Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: jzMeU8vJevHf8w0y+tfiJWbPaYquIlSeoqDvuURvSP4=
Subject key identifier: 91:DC:1B:A8:88:41:14:AF:1E:95:D3:84:82:AD:99:12:D1:32:41:A0
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 01A0D7CCE919C9F4F1CAB303BC93266E06FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 09:02:05 +0000
Manifest this update: Fri 25 Sep 2026 09:02:05 +0000
Manifest next update: Sat 26 Sep 2026 09:02:05 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: JB0UhN88onfiyqdwMCTGa2438u7LK7cRYY3m7/0/on4=)
2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:e9:19:c9:f4:f1:ca:b3:03:bc:93:26:6e:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Sep 25 09:02:05 2026 GMT
Not After : Sep 26 09:02:05 2026 GMT
Subject: CN=91dc1ba8884114af1e95d38482ad9912d13241a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:50:6b:77:30:50:5d:25:dd:4b:0b:42:e7:
89:f1:29:12:2c:8b:36:8d:46:fd:40:84:4e:e5:19:
4c:ad:e4:c6:05:53:a7:28:1f:65:b3:a3:43:43:46:
4c:bf:f3:23:26:97:73:63:2e:b7:fb:b8:a5:00:43:
c4:4e:07:5f:1b:9b:40:c2:79:54:b2:9a:17:a7:75:
0a:7b:10:24:3d:00:63:c4:08:1a:bf:70:d7:f7:71:
16:a6:5f:02:d2:55:47:25:e0:fa:4f:de:59:57:a2:
ad:78:ce:4e:f3:70:13:e3:57:be:91:e7:d4:c9:f9:
b9:a1:bc:3f:62:57:ca:02:eb:67:45:ea:95:a4:80:
38:c2:33:72:50:b2:bc:45:8e:4e:3d:0f:b5:c2:e7:
73:f8:9c:62:15:a3:94:28:a4:3c:28:e6:e3:b5:84:
7a:17:b8:77:20:ef:fb:a0:08:60:55:93:66:e4:f8:
51:8a:df:3a:1c:df:0b:c0:f7:71:7a:07:b2:68:80:
bb:0e:f7:f1:db:0d:fc:1c:dd:ae:78:4b:23:dd:03:
b2:36:40:26:bc:a1:21:1e:bf:2c:84:7c:9a:f4:7a:
23:85:8a:42:58:11:f3:02:74:e2:e7:c9:96:17:a6:
1d:9d:29:b7:cb:42:73:b2:eb:fa:9e:7b:3f:7c:63:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:1B:A8:88:41:14:AF:1E:95:D3:84:82:AD:99:12:D1:32:41:A0
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e2:0c:47:84:b4:ca:f7:88:81:93:83:a2:52:42:73:6a:f4:
b9:0c:4c:04:26:ed:14:b1:89:7f:d6:20:ae:f7:da:f4:8c:d5:
60:62:9f:cf:18:76:b6:63:2d:11:d4:1e:9a:6b:6d:9f:d3:a8:
a9:c4:c5:15:43:f6:75:30:10:3a:3c:57:73:e2:0e:5a:af:f4:
03:f0:78:dc:e7:07:91:ba:2a:e3:e0:f0:d4:cb:66:8a:21:3b:
14:94:d2:d9:9d:71:43:dc:8f:98:42:6c:69:d4:60:f3:59:24:
37:1c:36:1e:a3:d1:d8:58:ad:60:7a:64:e3:84:ba:71:39:f0:
74:6c:a0:d9:c7:89:61:d1:f3:7e:89:37:a9:ba:6f:dc:f9:44:
2e:51:bd:aa:b1:1a:90:28:04:47:91:fc:d3:28:d4:6a:92:78:
1f:43:ec:d2:bf:e6:28:ad:7e:c3:fc:17:5a:1b:a6:d0:01:f7:
d5:d1:8c:ef:e7:e7:77:6a:6b:41:3a:77:51:3a:2e:ee:e2:0c:
85:48:69:c2:be:18:7c:b5:56:10:06:94:b9:d7:bc:81:51:89:
83:8c:01:8c:fb:e2:c4:83:c6:4e:a9:a3:e5:20:4c:80:63:fc:
4f:9a:5a:25:bd:4f:78:f4:2b:31:89:bf:90:35:11:25:f1:59:
24:95:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:37:37 2026 by rpki-client