Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: 7NGjSJuXzvZgYfFXmDpG+MM6qMeKoL9QeCpBylw2ud8=
Subject key identifier: 32:D0:72:E9:CF:8F:76:CB:5A:B4:85:19:CC:1F:96:8A:43:66:79:84
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 01A0DACD0F883569EF4E862F51B1EF2D31DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 23:01:06 +0000
Manifest this update: Fri 25 Sep 2026 23:01:06 +0000
Manifest next update: Sat 26 Sep 2026 23:01:06 +0000
Files and hashes: 1: FC3W89E7lPxHMttdKdqwUZ8ayGo.roa (hash: P2wT7iaUIOeyGlWOhw0T1qRlFG0Wm2TszirFqNtZ4G8=)
2: Q1lmJ-pOH8Zlev_WBTLT_II-SzM.asa (hash: XpylMLX06y98WuOlXUOZt6B7EKHaAeUMsRTKgHzZXVU=)
3: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: dxVgBsm5Cr5cdjcYPsW4EnFFJrrbXPOsbiJywslRJQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:0f:88:35:69:ef:4e:86:2f:51:b1:ef:2d:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Sep 25 23:01:06 2026 GMT
Not After : Sep 26 23:01:06 2026 GMT
Subject: CN=32d072e9cf8f76cb5ab48519cc1f968a43667984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:65:9a:67:1b:62:8d:1b:11:47:d7:08:2e:
c1:1a:d3:35:86:2b:ff:f1:4f:9c:90:8f:bc:6c:b5:
be:7b:6a:9d:73:a8:fc:af:df:7a:82:f2:8b:75:a2:
57:9a:24:89:2f:e7:54:58:23:ec:8d:36:e6:41:8a:
b1:5e:8d:b6:ae:1a:47:04:ea:ab:8e:3f:11:90:d2:
0b:71:4a:9b:5e:68:4b:86:bc:92:2b:a0:a5:66:3b:
36:fd:31:e2:7c:73:75:1f:ae:2b:13:2a:34:91:15:
96:41:0c:e2:2c:49:34:ef:fc:9d:b0:1f:10:c1:80:
5c:fa:8e:5c:e4:eb:22:21:6d:19:1c:cb:0c:b2:5c:
82:f7:38:88:c5:c9:ea:ac:8e:f7:c6:2a:84:0e:1a:
60:c5:3b:71:bd:dd:40:6b:b3:22:8c:ba:0d:c7:4d:
dd:5d:d8:92:21:bb:6f:b2:ff:5f:4d:99:03:30:87:
f4:1e:4f:27:10:b9:f0:9b:b6:8b:c5:65:83:04:3f:
47:2f:0b:46:d8:a3:f0:e5:36:88:47:f7:c8:28:46:
db:92:bf:c7:98:d5:6b:13:0d:a0:6a:40:8e:16:71:
09:5f:44:b3:51:4c:10:07:9e:88:67:4f:33:08:92:
dd:8f:94:5b:b4:12:b2:40:42:4f:d0:94:02:6d:10:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:72:E9:CF:8F:76:CB:5A:B4:85:19:CC:1F:96:8A:43:66:79:84
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:83:c1:4d:97:96:11:c1:68:60:dd:84:08:53:cb:21:80:
3c:9b:6c:b3:ef:60:d8:64:9f:79:55:77:99:64:b9:f8:c4:73:
bf:9c:fc:24:7b:7f:40:b8:23:5f:85:5d:62:74:bf:f1:ba:c5:
15:e3:67:b6:4d:10:20:22:c9:51:97:cc:0f:c0:84:b9:ea:8a:
36:88:9b:c3:e1:6e:ed:a9:ad:71:a9:81:f1:13:60:69:bf:39:
83:8f:07:d3:60:8c:87:66:75:82:2d:aa:1b:2e:80:ea:b5:79:
26:dd:6d:4e:ab:ba:b8:f1:85:4c:37:d0:bc:6b:79:57:ee:28:
9e:e9:18:9d:3d:9c:31:c5:0f:c7:81:5e:3c:35:e5:b4:7f:d8:
77:a7:3d:61:02:4d:ad:0a:db:bf:01:ea:59:19:e1:85:f5:5f:
8f:29:22:23:9a:53:c9:90:38:06:59:35:79:fd:58:db:6c:4d:
4e:96:75:43:ab:5f:62:9f:91:b1:96:b6:64:9c:d4:68:07:fd:
b8:da:f0:34:24:90:3e:c9:97:34:68:79:01:2b:d3:50:10:2d:
9a:55:40:1a:99:76:1e:92:cb:3c:7f:21:fc:96:67:26:65:74:
d5:77:8e:e1:6d:52:67:82:fe:54:18:bd:9f:fb:80:21:b2:a3:
53:3b:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:27:32 2026 by rpki-client