Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: A7vKegNyvWkM2QFmKTScLVFga0idbIQXIwtz0uiNYmc=
Subject key identifier: 98:BD:D7:59:48:B6:60:63:6A:D8:24:DD:FF:1A:A3:1F:CC:22:C0:2E
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 01A0D048B38CF7953B41F70400AB2842472C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1A7B
Signing time: Wed 23 Sep 2026 22:00:20 +0000
Manifest this update: Wed 23 Sep 2026 22:00:20 +0000
Manifest next update: Thu 24 Sep 2026 22:00:20 +0000
Files and hashes: 1: VIJwQfnhHs3GHlmC403kclYI19k.roa (hash: pBGpIGY8oZecekT32agQOuUVvcZzYj8n135ZMBKxfjM=)
2: v0t-x1ezAOQzRGxbJKUbHeC0HN4.roa (hash: NklbdNXJrdH3kXOcwc9Kb/YETkdY+vXKTqyupumOkFo=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: Y2ifxoBmCTuNrI3qkaqSZb6Hv2fDT0wmXd/xoMPA6MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:b3:8c:f7:95:3b:41:f7:04:00:ab:28:42:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Sep 23 22:00:20 2026 GMT
Not After : Sep 24 22:00:20 2026 GMT
Subject: CN=98bdd75948b660636ad824ddff1aa31fcc22c02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:72:b9:28:d7:ac:6e:45:a4:49:9e:de:8b:
f0:4a:38:91:9a:0b:04:3d:5d:d7:8d:19:6f:36:b5:
b1:5e:70:c1:ad:21:65:14:d4:2c:f0:16:18:8d:93:
c9:20:6d:78:a8:34:74:5c:4b:e7:1b:51:e9:93:b7:
92:5b:6f:5e:f3:91:a9:ca:6a:87:8c:64:90:56:3b:
43:c7:a3:18:63:2c:f2:38:ef:86:cf:f0:7a:44:ec:
45:d3:0f:6a:67:ab:f2:32:c3:af:c3:91:04:14:2b:
35:97:33:86:78:53:b7:99:4e:99:0d:9b:c3:18:c3:
79:39:67:2a:05:f9:eb:35:62:5e:79:83:53:dc:c8:
59:c2:fd:d6:74:65:a5:89:ce:51:66:9b:5a:54:df:
96:67:43:b4:4f:ad:49:43:7e:8d:2c:80:f5:2c:be:
ed:a2:ed:73:0f:2a:98:4d:f6:27:34:5b:93:9c:55:
da:a4:86:99:71:5b:03:23:53:0a:64:05:fe:f3:d3:
48:9f:fd:da:dc:d8:eb:84:ef:92:bb:09:1e:90:a9:
12:20:03:b9:a9:e3:4a:7a:eb:80:89:86:f6:10:a4:
39:3b:ea:70:da:25:c3:d7:a4:01:68:f9:c4:93:e8:
60:de:c1:61:2b:68:2c:fc:6a:26:48:be:8a:a3:13:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:D7:59:48:B6:60:63:6A:D8:24:DD:FF:1A:A3:1F:CC:22:C0:2E
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:79:9f:c9:b3:6a:f9:fa:97:17:6f:72:c6:05:5b:67:21:fa:
07:a9:64:8e:de:c6:12:98:d2:14:66:b4:64:31:1d:f0:1c:86:
39:59:92:b1:23:a7:f0:5a:17:90:df:0a:a9:f4:5a:df:0d:4d:
47:c5:2d:a6:28:4d:3b:fc:8c:f5:40:1c:f6:ea:0b:db:af:c8:
fc:68:5a:4d:90:87:18:22:41:69:4d:56:d0:25:f4:3f:5b:1e:
fc:62:0f:a2:39:24:10:59:bf:79:7e:1c:15:28:d6:05:aa:c2:
10:e9:d7:3a:6e:b3:1c:b1:ea:0b:74:72:dd:ef:d1:d8:cf:89:
18:f1:33:4e:f6:be:05:17:c7:5a:1d:09:1d:41:9a:13:9d:48:
27:b5:ac:e3:d6:49:f7:be:de:7b:6a:1c:0f:75:6b:95:90:56:
ff:89:42:e3:37:c2:a2:58:47:f6:1d:63:32:4e:82:81:91:73:
be:cc:fe:9a:e5:d0:a9:7f:2f:47:3e:c5:38:68:dd:e1:8e:50:
09:8b:9c:4b:d4:55:7e:d3:14:3a:e7:e1:93:b8:9c:b6:6a:87:
35:b7:ba:7b:57:8d:22:d2:7b:28:11:e0:42:79:7b:19:7b:82:
9c:3e:3c:2e:72:01:95:a3:24:5c:33:3a:a9:32:45:eb:16:4e:
68:f8:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:46 2026 by rpki-client