Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier: y2B8Zt1zV9sOVZdncohT/2iTPH6242XPfVuWtl+C+4c=
Subject key identifier: 9A:38:60:38:1F:24:6E:EF:CB:6A:F4:25:3E:97:65:75:64:D4:A7:F8
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 01A102114ED304E0C9B660B55F528CE48F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 14:00:51 +0000
Manifest this update: Sat 03 Oct 2026 14:00:51 +0000
Manifest next update: Sun 04 Oct 2026 14:00:51 +0000
Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: Epq2i6bvjLjth6FtSiYZ7sTWzUuNCniRo4b7Z5z/W0M=)
2: r9Mcr5UDzWdIgeL8kqJ0bGMMVmw.roa (hash: 6WGd0CgD9hacqiqe9ZbfPd53REDLfBpVe+xRlENuS3E=)
3: wye8DmlYkdaQC1jq2FD5iM2DhEY.roa (hash: mjAPnFxN50juugPjJtBivCThtWn3b1yEogIYi0ZrGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:4e:d3:04:e0:c9:b6:60:b5:5f:52:8c:e4:8f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Oct 3 14:00:51 2026 GMT
Not After : Oct 4 14:00:51 2026 GMT
Subject: CN=9a3860381f246eefcb6af4253e97657564d4a7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:43:a1:8e:27:93:b5:61:b5:68:94:3d:a6:
2b:aa:b1:9d:66:df:ef:41:8f:40:c9:e3:89:e7:83:
89:c5:50:54:ad:a8:ea:15:85:4d:2f:d3:80:5d:72:
e7:a9:8a:11:70:28:8e:c7:c3:1e:ea:c1:4a:b3:18:
9c:18:3f:06:1f:71:18:7e:4e:24:0e:b8:35:4f:05:
81:bb:29:cd:14:df:51:ac:38:45:de:6e:2c:a6:c4:
26:d2:77:ed:65:73:09:06:aa:8b:a0:4f:02:0d:bd:
e4:14:7c:a0:f8:12:ad:9a:08:eb:1d:47:25:ab:e8:
ab:74:40:b7:e8:a0:c0:82:4d:e5:e3:d2:a3:ef:99:
db:84:ac:ff:89:3c:62:16:7b:c0:cb:eb:7f:9c:84:
da:92:f7:73:28:0a:74:5e:fe:48:2a:19:90:4d:81:
d7:63:65:c1:24:f3:e2:eb:28:93:bf:a6:91:57:a5:
4d:24:4e:ea:f4:51:d4:e9:7a:d1:6c:2a:5a:c2:3b:
98:3a:84:58:18:c1:ae:22:3e:cd:a2:44:39:dd:52:
9e:44:1e:0a:63:28:93:33:05:e1:11:02:47:2a:0a:
53:d7:bc:b7:83:9c:75:c2:c3:38:39:5a:41:17:17:
59:94:43:9a:8a:a3:c1:13:ed:f4:1d:41:7f:cf:c3:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:60:38:1F:24:6E:EF:CB:6A:F4:25:3E:97:65:75:64:D4:A7:F8
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:10:6e:e0:e8:4c:dc:e3:da:ab:64:fc:80:c3:1b:39:c5:31:
b2:c1:4b:e3:10:d3:c8:4f:e2:97:77:a9:b3:6d:83:b8:e7:3e:
bf:5d:3e:bf:6e:b9:88:38:c0:a9:9b:50:e0:9e:69:e5:dc:f3:
7f:bb:9c:f2:0b:49:b3:b4:71:69:0d:bd:2c:cb:1f:90:fd:fc:
9d:7e:96:1e:a8:71:50:f3:0e:64:fd:3b:0f:57:f4:6d:f5:c0:
aa:21:c5:90:41:05:da:e1:73:e1:a1:bf:ff:19:2b:f3:d7:b2:
c4:a0:37:ac:df:1e:71:e1:c7:3b:42:bd:7b:91:06:a6:8f:0f:
83:76:e7:91:7d:c1:a5:34:17:4c:d6:c4:5f:9d:36:a2:25:18:
30:fe:bc:26:08:57:a1:bb:f3:b3:af:50:b4:42:a0:88:1d:5e:
67:cb:97:aa:cf:f6:10:52:24:55:38:7e:65:80:1d:27:f2:f3:
1f:17:87:e3:49:cd:81:9a:61:b4:c3:02:1a:ac:5e:d6:62:cb:
10:91:21:1e:d1:d4:59:d1:d7:ba:19:94:58:a9:f0:60:40:7c:
f6:c0:2c:42:08:aa:7f:28:78:55:c4:3f:55:d8:c9:b2:f6:ab:
67:24:fb:c3:38:80:5f:df:61:f3:ea:d0:29:09:fc:39:65:fd:
d1:0f:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:11:02 2026 by rpki-client