Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: EA2ikQOqLzFcbfS/og7kQPccnG8cJEhZ04Mplg2vkhc=
Subject key identifier: 95:DE:B8:C5:85:2F:1D:80:86:63:9D:F6:5B:FD:86:F9:33:04:C5:B2
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 019E2091D81DDF5EDA333A4B1A94C767BCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 0438
Signing time: Wed 13 May 2026 09:01:29 +0000
Manifest this update: Wed 13 May 2026 09:01:29 +0000
Manifest next update: Thu 14 May 2026 09:01:29 +0000
Files and hashes: 1: k0b9VtGawXwWdQgfJzcdEYCCg_o.roa (hash: dIXVCTmcfL3HOBzfVAxTvQR3ANPXcc/eVpPbv90sMfE=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: AzedV9ur30d3hVxiNyYDFK6Zs3oX7m0AeHxA5EG4bL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:d8:1d:df:5e:da:33:3a:4b:1a:94:c7:67:bc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: May 13 09:01:29 2026 GMT
Not After : May 14 09:01:29 2026 GMT
Subject: CN=95deb8c5852f1d8086639df65bfd86f93304c5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:a2:85:a3:59:ba:32:0a:41:a8:c0:43:f5:
09:1c:c2:77:07:73:f8:95:91:bf:c1:55:f2:d3:fd:
60:ed:bf:65:1e:7b:46:05:ea:55:c9:2b:66:a8:02:
a3:bc:8b:3a:f5:3e:51:12:76:23:6c:9d:e7:fb:46:
67:11:99:61:d0:08:c3:2b:a0:30:4e:39:8d:e5:ba:
f9:8a:3f:5b:8a:cc:cf:09:4b:fb:ca:9d:7f:33:d2:
35:f2:39:63:a1:1f:c0:69:42:37:11:62:c1:75:1f:
9a:71:05:2b:dc:5c:04:70:82:41:f4:85:64:0d:8f:
00:84:9d:f7:2f:c1:74:fa:08:b5:e0:9a:80:b2:80:
72:74:3d:27:8d:19:ab:b4:24:78:a0:44:39:6d:d5:
de:be:bf:17:d0:74:69:75:95:48:61:f2:e7:12:16:
ce:b3:19:b8:95:2e:51:7e:a8:b9:39:ed:78:cd:c0:
ce:ce:cc:fa:6a:1f:10:fe:89:ad:c1:29:8b:e1:f1:
53:e2:33:92:ad:bc:cb:64:75:c3:f8:64:07:a7:8f:
5d:fc:de:ea:48:98:d4:09:3c:e7:71:36:90:da:ad:
ff:28:68:ba:0b:f0:25:af:62:44:7a:7f:bf:30:1c:
5e:96:f9:2a:1f:a0:28:a6:8c:c0:52:a2:89:6a:7d:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:B8:C5:85:2F:1D:80:86:63:9D:F6:5B:FD:86:F9:33:04:C5:B2
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:f2:f8:96:aa:3c:b4:57:70:89:bf:e7:cd:a8:f7:d5:d2:
8c:d8:17:50:d3:20:9c:43:a3:dc:21:bd:78:3e:a5:d0:d6:8d:
7c:f6:50:d3:8c:71:a8:13:1f:db:89:80:00:c6:cd:dd:83:d3:
46:62:af:5f:83:a2:28:8a:bc:c6:d6:0b:3d:d6:ca:00:99:59:
73:ec:6f:c1:4c:4b:12:4b:eb:7b:6b:7d:6a:7d:ab:b8:f6:7b:
e4:53:4e:9f:2c:83:05:85:e5:2c:70:76:64:81:f2:da:de:c2:
84:2d:cb:c2:84:1e:bc:4c:c5:62:00:ff:9f:f0:f2:f2:bd:05:
a3:7e:16:8f:93:59:80:64:4a:d8:8d:c8:d4:8d:6e:d2:a6:53:
be:1e:48:0f:09:fc:91:b1:a0:28:1f:ab:cf:55:f7:86:1a:e0:
94:c2:b2:eb:aa:d2:bd:ca:b7:89:d0:92:1d:d0:33:0c:84:c6:
49:95:61:53:0d:1c:91:a9:77:e0:cc:f4:25:a5:72:7a:ca:66:
ce:14:dc:75:2b:31:63:b7:30:de:4d:1d:58:4e:d4:fd:2c:66:
45:80:3e:49:cf:ee:0d:71:36:78:a2:00:14:f1:87:4d:f0:72:
c4:f2:7e:02:b7:6b:d1:69:95:09:c3:01:b3:49:b9:20:b1:a8:
8c:88:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:04 2026 by rpki-client