
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: bEJfWTS0F926IXvpleIO9Ik7jt20BLo3Hk7LLoWX8/8=
Subject key identifier: 03:C7:B1:9B:7D:29:3F:B8:68:99:EF:73:D3:4B:60:AD:4B:CA:C5:4B
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 01A0FC7D23C19DBED017211EB0AE6D1EF63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 18B4
Signing time: Fri 02 Oct 2026 12:00:54 +0000
Manifest this update: Fri 02 Oct 2026 12:00:54 +0000
Manifest next update: Sat 03 Oct 2026 12:00:54 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: ATQityw4kxZ8sC2tOWn0rxzRBm4hhasRcywdKDfXEww=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:23:c1:9d:be:d0:17:21:1e:b0:ae:6d:1e:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Oct 2 12:00:54 2026 GMT
Not After : Oct 3 12:00:54 2026 GMT
Subject: CN=03c7b19b7d293fb86899ef73d34b60ad4bcac54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:b6:68:79:3c:7f:51:9c:79:a1:dc:fd:41:
50:40:f7:02:7c:8d:1e:e8:0b:b7:5c:81:ac:50:2f:
f6:f2:91:66:4b:b9:e5:77:0e:41:f2:c1:4c:98:90:
95:c9:74:bf:d8:5b:8b:20:1f:47:97:bd:b5:50:44:
02:a8:d4:ea:81:80:45:29:c9:54:ba:41:3c:4d:81:
99:ad:27:6c:dd:08:6f:0b:3d:55:12:ff:f4:ac:cf:
0e:f5:bf:23:c8:d5:72:64:47:e2:0b:16:9f:60:1a:
fc:16:7f:be:dc:de:48:1c:7b:db:34:2a:e0:00:6d:
49:72:41:92:dc:c5:29:ba:67:7a:51:84:c5:ab:05:
2e:89:9c:26:1e:88:ce:87:51:18:43:6e:91:e7:ce:
c2:25:c5:70:7e:6a:63:0c:9d:78:8b:f6:8b:e8:79:
81:79:a3:45:3c:cb:7e:4f:6b:9f:02:cd:47:c4:53:
ed:27:d9:ca:c2:3d:43:ee:d2:06:ca:16:cd:c5:5e:
0f:bf:04:e1:af:37:ed:28:8c:31:66:4a:ce:40:53:
a3:d4:60:93:96:3c:af:a3:86:fb:3d:9e:ef:3e:7d:
5d:8b:03:c7:25:07:85:a1:fe:f8:72:da:0d:fc:6c:
f8:35:89:d7:c3:3a:fb:b9:8b:8f:79:e8:e9:05:f8:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:B1:9B:7D:29:3F:B8:68:99:EF:73:D3:4B:60:AD:4B:CA:C5:4B
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b1:c3:05:c2:a2:7a:ae:c1:76:53:ce:a4:9f:4b:e0:44:de:
00:ed:9f:a6:2e:a1:10:a9:af:17:b8:df:06:03:02:70:c6:50:
36:d8:8e:37:9f:c9:6c:62:ff:ae:17:c6:65:04:f0:ff:9e:6e:
e2:e9:71:6d:cf:a0:86:0a:d9:d0:2b:a9:14:2f:e4:ab:9a:0d:
e8:b3:43:3a:55:de:8b:fd:60:1b:ca:4c:5b:bd:d6:99:d0:bf:
7d:77:b2:89:4e:f0:8d:46:2a:ac:01:5a:84:b3:6c:1d:38:85:
d3:b2:8d:f4:42:e3:1e:03:bc:cf:20:28:f6:3d:a5:46:aa:40:
15:78:be:8e:35:bd:67:3f:ff:b3:d8:84:ef:1f:cd:73:fa:81:
d9:4d:17:44:af:b5:0e:a2:e7:a7:ac:5b:a6:78:e4:0a:bb:50:
8f:04:fd:11:6f:39:59:eb:27:ee:6f:eb:3d:61:3e:2c:bd:3e:
cd:b9:f6:e9:4f:df:04:9c:f4:36:30:f2:b5:ae:66:96:91:50:
b6:db:63:db:fc:df:f1:ec:f0:98:35:f3:48:fd:8c:cd:43:3a:
6e:97:d4:dd:6c:41:a9:12:b5:db:d7:0a:9a:9a:d4:d0:48:44:
7d:19:ab:bb:3e:aa:31:12:bf:a0:86:58:83:3d:7d:c7:75:f3:
d4:6d:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:18:26 2026 by rpki-client