Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: cbFACczTcCxveTeKz+ovw4FQCP1pGfTagwq9SUG7eRs=
Subject key identifier: 9E:85:AD:9F:91:4C:B5:19:B5:20:A4:9F:72:4F:03:5D:C5:BB:7A:26
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 01A0D79635D1A6EF7D30A95C22DA68E9286E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0982
Signing time: Fri 25 Sep 2026 08:02:20 +0000
Manifest this update: Fri 25 Sep 2026 08:02:20 +0000
Manifest next update: Sat 26 Sep 2026 08:02:20 +0000
Files and hashes: 1: J1GYT5rRj5L_N6tZy2ntpItqAlo.roa (hash: LsALbZjhGHRQ6Sb9UqH1fb/SrgtXCL5+zJg+18cqSLM=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: fVw74kysbzAmVsDiR3lpBRwY+ZzFRpD39jz8BGBWSRQ=)
3: _My6XhMU3zxgGRKHGXcd-n4cvSk.roa (hash: ocTV8bc0q/eClf0jIXDUKVxA8j0B5XwR5lvU8ldB0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:35:d1:a6:ef:7d:30:a9:5c:22:da:68:e9:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Sep 25 08:02:20 2026 GMT
Not After : Sep 26 08:02:20 2026 GMT
Subject: CN=9e85ad9f914cb519b520a49f724f035dc5bb7a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:94:b1:5b:5b:cd:d4:bd:47:70:33:d0:dd:
60:e9:a2:2a:1c:00:f8:d4:81:fa:a5:ae:87:98:12:
57:0d:fa:d7:cb:7a:8b:81:c3:e3:9a:b9:1b:59:63:
42:41:65:d3:96:50:89:88:65:bf:20:5d:b4:d5:da:
b5:ca:9d:cb:26:d8:be:78:a5:5d:cd:75:7f:f7:86:
1d:86:0b:30:d4:4c:07:79:ab:74:87:c1:24:b5:07:
64:fd:58:48:e1:16:d8:7b:ff:a2:96:45:08:7d:b1:
0f:49:9a:d4:e6:47:62:6f:53:92:3c:e0:ad:5a:eb:
bb:30:35:3f:78:a3:bf:63:d6:83:0a:79:b6:f8:f1:
17:07:6d:02:16:08:dd:33:51:c5:47:e9:3e:ad:db:
5d:a0:43:a9:b6:b2:7e:c5:d5:29:83:8e:1a:54:e4:
02:37:1e:a7:d5:e1:5e:54:45:79:d8:b7:9b:4b:ed:
9d:6c:d6:49:60:26:a1:87:3c:0c:11:ab:d1:18:66:
c6:b3:b7:02:02:ec:fa:c0:14:24:46:58:49:d5:b1:
30:91:73:08:3b:2f:b3:1b:bc:08:5d:52:3f:b9:c4:
37:e7:6b:a5:14:0d:0a:de:75:6f:93:8b:6f:45:d9:
aa:7d:cf:94:82:7d:49:42:c8:a3:05:25:e3:ba:97:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:AD:9F:91:4C:B5:19:B5:20:A4:9F:72:4F:03:5D:C5:BB:7A:26
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:88:8a:22:a3:0e:d0:40:22:1e:25:de:79:0c:19:7f:62:62:
bd:3e:29:5d:35:82:19:6e:bb:07:b0:3b:c2:a8:8d:ef:44:89:
c9:7d:c2:3a:97:73:5f:79:bc:fc:d8:40:40:24:fd:7f:6c:1c:
87:05:4e:5d:3d:9d:cd:84:20:c3:c2:5b:7c:b4:76:da:4f:ab:
9e:ae:1c:ad:ef:9f:30:eb:0b:49:a7:02:74:1d:90:41:18:04:
6c:5c:00:0b:5a:2f:30:21:22:43:c4:8b:0e:ba:25:b9:11:bc:
2c:8d:1f:d7:9c:d5:c8:23:82:36:21:b5:e5:c2:c7:a6:66:8a:
c6:c8:7f:6f:72:75:c1:16:7b:69:28:a4:0b:cb:06:c2:b5:c6:
25:79:91:e8:60:f9:18:7c:a1:c2:36:cf:13:df:ba:04:1a:36:
86:6f:54:ab:02:e7:6f:d6:07:5e:c7:7e:f1:33:84:3f:73:fc:
d9:a3:61:7b:12:6e:c1:af:39:b8:ba:e8:60:27:18:36:2b:a8:
f0:a3:5e:4c:7a:ba:bc:35:1a:90:42:89:6f:6d:08:f0:db:a4:
59:86:0f:5f:4d:cb:ce:69:4a:9e:b5:c8:11:13:66:a6:13:12:
1f:14:e5:c1:9f:2d:f7:ce:b7:53:ac:bc:92:60:a4:c9:37:71:
fa:ba:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:04 2026 by rpki-client