Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: 8ks1PO0NT8QbOKuFwpW2WQVzxTgHFACgjvnB07BkWz4=
Subject key identifier: C3:04:70:72:7D:95:AE:9F:05:E9:38:A8:76:93:BB:9A:29:AE:5B:79
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 01A0DC4DC6ACDE546A33E30C66471C566A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0CEB
Signing time: Sat 26 Sep 2026 06:01:19 +0000
Manifest this update: Sat 26 Sep 2026 06:01:19 +0000
Manifest next update: Sun 27 Sep 2026 06:01:19 +0000
Files and hashes: 1: 3DSxcK9BYX9k5tvNNrwWZ7kYjz4.roa (hash: LlbtQ15mDycazVoOyoBxW8uz2UEgpVUqP+tEU+6Dy34=)
2: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: 46gtn2AfsY8IdBZE+6Uy4HogNuX4oBSOrf7FVEo6fjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:c6:ac:de:54:6a:33:e3:0c:66:47:1c:56:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Sep 26 06:01:19 2026 GMT
Not After : Sep 27 06:01:19 2026 GMT
Subject: CN=c30470727d95ae9f05e938a87693bb9a29ae5b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:18:35:03:20:74:31:04:10:1b:b6:fc:b5:
1a:61:28:cd:8d:19:c9:6f:b3:6b:d8:5f:85:bb:10:
67:54:f3:e3:ac:cb:4c:b1:a3:5b:05:aa:25:07:ad:
66:26:93:68:35:70:28:e4:f5:7f:85:b2:e0:e5:a7:
54:5e:0c:46:d2:9e:8e:3e:43:76:51:d3:9b:85:9f:
b9:12:f7:0b:82:0b:0c:b5:92:eb:4a:ea:81:24:2f:
f1:cd:06:00:c6:3b:31:47:f6:10:e5:23:23:6a:63:
16:8c:e8:f7:83:0f:dc:52:9b:6e:a2:67:2c:e3:8f:
6a:6e:2c:0b:4d:17:f9:43:37:8f:24:dd:56:e4:8a:
4c:94:f6:27:5b:3f:b0:3c:98:08:f8:ce:af:47:53:
22:d1:90:3e:4f:7d:b3:bf:e0:ab:95:8e:fb:81:ed:
09:6f:7c:60:d3:a9:1c:19:8d:18:06:70:bf:78:cd:
e6:fa:d1:d2:59:55:07:27:f5:45:07:cf:09:8f:6d:
eb:2c:b4:9e:ff:31:67:e8:30:67:0d:fc:9d:00:fe:
4e:cf:9d:7e:f5:42:35:d8:aa:89:9e:bf:ff:1f:c6:
60:ab:86:38:c6:0e:2f:c3:ab:ea:f8:22:bd:b2:d9:
76:60:57:cd:e1:24:2c:39:69:3f:5d:14:cf:14:aa:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:70:72:7D:95:AE:9F:05:E9:38:A8:76:93:BB:9A:29:AE:5B:79
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:81:2a:e9:37:70:a0:49:74:87:64:a8:a0:d4:69:b1:1d:
eb:4b:ad:07:04:01:10:f3:8d:68:fb:bd:8e:0a:7d:e7:eb:f4:
31:6d:77:88:96:2e:1c:28:f2:63:25:f4:fb:36:e5:17:13:aa:
75:af:46:bc:1e:f9:4e:17:09:2e:2c:62:c7:45:3a:82:8c:ab:
1f:de:3f:15:be:6b:fa:a5:62:65:9e:a1:8d:1e:3a:30:6a:e2:
3a:89:05:42:bc:fa:a7:22:21:d7:38:90:84:02:dd:df:61:64:
fc:1d:8a:23:1b:c1:8a:d5:de:77:ba:29:cc:44:46:ee:1f:2d:
cd:bb:52:0f:36:13:b3:d0:45:65:ba:52:b8:23:76:e2:e6:b4:
69:82:a5:66:37:44:3a:82:a3:e4:8e:73:d0:01:ab:31:02:96:
7c:c7:30:15:80:ff:6d:51:2d:96:48:ab:9f:09:2e:89:a1:ec:
59:3a:78:ac:b4:f3:e5:92:9d:aa:31:4b:96:d4:64:4e:14:ac:
9d:ea:f4:fa:06:62:3e:04:e5:64:2b:c9:90:a1:45:82:72:c6:
6b:0f:c8:ce:ee:bf:d2:c9:81:5f:cc:3c:d2:14:bf:cc:a2:3a:
97:16:31:51:fe:11:c9:48:24:71:59:13:d1:5d:2c:a7:42:f7:
53:de:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:33:09 2026 by rpki-client