Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json)
Hash identifier: KopHdT0xTjny027RgDFPRD8Zme4g9RauCS/Y7VKJ7iM=
Subject key identifier: 2D:3A:6E:C7:11:1A:38:06:72:30:08:CC:BB:03:8D:56:D7:CD:43:91
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial: 01A10E82F268DCB8D54184517F9CEED5DA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 00:00:25 +0000
Manifest this update: Tue 06 Oct 2026 00:00:25 +0000
Manifest next update: Wed 07 Oct 2026 00:00:25 +0000
Files and hashes: 1: 7eLRqfQBEA8deAFpD-5TqzV1b_A.roa (hash: hharO3KHrL6T47EFBvglBhYILhHBiBCy/4h0AKuaamg=)
2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: 2H781Y5PJ2ZB1R5iQ4CyNhcf3bKjFf99PIRr666BZ/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:82:f2:68:dc:b8:d5:41:84:51:7f:9c:ee:d5:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Validity
Not Before: Oct 6 00:00:25 2026 GMT
Not After : Oct 7 00:00:25 2026 GMT
Subject: CN=2d3a6ec7111a3806723008ccbb038d56d7cd4391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:ca:e3:65:09:b0:14:18:be:b9:b8:e7:c6:
ad:64:85:ee:ba:4e:ba:e2:5f:27:a6:45:48:21:64:
ad:fc:d6:60:e5:e3:87:d8:91:9c:ae:ac:93:0a:cb:
26:4f:b7:53:57:c7:52:55:8d:ff:71:96:e1:23:7a:
2c:28:bf:3b:c0:e8:25:de:39:b7:1e:82:96:15:97:
ed:dd:f3:59:c5:fd:eb:bc:0e:b9:8e:87:17:80:99:
ce:ee:03:da:be:2f:71:fa:0f:7e:bd:c4:a6:6c:b6:
87:52:fc:3b:c3:c4:b7:41:cf:b6:67:f0:27:26:12:
27:48:d7:9b:e3:db:c5:36:8e:11:62:3d:c7:4f:6b:
c2:ce:92:cd:59:7e:d4:0e:42:5a:89:73:1c:16:a8:
92:9e:7f:00:5e:d5:af:be:1e:69:e2:9f:df:41:62:
b3:4b:97:cf:44:63:0c:c1:bc:75:cd:ce:f7:e1:0c:
17:b4:df:b7:97:61:e8:4f:d5:ea:8f:aa:60:19:c8:
b4:51:25:7d:99:ee:9d:7e:40:9e:44:04:f8:c7:fd:
fc:14:f9:97:d0:b0:cf:a7:87:5a:1a:7e:5d:06:ef:
5a:1e:a9:45:a7:db:b6:7c:85:31:75:c8:75:0a:a4:
bb:b9:ca:eb:1c:92:4e:44:07:ce:21:45:80:eb:9d:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:6E:C7:11:1A:38:06:72:30:08:CC:BB:03:8D:56:D7:CD:43:91
X509v3 Authority Key Identifier:
keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:53:30:5e:c5:f3:ae:7b:f7:22:96:49:64:e8:d4:56:04:
29:9f:5d:51:56:8e:b3:b0:c3:d6:25:81:f4:85:70:42:f3:2e:
86:c0:bc:1b:9e:95:90:cc:f0:02:48:7a:33:4b:5b:61:61:bd:
c7:11:bb:32:d6:dc:2d:69:a6:79:1b:f8:aa:fb:9d:49:24:27:
6b:8b:09:2b:20:83:49:95:a0:17:74:a5:d2:f3:7a:17:d1:25:
f7:b3:e8:5d:82:d3:1c:62:33:b1:e3:3d:f7:26:3c:0b:13:46:
2e:2f:b0:eb:0d:2b:09:b8:33:95:5b:c5:36:ef:bb:73:39:19:
e5:b3:48:e5:79:85:67:42:88:6f:97:af:4e:5b:8e:7b:ec:46:
ca:37:46:29:cc:18:ce:24:63:1c:c3:47:48:68:82:d5:e6:b6:
ae:e9:65:8e:64:9c:09:fb:28:f7:37:79:1c:eb:53:f4:fe:6b:
8e:02:ab:20:f1:90:e8:ee:f9:3f:a7:e8:e1:30:d9:97:4d:28:
97:64:70:fa:cb:70:c1:c5:0c:32:3d:60:7e:d9:44:61:b7:86:
77:02:1d:b2:49:e6:6c:e4:f6:8e:99:03:be:4f:45:a3:80:5c:
72:7b:94:c4:7a:93:20:3b:0b:7c:70:09:52:0e:87:35:f1:fc:
85:79:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:56:46 2026 by rpki-client