Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: xFX1jZyZR9LGxI8Spirq+T1NCs7OfnJ3fqO12LOIXkg=
Subject key identifier: 0A:19:22:19:83:78:0F:1B:B3:FC:A5:6B:D7:BE:54:40:E9:1A:0E:9C
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 01A0C9A1DD65921D31FE2873C06026AC43D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 1149
Signing time: Tue 22 Sep 2026 15:00:23 +0000
Manifest this update: Tue 22 Sep 2026 15:00:23 +0000
Manifest next update: Wed 23 Sep 2026 15:00:23 +0000
Files and hashes: 1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: +7kn3W2zfuJLVsKajpuT1eXfXsMYwbPzPy64Un5Z1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:dd:65:92:1d:31:fe:28:73:c0:60:26:ac:43:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Sep 22 15:00:23 2026 GMT
Not After : Sep 23 15:00:23 2026 GMT
Subject: CN=0a19221983780f1bb3fca56bd7be5440e91a0e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:56:aa:70:3d:c2:6c:35:f2:f4:56:f5:86:
b1:98:36:b1:95:dc:43:d2:0f:45:eb:10:48:05:f0:
a9:e6:45:4e:f5:f2:38:f3:10:69:c6:0c:ab:85:17:
c6:87:67:5b:d1:bf:df:a2:72:ee:96:a4:71:00:d3:
a5:9c:61:4c:59:8e:02:e5:06:e0:8a:8a:f1:c0:a0:
2e:63:7d:d1:d2:b7:98:5f:57:9f:07:58:97:ef:a1:
67:e0:3e:9a:3f:4c:7a:12:01:d1:5e:fd:7a:48:1c:
84:47:9a:64:33:b0:d5:c9:5e:59:e8:96:6b:60:25:
f6:a5:f4:3e:88:16:b3:c3:d6:91:d5:7f:29:4e:f8:
ab:9a:a1:13:c7:d5:c5:b1:d2:d9:b9:01:8a:07:05:
16:27:3b:f7:2b:68:01:75:32:84:0c:22:15:5f:08:
7a:ed:5c:1d:a2:92:03:f7:93:39:9b:1c:0a:d1:0d:
87:71:cf:0f:89:d6:c9:bf:6c:0d:bd:b5:7f:71:2a:
f4:b3:05:5d:fe:96:7c:f1:ad:98:80:05:8a:3b:a8:
f3:49:70:85:0a:70:d9:98:0a:d3:45:f9:22:2a:96:
c4:f8:6e:9c:38:44:7b:22:0b:b8:0c:9d:8b:c1:a5:
88:9b:ad:f7:de:51:89:e3:33:92:bc:fe:ff:84:b4:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:22:19:83:78:0F:1B:B3:FC:A5:6B:D7:BE:54:40:E9:1A:0E:9C
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4a:6d:fe:61:17:30:50:b6:02:0d:8b:d0:df:85:89:82:6f:
e1:aa:0d:e8:74:d8:ff:b1:06:6c:32:d7:3e:27:c3:56:2f:ee:
3b:c6:78:36:d6:6e:b1:da:f8:28:52:e8:05:91:9c:c3:e7:a3:
06:60:1d:b1:99:ce:1c:f8:c5:20:3a:7f:c3:fa:3b:b6:11:d7:
3e:38:fc:f8:01:20:e3:cf:ae:08:bb:33:94:66:23:e1:c9:52:
e9:30:6b:36:d0:6c:f2:b6:0a:c7:39:86:89:ae:a0:36:30:da:
e8:3c:8c:6a:0b:41:67:d7:23:5c:19:a1:d3:0d:e3:f8:b5:5f:
68:1d:d3:5c:c1:cb:5f:8c:d4:44:4e:3e:f2:21:23:a0:3f:b6:
9b:eb:2a:73:cd:a7:bd:73:7b:be:1f:aa:63:2c:30:fe:b0:ef:
7c:c5:e4:ae:40:a7:a5:83:fc:69:26:84:97:52:86:ab:e0:94:
71:a4:6d:24:24:28:fb:74:82:a6:c7:5d:80:77:9a:9d:3d:7d:
c0:7f:3a:93:0f:85:73:9d:3e:8b:c5:6f:21:70:db:75:1a:ce:
6c:1d:8e:12:bb:e3:36:91:83:89:7b:9f:c5:22:f4:e9:18:76:
26:aa:bd:44:16:53:b1:ec:d4:0c:34:11:47:a4:52:91:59:de:
86:f1:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:38:35 2026 by rpki-client