Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: k4LJTGuQDR+b0x+e89EUSAsVRg6U0JdEPYibv1jLur4=
Subject key identifier: 1D:AB:91:DC:65:CC:B5:D1:3F:21:F9:7A:1A:A0:22:0E:A2:32:39:70
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01A0EEF98D3A9DAE5279F55B3D5C55668E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 1689
Signing time: Tue 29 Sep 2026 21:02:06 +0000
Manifest this update: Tue 29 Sep 2026 21:02:06 +0000
Manifest next update: Wed 30 Sep 2026 21:02:06 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: teeXDNEN67N7FXgpYh4C95sg3FL7+HvfvqzTIRzaOAc=)
2: bS3seMeeB2K-eBXB64nERrvFou8.roa (hash: tlycMgGcWtMwnSgJ6avVAXTcfntBwGo5BgMaV3Y8k+k=)
3: rMgSyH6KszMsvazsfn6Q-7bJlH8.roa (hash: nNbAj2fY6nQaw+j9O9S0/OViFKvIiHADgBzP+xHhPwI=)
4: vra2UalB8zKcRswteQwt6syFXsU.roa (hash: Tpc5Qa0k/xE4ohFATArZFnNYinBhp2z+5+MJHN79L9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:8d:3a:9d:ae:52:79:f5:5b:3d:5c:55:66:8e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Sep 29 21:02:06 2026 GMT
Not After : Sep 30 21:02:06 2026 GMT
Subject: CN=1dab91dc65ccb5d13f21f97a1aa0220ea2323970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:43:cf:5d:09:c3:44:45:0e:8c:c2:16:55:
a5:ca:55:16:63:8a:b9:88:d7:1a:3c:eb:d8:c1:82:
16:3b:6a:35:11:ec:9b:60:51:4c:f3:59:d5:69:7d:
4d:6a:27:b2:f4:0c:37:68:f6:66:c6:6e:26:07:f7:
92:6a:37:03:f9:2a:f6:d9:cb:58:d4:a5:20:40:1b:
45:16:3b:2f:8c:ea:2c:98:27:d9:a0:69:5e:1a:0f:
b7:e8:f5:5d:0b:ce:4c:91:9d:10:6e:ec:c2:b4:53:
5c:8d:80:3c:da:a8:b1:d0:ca:0b:e0:9c:d5:b0:7a:
4f:42:25:46:93:fa:2c:77:d4:6e:2d:b9:80:7f:1a:
20:62:28:2d:18:2f:ca:d4:56:33:3b:0c:25:47:80:
6f:65:a4:47:59:76:35:3c:a7:f5:43:39:1b:a1:be:
b8:42:42:48:d3:04:4b:6e:e5:0a:e2:59:20:e2:bd:
75:bf:22:6b:f5:92:fb:bb:ed:4e:8d:8f:0f:6e:85:
37:a8:4d:f0:dc:5e:3b:2e:1d:b1:6b:a6:72:95:2c:
b0:12:6b:f0:05:48:09:b7:37:d1:f9:6e:f9:53:05:
77:de:bb:77:00:01:79:da:e1:76:cb:61:c7:4b:1e:
ce:9b:07:a2:a3:2c:8e:f5:23:f9:de:8e:eb:5a:9e:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:91:DC:65:CC:B5:D1:3F:21:F9:7A:1A:A0:22:0E:A2:32:39:70
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:cd:55:f2:88:e9:98:ca:72:0b:46:3d:d9:1c:ff:03:3a:
51:a1:25:30:5d:63:0f:1a:ae:3a:56:87:99:3d:9a:c2:73:05:
af:85:e4:46:05:ac:74:3b:90:20:bf:62:1f:79:55:bb:2e:6a:
b7:55:cf:56:8e:95:e0:f7:61:e1:c4:bf:d5:a1:91:95:ed:19:
bd:b8:0a:1d:5a:3a:fa:b7:69:a0:9b:b9:39:d7:1a:41:96:f4:
6d:3b:38:02:d5:92:13:d1:23:62:c4:53:80:46:9d:5c:6e:b5:
09:fc:85:dd:d6:ac:a5:cc:fe:9e:a2:e9:2f:46:d0:31:c9:67:
74:ef:14:1a:73:a4:56:22:47:4e:96:4b:ba:ab:5e:22:04:87:
ab:bc:fa:24:77:a8:06:d7:3c:07:c9:a5:73:53:aa:85:32:06:
ca:75:93:e9:4f:b1:24:5d:88:ea:19:5c:69:0a:8a:fb:0e:8a:
92:fd:ab:c3:60:9a:fe:8c:47:fb:ec:da:9a:c6:0d:90:a5:97:
70:2f:58:e9:75:5e:cc:c9:3c:d2:21:02:6e:82:ed:4f:04:27:
9e:64:16:9d:0c:94:cb:41:d3:fb:1b:f5:4a:e6:86:8d:c0:82:
ab:96:b3:01:ab:70:99:49:30:7a:e5:a7:b5:8d:e5:16:8c:ee:
7d:3f:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:01:39 2026 by rpki-client