Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.mft
File: wkE33-rSXRo-5p33cm4bAO-OPzg.mft (raw, json)
Hash identifier: vl418paI6E7roi6Q8YNM/tLiawWhABh53P7U/Ewxh9k=
Subject key identifier: 38:79:0E:C6:CF:B2:0D:A7:DA:F9:19:8E:1E:B2:50:20:95:F9:0E:F2
Authority key identifier: C2:41:37:DF:EA:D2:5D:1A:3E:E6:9D:F7:72:6E:1B:00:EF:8E:3F:38
Certificate issuer: /CN=c24137dfead25d1a3ee69df7726e1b00ef8e3f38
Certificate serial: 01A1DEA7A01D6E799A440C3A56D84630131C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkE33-rSXRo-5p33cm4bAO-OPzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.mft
Manifest number: 0D
Signing time: Sun 15 Nov 2026 10:01:29 +0000
Manifest this update: Sun 15 Nov 2026 10:01:29 +0000
Manifest next update: Mon 16 Nov 2026 10:01:29 +0000
Files and hashes: 1: XKrY_x0GDKPcMIjZ1n3esR_mAvQ.asa (hash: uZVEPzWO4WFR167D1Ln75XvHbpwu6UwQ90LgwHSk95Y=)
2: wkE33-rSXRo-5p33cm4bAO-OPzg.crl (hash: R9/n2MwwX6CGIr8FfGv2eO1Rgbz+J64MDOlU71+mOoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkE33-rSXRo-5p33cm4bAO-OPzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a0:1d:6e:79:9a:44:0c:3a:56:d8:46:30:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24137dfead25d1a3ee69df7726e1b00ef8e3f38
Validity
Not Before: Nov 15 10:01:29 2026 GMT
Not After : Nov 16 10:01:29 2026 GMT
Subject: CN=38790ec6cfb20da7daf9198e1eb2502095f90ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:04:89:f1:b1:b6:a8:76:e7:ce:b9:5c:12:
dc:d1:9b:2d:1a:bf:1a:3e:39:20:ff:b7:ab:c7:40:
fa:4f:4a:07:2a:b1:ff:db:b7:bd:fd:6c:4e:42:b9:
4f:95:c9:d3:c9:65:d6:9f:8f:5b:2c:e0:20:89:4f:
ed:37:b0:81:35:d9:d8:76:7c:bf:1c:ed:24:70:ba:
28:c3:25:8d:04:b1:59:04:7f:85:4b:44:c1:d9:16:
ca:18:30:d2:16:86:24:fb:87:e8:9d:23:84:b8:ab:
e9:7b:55:2e:d1:cd:d8:3c:8d:e4:c6:ef:dd:36:ef:
73:38:bc:f4:23:aa:07:61:f3:79:03:31:ab:48:35:
25:1f:a6:e5:e4:44:d6:c9:bb:c8:74:c6:51:10:98:
e7:b7:84:03:c7:99:5e:24:a4:38:4e:09:d3:12:22:
b1:24:ab:c5:46:c4:d1:a9:71:47:dd:b4:08:14:7c:
c4:85:33:a4:44:52:5a:ca:ef:8f:bd:e2:08:c1:13:
d3:10:2d:7e:35:8c:20:15:25:e4:da:79:64:bf:e7:
33:46:ad:68:e1:93:27:b5:f5:3d:c3:29:c5:63:bd:
9a:22:fb:1d:2c:8a:7f:20:c2:76:a9:25:a5:25:6d:
df:7e:1b:df:39:43:df:b1:d5:e9:1f:4c:88:e6:96:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:0E:C6:CF:B2:0D:A7:DA:F9:19:8E:1E:B2:50:20:95:F9:0E:F2
X509v3 Authority Key Identifier:
keyid:C2:41:37:DF:EA:D2:5D:1A:3E:E6:9D:F7:72:6E:1B:00:EF:8E:3F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkE33-rSXRo-5p33cm4bAO-OPzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ab:e1:a2:91:a7:e2:98:ef:8c:d2:da:9f:7f:82:b0:39:ce:
ba:6c:b1:ce:3f:e3:5a:d2:84:2b:0d:5d:2d:c6:dd:1d:5a:80:
be:b9:ee:71:10:8f:73:96:92:77:6e:9f:7f:62:06:59:66:5a:
9b:ed:d9:6d:8d:75:87:a9:ff:0b:46:10:09:f1:d9:e9:67:43:
be:d9:3b:10:64:e6:fe:e8:de:0b:f4:d5:f8:85:0e:cf:32:94:
d2:43:48:16:c9:c3:82:9e:9d:c2:22:4f:00:c8:9f:fa:2b:1d:
2d:12:4c:60:ff:fd:45:8b:5e:f9:06:51:d2:73:0f:72:39:17:
ce:9e:79:2c:2e:a8:89:6e:8e:44:cc:cd:07:a7:c0:28:5f:ce:
9c:8c:a9:6a:f3:5b:5e:78:3e:c2:d4:19:2e:1a:f5:d5:9c:04:
c5:23:a3:10:0a:b8:fa:91:ec:23:94:68:93:e0:2d:98:91:34:
a9:7c:ab:3d:8b:bb:88:63:79:e1:a4:75:bf:de:d7:79:39:b8:
9a:92:7f:ef:80:17:44:3b:4a:ee:57:2f:f4:f0:fa:df:c0:7b:
9c:75:19:ed:25:21:30:c7:90:e6:7a:cd:55:0d:fd:24:15:07:
d2:15:dd:c5:7f:b5:31:c7:ed:97:66:9c:e6:69:ec:78:43:64:
90:c6:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:45 2026 by rpki-client