Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: xONybgeN19gjDzwYUzheIT5/foCfiyuTA0itBJtGXh8=
Subject key identifier: 21:C9:43:75:4C:06:5C:3C:8D:13:7A:A0:41:65:EA:25:EF:59:0A:92
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 01A0E0CF966DBF1FD2A93C452A68486CF030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 07DD
Signing time: Sun 27 Sep 2026 03:01:35 +0000
Manifest this update: Sun 27 Sep 2026 03:01:35 +0000
Manifest next update: Mon 28 Sep 2026 03:01:35 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: e7g8RXyk7Eu7RH1HRh92QJ9xjD6zrMt9q4vWXwt/Wn8=)
2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:96:6d:bf:1f:d2:a9:3c:45:2a:68:48:6c:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Sep 27 03:01:35 2026 GMT
Not After : Sep 28 03:01:35 2026 GMT
Subject: CN=21c943754c065c3c8d137aa04165ea25ef590a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:78:7a:b3:01:3e:28:8a:ec:5b:e5:8f:43:
7d:72:a9:86:56:78:72:3b:e2:b0:a8:30:2d:3f:22:
93:68:12:fc:8a:40:48:8c:bc:0c:fb:2c:9f:8e:f4:
10:d6:04:08:65:23:92:24:73:60:1e:4f:99:3c:47:
69:1e:29:f5:5e:eb:0f:6f:2e:25:9e:43:a8:eb:13:
29:13:35:9a:13:5f:19:6c:b3:0f:54:87:74:68:66:
7f:ed:31:08:68:bf:21:74:b0:39:7a:99:c8:52:4a:
43:c1:59:87:ec:1d:f6:61:6a:27:c7:3d:6a:81:3c:
d2:21:d0:af:ad:ff:05:b8:96:ec:03:e7:9c:c6:68:
ce:f4:d6:6a:11:26:54:60:92:9a:15:76:97:27:02:
10:35:f7:4e:df:31:3d:39:e4:dd:7b:21:69:f3:ea:
2f:0c:f0:bb:a0:46:3b:59:4f:86:1f:fb:7b:fa:bf:
29:a6:d6:c8:6b:19:76:de:f9:4c:4d:b4:e3:35:b0:
68:d1:d4:00:9d:f1:45:9c:e2:84:87:5b:48:92:62:
74:4c:76:8a:7c:85:47:b7:eb:62:38:19:07:11:d5:
8a:b3:a9:3b:ae:02:7e:2a:96:16:51:e7:e0:28:26:
aa:90:e7:65:17:1e:1e:c8:9f:a0:07:85:2c:2b:6d:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:43:75:4C:06:5C:3C:8D:13:7A:A0:41:65:EA:25:EF:59:0A:92
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0f:0f:eb:a0:c7:12:a5:0d:c8:e1:46:21:ee:4a:ee:f0:83:
f1:d8:0b:fe:dd:39:74:c1:0b:0f:56:fe:66:72:bd:01:a2:ff:
ab:36:85:55:17:a4:95:22:27:f7:d4:f9:70:ad:6f:90:df:f8:
78:56:8e:8d:7b:04:05:95:8d:19:08:7c:75:25:9b:a1:2c:54:
02:c4:66:74:4f:52:ef:75:69:4a:27:9f:42:fc:f7:d4:09:17:
5b:33:30:5e:c7:b6:67:38:6a:d2:93:a2:00:eb:6c:ec:83:b8:
53:f7:91:c8:61:7e:78:87:a8:a5:b7:26:c7:78:b4:0d:4d:e1:
74:7d:9e:15:82:f3:43:fb:3e:d7:d3:41:1a:2b:cb:b0:33:09:
58:ae:f2:89:fb:d0:04:3e:b7:d7:e4:73:7a:6c:8f:16:86:2d:
e5:4e:66:9d:3a:97:0d:ec:61:de:d9:2f:5d:20:25:d2:a5:4a:
bf:60:e5:d3:9f:96:ac:d9:85:94:c5:58:32:cd:2f:46:10:07:
78:f7:a6:15:2e:d2:6b:16:ce:27:59:a2:b4:d2:22:2a:da:c9:
56:99:05:90:26:85:e8:11:c0:68:c9:9a:52:29:5f:f2:83:95:
7e:3f:10:10:1a:70:8c:1e:04:dc:b1:70:ad:5c:81:10:33:a9:
5e:5c:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:29 2026 by rpki-client