Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: ihIgVRusazl7r1Ydqkg8fXAjO99Uw9GL8Si6imq1lqo=
Subject key identifier: C1:AB:BA:63:3E:5C:B2:BD:58:BD:6B:EB:2E:8D:64:18:AA:19:F5:50
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 01A0E2BDD000122B8698FA393507D2F0D605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0E67
Signing time: Sun 27 Sep 2026 12:01:25 +0000
Manifest this update: Sun 27 Sep 2026 12:01:25 +0000
Manifest next update: Mon 28 Sep 2026 12:01:25 +0000
Files and hashes: 1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: D76SYRj/tKK+4CUS9RLxM4OFfkJgmT11C++5AQJjNhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:d0:00:12:2b:86:98:fa:39:35:07:d2:f0:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Sep 27 12:01:25 2026 GMT
Not After : Sep 28 12:01:25 2026 GMT
Subject: CN=c1abba633e5cb2bd58bd6beb2e8d6418aa19f550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:5e:53:da:bd:96:27:68:fe:3c:42:dc:82:
7b:0f:80:9e:ce:ae:55:cb:e8:be:70:4a:f4:df:82:
53:47:c7:bd:3d:1d:cb:30:42:93:82:a3:a5:f4:49:
e5:c5:4d:97:90:22:01:aa:78:20:33:0d:5d:1e:8a:
7a:2e:65:b2:1e:ee:f2:82:59:0b:3b:89:9e:22:9d:
a1:70:18:78:54:40:e3:0a:83:a4:45:73:f3:f6:8d:
e6:68:48:ee:20:b9:34:32:a9:63:93:a3:c3:d9:36:
2d:2a:b4:b2:14:8d:6d:e4:d2:4f:e4:40:46:f6:b8:
cc:cc:bd:38:d5:19:68:a2:38:37:61:dc:07:b7:28:
77:03:dc:e7:9f:aa:8c:a1:25:16:09:aa:89:79:41:
05:d8:da:07:cb:39:b8:62:6d:f6:4a:ae:9a:3e:49:
5c:00:f5:7d:46:13:e3:83:2f:1d:6a:82:fb:5c:04:
ea:8c:de:3c:4e:87:b0:71:2b:08:47:04:04:c1:94:
98:cb:04:df:a1:1a:2a:8e:ca:98:df:ae:0a:3e:f0:
97:3a:e2:34:e0:1d:01:65:75:7c:fb:1e:a3:59:35:
3a:2d:36:da:38:95:5e:d6:c5:17:cd:49:f7:fa:b7:
9d:39:4d:df:bd:1d:14:5d:f2:76:58:c1:ac:00:40:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AB:BA:63:3E:5C:B2:BD:58:BD:6B:EB:2E:8D:64:18:AA:19:F5:50
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c0:52:b1:11:73:d7:6d:26:8b:0d:f9:16:eb:e6:99:50:b4:
82:d6:01:fc:a6:c0:ea:35:e1:b9:4d:21:e3:ad:4b:b7:04:d7:
4e:35:8b:a2:6f:e9:63:65:fd:14:bb:9c:bc:c2:e1:68:dd:84:
29:3c:8b:3c:13:f8:5e:59:8e:73:4a:e8:bb:35:4f:18:0c:4e:
5d:d2:a1:84:b6:d2:8d:a3:79:73:a2:51:ef:2c:07:2f:6c:ce:
95:50:d8:de:b5:c0:82:e9:da:8d:ab:99:82:7d:dc:a4:7f:9f:
b4:3b:94:be:73:56:a7:80:a5:4e:83:c8:8a:bf:08:3f:53:e8:
a1:98:89:ba:b5:4d:15:2f:68:8e:c6:09:a5:67:8e:66:2a:cb:
94:3b:a8:c6:c1:dc:72:af:47:0e:b0:5a:2c:05:cf:3e:1a:cb:
fe:af:5b:9e:d1:64:5f:f2:36:3a:60:1b:dc:c0:08:ce:f8:37:
19:1d:69:cf:4f:bd:66:c4:c5:3e:aa:93:43:f4:01:c0:8b:53:
24:4c:28:d1:ac:ee:4f:dc:db:d9:0f:9c:ba:7f:96:16:a1:7a:
b8:cb:79:ef:b5:3a:a6:0e:0f:88:8e:8c:12:fd:b0:85:f8:bd:
07:bc:fb:66:7f:08:98:d9:1e:cf:bf:a4:2e:47:4d:9c:bb:7d:
e9:4a:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:36:28 2026 by rpki-client