Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: 9Xg2kBdKQz+pF/OPSn/ao7ttm2u7hnshJas3LgR4SEg=
Subject key identifier: A1:54:D1:88:13:14:91:2A:10:5A:51:6D:60:65:4B:C0:9C:CC:B8:4D
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01A0D3EF2DDE950342E6F57BE8DFBACE9DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 14CE
Signing time: Thu 24 Sep 2026 15:01:02 +0000
Manifest this update: Thu 24 Sep 2026 15:01:02 +0000
Manifest next update: Fri 25 Sep 2026 15:01:02 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: lqp2H7hy162TNT41tbj1OpOOjyIymJG2gOao4FS0lGA=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:2d:de:95:03:42:e6:f5:7b:e8:df:ba:ce:9d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Sep 24 15:01:02 2026 GMT
Not After : Sep 25 15:01:02 2026 GMT
Subject: CN=a154d1881314912a105a516d60654bc09cccb84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:48:e6:cd:43:fc:e0:27:72:e8:80:45:23:
bb:86:8f:43:5a:25:e2:90:15:17:0e:72:af:3f:89:
4b:96:92:5e:41:ac:a1:69:08:d0:a6:a3:e1:65:2d:
9b:19:08:2a:83:d7:10:45:8a:3f:94:4f:46:6c:84:
31:a8:0b:1e:bd:3f:ca:02:bd:82:2e:a7:61:f2:a6:
4b:6a:cd:e2:62:84:7d:78:25:39:10:51:18:26:56:
60:ab:64:74:2e:55:c1:dd:02:1c:30:19:22:83:ff:
f6:a0:f8:88:91:f8:9f:f3:ff:a5:1d:8b:22:53:e6:
20:c4:2d:e9:16:9e:eb:f8:7a:16:2c:1e:53:98:d2:
b7:bd:83:7a:70:cd:e2:93:d5:a5:d1:c4:3a:ba:e3:
6c:d3:fc:9f:63:4a:87:32:03:f1:c1:8a:53:93:2b:
4c:fd:bf:a5:2b:42:dd:f5:cb:bc:62:76:01:86:95:
12:a7:16:cd:89:9e:f3:b2:a2:ff:11:9d:13:7c:33:
1c:8d:c7:66:12:d5:02:bb:b4:0e:06:6e:52:37:df:
cd:4d:6d:a6:3c:2b:c2:56:e6:ac:cf:0e:72:ea:ad:
31:53:b1:9b:b2:56:77:62:f9:9c:d5:f6:4c:85:d5:
40:a6:31:24:fc:86:b0:d6:22:43:14:f9:7e:93:89:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:D1:88:13:14:91:2A:10:5A:51:6D:60:65:4B:C0:9C:CC:B8:4D
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:f1:a9:b9:d3:fb:fc:9b:23:88:8d:81:b2:fb:38:40:e6:
79:d4:c9:7a:32:e0:b8:8d:e9:69:e3:82:20:17:6f:e8:33:5d:
ce:d4:88:4f:46:42:b6:af:c0:2f:bd:40:47:52:73:21:5b:42:
4b:5c:13:bb:27:2d:f1:dc:c0:3d:e5:06:45:b5:6a:10:0b:03:
35:66:f7:cb:fa:ad:a5:9b:b8:77:cc:da:58:14:87:16:e1:77:
55:56:e2:7f:44:ed:28:90:68:ab:eb:6b:43:cb:a1:98:6a:8b:
50:53:e8:03:f7:51:8b:eb:60:0b:8a:aa:e5:73:10:10:38:cf:
01:f3:22:b9:c4:d4:2c:c2:70:74:18:3c:a4:e8:b2:6d:eb:2c:
58:cc:41:c3:3f:59:8e:0b:34:29:42:6f:e0:23:e8:02:2a:e0:
2c:e8:22:39:f8:0f:19:5a:98:ea:c0:2a:b9:e2:22:97:68:f7:
d8:59:21:43:3b:c8:73:be:49:b6:2b:3b:0b:f9:f2:10:f4:0c:
01:73:73:db:ff:57:d3:48:4e:be:90:97:91:68:22:12:d1:81:
4e:80:fd:d0:db:d7:c4:30:a1:04:af:5b:af:0b:c8:60:14:31:
d3:96:d3:3c:5f:eb:25:c1:7d:8a:ac:4b:82:a9:7f:ba:14:82:
7a:4a:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:31:13 2026 by rpki-client