Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: EBQQMO5ysvwCHgjAPA8z8i12+XlWGvnL2bN8zXnn1ZQ=
Subject key identifier: C1:75:17:20:AF:A2:AF:89:B2:1E:70:B7:5C:B3:87:10:6B:A2:FD:3B
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 01A1DB01FEF43D6AA5D797F827F13A444A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 152C
Signing time: Sat 14 Nov 2026 17:01:43 +0000
Manifest this update: Sat 14 Nov 2026 17:01:43 +0000
Manifest next update: Sun 15 Nov 2026 17:01:43 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: 4tmWAAsgXG+efcik+TcAzZqH9aPqoDaeHmkjw84AC3Q=)
2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:fe:f4:3d:6a:a5:d7:97:f8:27:f1:3a:44:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Nov 14 17:01:43 2026 GMT
Not After : Nov 15 17:01:43 2026 GMT
Subject: CN=c1751720afa2af89b21e70b75cb387106ba2fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:4e:0d:d8:ac:45:60:2c:b9:52:e0:f4:6a:
7e:b8:3e:4f:a5:49:85:29:4b:b8:29:69:22:b7:6f:
9e:d8:2a:08:e3:01:21:b4:33:3e:5c:06:71:33:6e:
1a:8f:a1:82:34:15:de:58:f6:23:d7:9c:ca:f9:de:
24:04:43:95:7a:62:19:23:34:e2:f4:85:12:2b:09:
28:28:60:3f:04:88:b6:b6:4f:86:ba:2f:76:04:08:
6c:fc:ab:57:2f:05:26:5f:cc:23:dd:29:5d:31:69:
50:4f:c2:26:3e:3d:d3:30:b3:58:91:66:57:20:94:
d0:fc:88:cf:40:1b:d6:ce:eb:98:ff:92:db:ca:ea:
b2:73:5a:1d:28:bf:98:3b:ce:6a:00:a7:0a:9c:37:
be:9d:fa:9a:e9:9c:0a:a8:2b:71:b5:83:c4:39:a3:
52:6e:c8:41:71:6d:48:0e:bf:e8:40:02:00:5b:33:
33:1b:94:cf:78:9a:f1:56:40:47:d9:8d:10:1e:66:
eb:06:31:27:3d:ff:0c:de:62:8e:10:f6:74:4a:ed:
86:ea:1d:92:81:f3:91:a6:7c:85:61:8e:53:f8:e6:
73:a7:b8:99:64:39:47:48:3f:60:e6:51:e3:7d:87:
96:3a:61:e7:10:fc:42:11:35:a6:bd:63:1c:50:fc:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:17:20:AF:A2:AF:89:B2:1E:70:B7:5C:B3:87:10:6B:A2:FD:3B
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dd:65:79:fd:1f:3a:a7:1d:56:b5:45:c2:ce:0d:77:08:f1:
ef:72:2d:53:95:3a:2d:e9:ff:d5:2a:53:64:b4:4d:13:52:66:
24:0f:cd:b0:10:47:c6:2e:27:a6:ed:cf:a1:ed:93:34:87:a2:
01:49:42:fa:72:be:bb:e5:c0:30:78:b0:4e:61:9e:75:a8:2f:
86:67:1e:d9:32:4f:99:1e:4f:98:d2:3e:70:08:64:22:f8:99:
e5:9c:cd:b1:81:91:24:27:76:22:f6:aa:54:7d:07:24:5c:6e:
3d:ae:db:dc:ec:98:0a:7c:9d:a6:1d:a1:2f:c5:fd:a8:36:37:
7b:dd:ce:fc:c6:38:e8:bb:dc:b8:48:dd:46:97:8e:d2:c8:e5:
a6:a2:6e:ee:a1:e8:5f:2a:c9:31:dd:76:4d:c5:53:0c:0a:3e:
c0:4c:44:37:72:55:34:fa:80:a6:22:fe:b1:fb:98:f4:9b:57:
b2:de:9d:d2:c0:a6:59:65:93:a1:ee:3d:75:ac:88:f8:38:fa:
87:ff:49:a4:df:56:02:ae:2b:79:11:6b:53:a5:f0:54:d0:ad:
5f:e2:1d:45:49:1d:4d:c7:e8:86:7a:6d:c0:ab:c0:45:5b:6d:
62:12:e3:d4:bb:fd:ae:9b:a1:95:b2:1c:b9:71:0d:5a:b0:64:
a6:cf:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:21:18 2026 by rpki-client