Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File: wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier: pviwTbEwZyjgAvYF8De6H4C/FKyep7J1yPbUTjX1MX0=
Subject key identifier: B5:71:F6:5F:1C:88:B2:50:A5:7D:B2:81:D0:E1:65:F0:69:67:3C:17
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 01A0EC657A026676337E4C24606250165933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 09:01:08 +0000
Manifest this update: Tue 29 Sep 2026 09:01:08 +0000
Manifest next update: Wed 30 Sep 2026 09:01:08 +0000
Files and hashes: 1: k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa (hash: G3OJEnXc7wLE0YQ5zBZyEB+XHB1m/x2BVeVnHOMikX8=)
2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: EJ8MAU+89hNGbyB8YGu8IMJO23YiARM1sxW1MLJqI8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:7a:02:66:76:33:7e:4c:24:60:62:50:16:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Sep 29 09:01:08 2026 GMT
Not After : Sep 30 09:01:08 2026 GMT
Subject: CN=b571f65f1c88b250a57db281d0e165f069673c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:94:94:17:2a:43:26:78:3b:ac:02:02:bd:
65:61:78:cf:fa:24:aa:e8:ae:01:04:ba:32:ff:bc:
71:d3:6f:2d:5d:b8:67:6e:f3:03:1c:18:8f:94:51:
07:5e:89:c9:05:3a:8d:9d:0b:6b:84:97:77:16:2a:
db:ff:5c:80:0b:de:a9:af:c5:41:e8:63:aa:ea:60:
c4:07:54:43:40:ab:12:12:a8:aa:66:10:d0:57:d9:
5b:1a:1b:73:b5:f7:c8:e5:a9:6e:d7:8d:d2:83:e1:
29:0f:72:1a:03:21:68:98:7c:9f:bd:e5:ca:25:9e:
d2:f4:07:1d:cc:33:38:0a:22:d5:84:df:20:2d:62:
e6:da:b7:7b:af:31:90:c3:62:a0:8f:d3:af:aa:cf:
59:69:4b:d8:3d:8e:c0:6c:8c:33:1b:fd:3d:15:e7:
fb:9a:ac:b1:6b:d4:93:ae:99:b9:ee:bf:bb:09:36:
cc:60:5a:50:70:07:ea:ac:8b:3a:f2:92:2f:cb:05:
e8:31:a7:9c:1a:51:05:f8:21:7c:f1:84:9b:84:27:
ab:e8:a9:f8:06:01:1e:b4:9c:5c:b3:11:3f:37:05:
2d:db:1e:70:b3:68:ca:8c:56:5d:f1:b7:12:df:b6:
0f:1a:16:45:11:3b:da:53:39:66:e1:03:5c:6c:98:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:F6:5F:1C:88:B2:50:A5:7D:B2:81:D0:E1:65:F0:69:67:3C:17
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:ea:1d:ec:ff:a5:92:51:4a:35:2a:02:8f:da:2b:31:15:
3e:f6:18:6c:7a:7e:45:5b:82:11:a3:c5:e4:28:41:67:56:6b:
6e:c5:b1:af:2b:1c:3f:85:00:1f:9e:f5:b4:94:f9:5e:26:d9:
4b:15:29:77:c4:c7:4d:f2:d8:d1:dc:8a:f7:55:aa:44:0e:ab:
ae:da:83:28:6b:55:5e:8c:d2:d5:c3:bd:c9:48:da:3c:41:03:
88:ea:2b:a3:8c:43:c0:f8:63:75:ea:da:5d:77:9e:20:8d:28:
0c:86:52:0e:91:70:5c:a8:9d:52:37:c7:5e:d2:21:61:22:fd:
47:ef:73:d7:38:ea:3c:1b:d6:c7:a5:48:3e:12:4e:89:6e:f1:
a3:e9:71:0f:10:e3:2d:a2:2d:dd:dd:9a:37:b1:86:c9:42:e6:
a3:d7:eb:34:c6:e7:56:e8:03:cf:08:ee:ff:7a:77:fe:52:db:
b2:cc:7d:ca:1b:b9:18:e5:2c:a5:10:5a:2e:32:a7:e2:b7:34:
1c:59:d7:1b:79:b3:d1:fc:e6:54:70:03:b4:c4:34:e7:30:96:
8c:13:6a:ca:70:ec:16:df:c0:5d:03:96:a7:77:75:d1:cb:1e:
82:2e:cc:e2:28:c1:5b:e5:73:98:ce:88:f2:dc:d1:6d:14:7c:
96:45:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:15:28 2026 by rpki-client