Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: r533CBCQ5saF7N18gsHlcR6qFkEXXB/NbrOW30bzcEQ=
Subject key identifier: AC:A4:CA:A4:87:58:AA:A1:40:40:52:EC:2C:0F:43:70:47:4A:81:50
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 01A0E106FE2C02A3CFA84F702C95ACE82500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 1294
Signing time: Sun 27 Sep 2026 04:02:06 +0000
Manifest this update: Sun 27 Sep 2026 04:02:06 +0000
Manifest next update: Mon 28 Sep 2026 04:02:06 +0000
Files and hashes: 1: Ka7alFqI87s4EdJtZyqE-NGPHhs.roa (hash: 3RMOWVJO1ZQcH4d2j0ueEWLJLM5MekEDToq5QKnUUrM=)
2: VQIQLar7HwcjhVGKE5MtajsCN6g.roa (hash: SY7ZBqxQfy17eB+jMKdcaxNzW/pWzNXUCVDqxS62ZG4=)
3: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: IM8bU1tu4/BAstq0jd7xiaFE3icbq3ofPp0lqXiD93Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:fe:2c:02:a3:cf:a8:4f:70:2c:95:ac:e8:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Sep 27 04:02:06 2026 GMT
Not After : Sep 28 04:02:06 2026 GMT
Subject: CN=aca4caa48758aaa1404052ec2c0f4370474a8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:f7:a4:2f:b4:b9:24:11:5a:68:47:a5:c3:
df:65:e9:52:05:11:f6:23:82:c4:f8:91:29:40:13:
ac:db:1f:ca:2b:73:0c:cb:49:ad:d2:44:57:50:67:
5a:42:08:e2:ce:29:f1:aa:0f:f1:c9:4c:49:7d:59:
e2:c5:a8:aa:b1:3a:28:d9:b0:53:df:f7:e5:d7:2c:
f0:8f:ec:20:84:12:ad:2a:ca:93:a5:ac:d8:d7:20:
88:5d:e3:69:25:a5:c4:7b:89:dd:e7:4b:aa:0d:bf:
99:38:30:e1:e8:d9:4c:b4:77:e0:66:23:54:9f:12:
71:13:bf:2a:77:47:d2:88:ea:eb:e3:4c:e8:13:fe:
e2:30:7a:07:1b:6d:95:0b:5e:ab:e0:99:f9:a4:7a:
4c:c0:21:27:1f:60:c6:9b:44:5a:fd:42:72:4b:28:
c1:6f:73:88:75:86:fa:c6:ae:38:69:5c:ba:a4:14:
c9:fb:d6:ba:4b:a2:7b:e8:d8:c8:fe:9f:b2:f0:75:
3f:98:bb:64:4d:0b:ce:b5:bd:7f:fe:72:b5:a9:e7:
a3:87:45:bc:14:d9:05:01:b4:a4:32:49:59:d0:fc:
c8:99:ab:49:82:04:78:4b:d0:1e:56:0d:95:3c:81:
f0:c4:64:95:7a:7c:07:31:61:ac:c5:4e:68:2b:26:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:CA:A4:87:58:AA:A1:40:40:52:EC:2C:0F:43:70:47:4A:81:50
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:69:db:76:05:e3:01:b8:7f:df:f2:76:ea:77:43:38:8e:4c:
75:7b:77:f4:cd:cf:aa:b1:df:5f:e3:1d:97:83:b8:02:c5:f6:
6a:95:eb:9d:54:a9:8a:6a:6f:e9:57:dc:11:be:8a:c9:c9:be:
02:3c:43:c2:b9:83:54:21:a1:c9:d2:3a:c8:25:f6:cc:85:4a:
a9:19:04:a6:43:41:1c:7e:79:d7:ae:aa:32:37:ed:fe:24:6e:
9c:ab:6a:91:0c:8c:44:b7:71:db:18:d5:66:f3:5e:61:d3:8d:
c5:9b:3e:8e:10:88:fb:43:f1:b3:3a:c2:90:eb:fa:08:eb:63:
1f:70:20:6c:b2:fd:6b:d6:95:4d:24:66:7b:56:1a:24:a3:fa:
f6:6f:da:c7:1d:56:7f:b1:53:22:66:20:44:04:04:42:ae:e4:
b5:ba:27:c3:72:13:34:2b:9c:aa:4b:ea:c9:11:b7:ef:0b:c1:
fb:51:26:93:81:38:8b:be:8c:04:2d:7f:b4:b6:06:5f:f1:68:
ed:2f:a4:19:f5:f0:ec:c7:57:16:59:c5:ea:16:1b:d1:9c:a7:
b4:4f:55:78:8b:c6:4c:fe:38:cc:62:fd:6e:18:3b:26:6d:bd:
d9:a6:16:e6:e4:d8:f4:7e:69:eb:c8:87:f7:a1:19:c8:0b:23:
e4:79:f7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:56:19 2026 by rpki-client