Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier: oJb05WR4tBTxlISA08rYoZNUBrAIR5N/jzxx89eQsZo=
Subject key identifier: 66:CE:FB:9B:68:43:52:50:0A:BB:F1:FE:E1:65:FA:55:D7:42:A8:0B
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 01A1DD5E789BBFD4D7FC2389A35A5EB2210A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number: 11CE
Signing time: Sun 15 Nov 2026 04:01:58 +0000
Manifest this update: Sun 15 Nov 2026 04:01:58 +0000
Manifest next update: Mon 16 Nov 2026 04:01:58 +0000
Files and hashes: 1: 2WG9_auLWLnABS1HW4iOt2pWC_o.roa (hash: 7Sy76mTSIMhku20UWsQfLStgGuU+xLVJeVa4x3HtASs=)
2: _45yXBMLPa0cZDY0d-X3m4x1Jfs.roa (hash: ZWvTH3Xi9Fnbl1xX9A2cm14ISlca+xERk+35mL0vJLY=)
3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: 5J5+nMYfYDbTU7Ufh3+PjZ4RbRnOXP/gJdwUBbxedIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:78:9b:bf:d4:d7:fc:23:89:a3:5a:5e:b2:21:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Nov 15 04:01:58 2026 GMT
Not After : Nov 16 04:01:58 2026 GMT
Subject: CN=66cefb9b684352500abbf1fee165fa55d742a80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:1b:ca:71:eb:ca:c1:4a:cf:54:86:99:5e:
14:91:ad:b3:8c:cd:bb:dc:e2:fb:12:38:60:24:42:
d1:3f:0b:63:9d:02:05:43:29:f2:f4:22:a5:44:35:
2c:09:45:7b:9d:2d:b3:71:32:e6:d6:7c:ac:1c:ea:
41:2f:6a:0d:53:cd:b7:25:0e:8d:19:a3:94:6a:16:
6a:18:55:f4:4d:9b:d4:07:39:38:d7:df:d2:cf:db:
bf:1c:dc:db:95:a1:3e:ba:68:e1:d5:c0:e2:e0:11:
38:79:0b:73:a3:9d:4d:8c:12:ac:28:0b:9c:e9:2f:
16:e7:ff:c1:6e:b2:8c:91:9f:34:ae:b8:cc:f3:dd:
80:fc:62:5c:1f:af:c2:fc:20:5c:e5:33:bf:0a:a7:
23:6f:6c:2b:cd:23:5f:9b:9e:76:a1:fd:56:63:0c:
6f:5f:07:d5:3a:24:b9:90:15:07:fa:ee:a7:61:e4:
14:ce:29:ee:9e:77:85:bf:df:73:d1:bb:d9:da:15:
37:dd:91:66:89:74:11:f2:47:63:70:4c:66:ad:88:
4a:3f:37:70:3d:dd:d2:bb:d3:4a:91:a9:f7:2f:35:
23:56:40:95:68:43:03:22:4c:6a:7b:3d:25:b7:85:
b6:66:53:a8:85:06:42:00:b8:17:19:eb:37:ca:e2:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:FB:9B:68:43:52:50:0A:BB:F1:FE:E1:65:FA:55:D7:42:A8:0B
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:5d:4b:c9:b5:f4:06:96:e0:bf:ac:71:48:29:d7:29:12:
06:e2:69:5e:23:65:e3:93:5a:e0:41:e6:47:92:a9:fc:9a:96:
c6:85:e6:dc:28:7a:3c:e7:dd:4d:d6:5c:91:ee:c0:7d:7a:62:
34:06:cf:0e:ee:bd:0a:79:53:a5:c0:6b:04:2a:5e:8a:21:da:
ac:c8:fd:57:e7:f2:42:8f:ad:53:5e:cd:2d:84:80:d3:e4:9a:
e1:52:8c:61:10:3e:9d:28:18:d9:f3:f6:6e:d3:2c:63:0b:cd:
e0:ff:df:12:c4:e8:0f:88:fd:ca:19:66:31:ed:bd:1d:47:9e:
48:93:54:f9:bc:b4:32:c0:2b:3b:9b:af:97:84:05:b8:c2:01:
34:c6:32:3e:2b:fe:90:b2:f1:37:f6:12:51:9e:02:94:fa:c6:
70:a0:20:6f:81:b4:57:88:a1:c4:a3:9c:7e:52:cf:33:21:b3:
dc:20:a0:b9:08:de:5a:94:02:5a:5a:49:f5:93:6f:3f:49:70:
fd:87:5c:be:cd:7e:96:40:fb:20:c7:09:7a:ee:05:76:7b:f1:
9e:0b:a5:da:4e:34:a2:c5:f7:3a:2e:0c:b6:66:28:62:2b:3b:
d9:b1:f4:8d:4c:5e:fe:11:06:14:5f:16:e6:b3:6d:a9:54:c5:
d9:11:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:08:20 2026 by rpki-client