6:32:09:d9:d0:fb:cb:dd:01:3a:f8:9e:c7:70:c8:fb:ba:8c:
ba:fb:83:30:34:5f:f8:14:4d:73:5e:44:94:96:e5:b1:5a:62:
f0:41:5f:78:8b:b8:af:cd:51:e4:32:61:00:5f:69:46:b5:83:
b2:e7:c1:c3:a9:c8:a7:61:7b:9b:f6:f3:8d:ff:88:79:a8:3b:
28:66:6a:4c:81:8b:3c:02:5b:aa:74:0c:24:21:bc:df:4e:1e:
2f:47:90:67:ce:7d:16:5c:d6:bc:2d:af:44:05:f7:a2:46:96:
ac:64:c2:19:18:a2:21:85:f6:ce:bb:ec:a3:1f:cc:c7:4c:b0:
76:dd:97:d7:14:80:2f:6d:12:37:21:05:7c:2d:48:ea:6a:5e:
51:bf:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:51:51 2026 by rpki-client