Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: sWQnFl8JexldAO+ah3rVhk94SQawHsEcBLln58/u9mE=
Subject key identifier: 39:CD:6E:18:7C:E5:E1:17:0E:3E:82:10:87:87:85:63:19:1A:99:AF
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 01A0DE05ABCD8EE7FFA00E1A8E54C2AFBBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 14A9
Signing time: Sat 26 Sep 2026 14:01:48 +0000
Manifest this update: Sat 26 Sep 2026 14:01:48 +0000
Manifest next update: Sun 27 Sep 2026 14:01:48 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: It7z84WvOa6megYhMO5TTFmiM3U28uApTvGC1OdXvFY=)
2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:ab:cd:8e:e7:ff:a0:0e:1a:8e:54:c2:af:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Sep 26 14:01:48 2026 GMT
Not After : Sep 27 14:01:48 2026 GMT
Subject: CN=39cd6e187ce5e1170e3e821087878563191a99af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:c7:23:e2:8d:ba:19:c6:e5:00:5f:31:31:
1d:b2:53:1b:38:2c:5d:b3:53:39:50:ed:b5:09:6a:
81:a2:b4:10:8a:12:4e:a6:73:84:c3:3a:3f:e5:2c:
85:6b:9f:cd:77:c2:cc:77:7f:c4:3e:be:fa:0d:3e:
c2:39:8d:ee:0c:32:00:10:c6:df:7c:e7:2d:82:05:
aa:c8:06:c8:6d:cc:a8:37:27:1c:92:21:0a:ac:47:
ff:7c:0b:8f:f0:5d:69:12:65:60:05:8c:52:0c:bf:
45:94:15:6f:4c:05:92:72:08:7b:9e:1c:82:06:ad:
30:f7:6f:34:89:c4:43:68:e6:6f:21:db:59:d4:7f:
00:77:f8:47:8c:71:24:ed:ed:30:3f:da:3b:67:01:
ef:5e:18:d6:d0:9a:cd:94:85:6c:14:be:70:93:8c:
e9:76:da:34:c6:69:0a:67:d1:dc:0a:ab:16:84:36:
d0:41:c1:f9:d8:86:be:34:35:bd:d2:ec:ac:cf:3c:
ad:ae:01:31:11:a2:1d:97:a8:ca:19:6b:a4:be:eb:
76:96:78:6b:1e:9a:b3:cd:29:2d:a2:32:82:5a:6b:
b9:a1:7a:87:d2:f7:95:61:a1:4b:6c:79:0d:85:27:
54:88:d2:0e:da:27:5b:25:43:67:9a:0a:72:b1:e5:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:6E:18:7C:E5:E1:17:0E:3E:82:10:87:87:85:63:19:1A:99:AF
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:74:1f:72:f5:f1:b6:69:de:80:f3:aa:d9:56:7a:49:d5:
f5:ed:76:d2:f9:50:e4:86:4b:d4:36:28:fe:90:11:fb:62:7f:
81:bb:1a:62:1d:71:75:49:88:94:3b:24:7e:91:9d:ab:11:53:
ed:b0:0d:8a:4d:9b:25:3b:2f:b9:7a:99:7a:7d:78:3a:ea:b1:
58:c3:fd:2d:de:7e:28:5d:65:fd:f1:62:12:06:66:68:82:5b:
04:8a:fe:d6:27:f4:97:6f:f0:70:ae:ad:32:cf:d7:a8:7b:9e:
d1:29:16:d6:5b:f1:b8:25:fa:84:f7:9c:32:19:f2:5f:a3:32:
f2:d9:09:ac:ef:75:e5:60:6b:28:b5:d6:1b:3e:0a:d8:22:25:
e1:02:c0:12:89:f4:dc:cc:ea:ab:2e:77:8c:07:84:28:e1:2a:
ed:56:6a:20:83:7d:70:9d:86:b2:b3:d0:d6:39:cd:08:66:b0:
97:6e:00:e3:54:fc:4b:f2:bd:86:6a:21:43:9e:52:4f:32:17:
99:17:ed:41:16:d3:fd:01:37:31:26:50:27:3f:a3:e6:44:25:
15:d8:ff:11:ba:63:d1:fc:c8:87:1f:df:22:54:e9:8f:26:df:
e7:b1:7a:a2:ab:80:a9:b6:f2:7a:11:2d:6c:35:7e:68:41:4e:
32:a9:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:29:02 2026 by rpki-client