Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: x2VPCYm778yIzALKgNqJIley5zi5jgbLh1qhugi+wVk=
Subject key identifier: FE:11:5A:1B:1A:5D:AA:58:D2:D6:9F:64:A8:EE:48:E7:47:B8:54:C1
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 01A125424C5462E67752290A3009932A7575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 061E
Signing time: Sat 10 Oct 2026 10:01:04 +0000
Manifest this update: Sat 10 Oct 2026 10:01:04 +0000
Manifest next update: Sun 11 Oct 2026 10:01:04 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa (hash: pQwXSl0mgcHIVKIbRMPhoOPInhtMVGSj+x6QMvyXQK0=)
3: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: c5Wrb6zLQi0RlCuQJ9HuGesoxYZvqSW2D7mjChdMu/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:4c:54:62:e6:77:52:29:0a:30:09:93:2a:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Oct 10 10:01:04 2026 GMT
Not After : Oct 11 10:01:04 2026 GMT
Subject: CN=fe115a1b1a5daa58d2d69f64a8ee48e747b854c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:91:2e:32:c3:e2:bd:d2:50:b1:1d:76:ad:
83:d9:b3:c5:c2:0d:a5:fe:ed:fe:ad:f8:91:be:28:
8e:01:9b:0f:aa:42:f4:6f:d6:d4:db:49:09:60:fc:
b7:b1:d3:14:0e:20:57:8c:42:ad:1f:7f:67:34:68:
b0:c1:14:6f:43:67:4f:51:13:97:68:cf:b5:86:31:
db:f1:5e:8f:33:f6:fe:a2:e9:42:35:04:9f:78:bd:
be:2d:b9:63:d4:30:df:36:22:f5:4b:09:36:5d:fb:
35:1c:4b:7a:2c:1f:9e:ef:4b:f3:62:8c:82:5d:08:
a7:69:6b:d0:1f:b7:d1:8a:5a:bf:28:78:5f:d8:c0:
ea:72:cd:62:68:75:99:d3:d1:60:74:6b:1c:6a:1a:
09:27:e3:0d:90:7a:c4:0d:91:ab:fa:d9:25:d6:9e:
d2:64:1c:db:16:64:63:61:ab:c7:c5:34:4a:26:6b:
54:71:a8:90:ad:27:01:c3:b8:cc:ee:3b:54:b6:32:
04:65:cc:bc:f6:54:a4:58:79:da:31:9f:93:d4:f3:
1a:25:f6:e1:33:22:9e:58:00:dc:ec:42:bb:88:a5:
bf:4d:61:14:21:d5:12:3d:d7:01:28:bb:11:f6:04:
3c:2a:62:c2:6c:9d:62:e5:5e:11:33:37:32:35:d2:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:5A:1B:1A:5D:AA:58:D2:D6:9F:64:A8:EE:48:E7:47:B8:54:C1
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:13:8d:05:6d:ec:8c:7d:40:e2:e5:61:e7:17:e4:e2:28:d3:
8a:25:fc:a3:d9:27:d5:6a:8e:f0:6e:3d:b1:76:8d:4e:0a:f1:
b3:0b:38:07:05:44:9e:da:1f:9c:fd:36:65:3d:b2:06:0a:10:
87:cc:54:32:59:8e:1b:0a:ab:45:37:a9:2f:c1:49:d8:59:d0:
5e:cc:45:c5:8e:58:d6:b3:65:38:9f:2c:f8:12:6d:ac:a3:10:
73:7f:71:11:97:fe:5b:cc:50:4b:94:24:cf:1b:43:ba:59:5d:
17:dc:ad:50:cd:12:31:b2:f5:e4:42:df:2e:59:31:2c:38:5a:
7b:9f:6b:41:e7:dc:c3:fa:c3:bb:2a:82:7d:3b:4d:d4:21:d4:
24:d6:65:97:8a:5b:d6:36:0c:34:18:98:a4:6f:36:bb:f8:c6:
a4:2d:fc:1e:46:25:5e:4c:7f:a9:d0:37:94:ee:cf:82:7f:21:
46:61:44:71:6e:ee:b6:c4:62:81:33:5f:42:b0:2c:fe:04:f4:
00:7c:4c:e5:91:31:a4:85:33:05:ad:97:21:15:af:bf:e9:8a:
40:cb:b1:fe:39:db:11:ca:21:39:25:72:66:ba:7d:49:52:e8:
a9:e9:c3:aa:e3:45:0c:5f:0d:75:bd:99:b7:43:b4:ca:27:37:
fa:5d:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:30 2026 by rpki-client