Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: W9xvmG9RAfQiMR6RYV8HqmKJPw8PYcUfgRB5wvjj+Cc=
Subject key identifier: 8A:9D:D9:63:14:A4:E0:60:17:1A:BD:B2:E2:12:FE:D6:8B:07:20:5E
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 01A0F756D864AE56EB60A22AB21C17870F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 1084
Signing time: Thu 01 Oct 2026 12:00:58 +0000
Manifest this update: Thu 01 Oct 2026 12:00:58 +0000
Manifest next update: Fri 02 Oct 2026 12:00:58 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: CKpGuSxvOrD2EsdiudqRRtqZn+9vKU13wGwe0QCptxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:56:d8:64:ae:56:eb:60:a2:2a:b2:1c:17:87:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Oct 1 12:00:58 2026 GMT
Not After : Oct 2 12:00:58 2026 GMT
Subject: CN=8a9dd96314a4e060171abdb2e212fed68b07205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:3e:2b:d1:d3:17:86:1b:a1:2a:63:68:52:
72:d8:4a:68:9a:43:d3:1f:ae:cd:24:9d:c9:62:31:
1a:a3:5d:21:4d:b9:d6:fc:b0:37:b4:10:32:da:3d:
88:22:83:a1:f6:c6:54:bd:64:bc:33:b3:e4:59:78:
bd:9f:8a:31:75:87:50:51:03:0b:aa:9b:fd:f6:44:
5e:86:2e:3f:d4:8d:6c:94:96:ac:0e:ac:00:9c:82:
39:db:fb:20:e6:41:41:f4:29:fc:36:7a:50:f4:9a:
07:a3:e6:ba:a5:bf:ff:8b:c1:1c:1d:af:a2:d4:07:
81:88:95:9c:34:db:80:b2:e2:f3:fc:18:55:6c:f1:
5e:ca:e0:cf:3e:be:81:f9:c9:ee:5d:ab:ee:20:d9:
65:e2:c7:5e:e3:b5:14:35:f0:53:55:75:f5:e2:18:
e2:de:56:55:9a:68:35:d3:d8:79:79:c8:8d:18:19:
cd:dc:e6:5f:71:ec:52:11:cd:97:06:ac:d4:d3:58:
a7:56:1d:af:8f:02:86:20:62:13:ef:21:d9:19:61:
de:a9:fc:73:2a:cf:f5:0f:77:d8:fe:f5:2b:7b:b0:
3c:69:51:17:b6:91:25:fc:aa:9d:e4:03:ff:48:23:
20:65:38:1d:5c:f8:cb:3b:e5:a4:27:ab:db:66:14:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:D9:63:14:A4:E0:60:17:1A:BD:B2:E2:12:FE:D6:8B:07:20:5E
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:9a:aa:5e:2e:85:ce:52:8d:87:f3:8c:86:cf:c2:c1:87:
e9:96:c2:b0:d9:de:9b:32:a5:eb:07:48:ca:82:3e:15:93:02:
20:44:d4:af:a1:2f:45:0a:b8:04:b7:9c:35:1c:f6:b7:59:57:
56:56:03:0d:ec:a5:ba:be:0f:71:e2:bd:9a:35:29:42:29:29:
42:d5:43:9c:c6:d7:a9:cc:ed:47:98:dd:af:32:de:ea:4d:28:
38:24:cd:75:27:ca:36:98:e5:21:3f:df:72:79:e1:6d:20:52:
6e:3a:50:09:92:c4:83:c8:10:cf:c5:d2:c7:5c:9a:d9:21:3d:
a3:26:4d:3e:39:fe:d2:42:0e:cb:b8:86:bd:c0:9b:db:6a:ca:
6f:c1:2e:2d:d6:7d:ba:c1:1a:3b:13:76:e1:ee:68:b2:16:99:
90:8a:7a:a1:b4:fc:ec:59:16:a3:b5:c8:6b:72:db:5a:a2:da:
a9:1e:8b:e4:da:bc:fc:36:6d:ff:9f:d3:dd:37:ab:6b:5b:36:
c0:e0:87:40:5b:92:a7:f0:e5:1c:db:33:b6:1f:43:2b:c7:98:
6a:86:3c:e2:cd:52:44:14:9b:60:79:cd:3a:ae:74:b0:aa:87:
83:34:5e:a9:63:f9:14:5f:65:08:a7:69:65:a6:8b:79:b6:7c:
e7:96:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:02:44 2026 by rpki-client