Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: DCmwcP9PWFZ829psQWmWU0UaV2+5TzHT2/bD/2QN4zo=
Subject key identifier: 01:3E:F8:8D:6C:75:84:41:81:2A:8E:E3:F1:F6:C4:0E:9B:5C:D7:FF
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 01A10700EDCF80B077A6DE24B942CBBCBE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0CB1
Signing time: Sun 04 Oct 2026 13:01:03 +0000
Manifest this update: Sun 04 Oct 2026 13:01:03 +0000
Manifest next update: Mon 05 Oct 2026 13:01:03 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: Lh7rsZBp2NU8cQi/Nn4RypaF5Hxhynn7aa3dkJ9aVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:ed:cf:80:b0:77:a6:de:24:b9:42:cb:bc:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Oct 4 13:01:03 2026 GMT
Not After : Oct 5 13:01:03 2026 GMT
Subject: CN=013ef88d6c758441812a8ee3f1f6c40e9b5cd7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:83:6b:a2:e1:bd:84:93:fe:14:2d:fc:7a:
3d:f5:3c:80:b3:02:6c:20:ea:76:a7:53:5e:38:d1:
97:e8:06:f3:72:fc:18:f2:52:33:b4:a6:12:0f:4c:
1e:2f:52:98:c6:ba:50:98:3e:8c:cc:18:fa:b3:da:
51:16:69:11:53:e1:b6:19:2f:c6:1a:f5:9b:0e:74:
cb:b2:83:99:b6:05:03:07:74:9b:da:3b:f1:67:e9:
9a:be:76:68:aa:48:49:a4:04:32:55:95:66:84:4d:
c7:97:33:25:ea:19:40:b0:2a:26:87:25:ad:34:60:
01:d6:8e:92:da:2c:ec:82:f7:43:1d:f1:ee:53:56:
ce:15:23:b4:e9:61:31:58:fc:86:2c:bb:d6:64:a1:
67:71:09:48:89:1f:1a:57:2e:eb:d5:4a:1a:e5:51:
cd:3e:24:2d:13:23:ee:7e:c2:67:b4:69:fe:eb:0e:
5b:d2:af:2b:11:49:0d:30:76:f3:f2:b9:d6:50:33:
06:6a:83:85:56:e8:a0:2f:42:1e:63:78:d8:17:c6:
65:f1:a6:9e:bc:ca:f4:60:79:d8:19:93:33:67:c7:
d7:5b:8c:02:6e:53:f8:d2:74:6a:41:89:c7:4a:84:
79:45:89:98:4e:be:af:3e:83:4b:5d:30:44:62:cf:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:F8:8D:6C:75:84:41:81:2A:8E:E3:F1:F6:C4:0E:9B:5C:D7:FF
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:24:9e:19:0e:f4:2d:b5:f9:fd:c9:b3:5b:3d:13:47:b4:2e:
54:2e:cb:ba:02:22:fa:da:c6:58:5f:e2:9d:af:84:39:80:f6:
24:f7:d8:a9:3d:68:14:ad:eb:4c:17:b4:0b:d4:71:78:5b:6c:
be:96:5a:76:d4:b8:20:f0:7e:b0:e1:78:07:50:29:19:63:b0:
61:9d:eb:01:19:6d:0f:82:9c:fb:33:5c:fd:09:4c:74:6e:bb:
ed:bb:5f:b1:0d:70:55:b6:99:bd:0e:7c:ca:b2:18:df:14:31:
42:ff:2e:2e:47:74:26:27:22:d7:d8:08:c9:4c:6f:fd:77:34:
59:ba:45:00:df:06:6b:92:d6:5c:1f:22:15:70:09:54:51:63:
f4:2f:f2:26:e5:b9:be:bb:86:96:79:1d:ea:de:be:c7:74:47:
3f:30:8e:76:81:fc:b5:98:c8:f3:2b:2f:80:df:31:32:bc:1c:
89:39:f2:cc:89:f5:fd:66:7d:a4:bd:10:51:ff:10:2c:d0:dd:
46:f6:89:27:a3:7d:f9:53:8a:dc:84:1d:9e:7d:7c:86:c9:a0:
53:c9:6e:1f:fa:fb:f3:a7:41:25:ba:d5:e4:7b:9a:b4:dc:70:
04:ff:53:e8:68:37:51:d6:69:dd:1f:f6:c2:ec:8e:3f:27:0b:
1f:ff:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:28 2026 by rpki-client