Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: oFKw4zfmr3ZjMsiMFunq8TD58WSNMn2tzeZysXDvjEQ=
Subject key identifier: E2:71:2F:D9:F5:F9:27:0E:67:70:BD:F1:85:5B:82:FB:76:F5:0C:2D
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01A0F00BF410024791A9FF503D4A72DF0256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1A97
Signing time: Wed 30 Sep 2026 02:01:50 +0000
Manifest this update: Wed 30 Sep 2026 02:01:50 +0000
Manifest next update: Thu 01 Oct 2026 02:01:50 +0000
Files and hashes: 1: KQegI9zFl4TTXrM0z9Yjv28lgns.roa (hash: Ej7A/eIErtk4SW4resekw38eVCxq6nz5fw0K4qp4xAQ=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: LeD8XBZyjDxohDaQvxGARFvKJGxbaFeFt50JPkX5WGo=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:f4:10:02:47:91:a9:ff:50:3d:4a:72:df:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Sep 30 02:01:50 2026 GMT
Not After : Oct 1 02:01:50 2026 GMT
Subject: CN=e2712fd9f5f9270e6770bdf1855b82fb76f50c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:a8:12:31:55:5f:59:ff:b8:71:15:f0:5e:
c6:65:50:f8:b7:ef:54:7a:99:cc:97:86:2d:92:e1:
3f:09:66:6f:16:6e:13:96:4a:8e:20:82:59:65:0a:
9f:53:f0:fb:d6:5d:eb:cf:f8:f9:b7:ab:f4:e9:7e:
25:0d:76:0a:77:76:23:3d:1c:a5:1d:04:cd:1b:4c:
82:b2:16:d8:16:7b:1a:7d:a7:b1:9b:47:b5:cf:04:
a8:b8:f6:2f:d9:4b:1a:3e:93:0d:37:4e:ef:b5:21:
ca:2e:f6:f4:1f:f5:0f:e6:88:22:89:3a:49:cf:8c:
7a:2e:9f:55:0d:2a:22:cd:dd:16:88:d3:86:17:10:
47:ac:bf:ac:2c:35:0a:bb:1e:2e:7d:63:77:38:80:
8b:8a:99:26:46:70:73:88:f1:14:25:92:5a:e1:f7:
94:05:7f:18:a9:c2:fe:76:95:10:c1:dd:88:a9:88:
29:6e:14:26:c2:8e:cb:bc:9c:53:1a:fd:8e:d2:5c:
2d:6b:56:26:ff:70:ed:b8:7b:72:83:b9:ef:28:01:
9f:df:2e:a7:58:42:20:18:f9:cf:f9:48:2c:94:7d:
79:36:d4:41:65:2b:80:12:7d:fd:0c:8f:57:c3:65:
8d:c0:a8:4a:ab:64:0a:e0:5f:86:ae:47:98:1a:de:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:2F:D9:F5:F9:27:0E:67:70:BD:F1:85:5B:82:FB:76:F5:0C:2D
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c6:e4:14:eb:bc:45:a7:a3:dc:1e:b5:9a:ce:0b:6f:0a:f2:
c8:c9:30:1c:90:b6:b6:86:aa:57:d5:12:2c:8e:78:1a:8a:b8:
23:39:7d:a9:d7:7e:fc:ab:64:e5:f4:2a:58:12:43:cb:e0:2f:
1d:d0:3d:0d:eb:e1:40:71:de:fa:8d:96:5c:35:48:96:c5:ea:
5f:16:6e:d1:ee:69:88:9e:e7:6e:f5:45:e1:c2:e8:af:18:cd:
77:5d:c9:99:6b:c2:f9:ff:84:85:1e:dd:2b:70:86:51:10:07:
81:4d:af:55:b9:74:ad:aa:4b:7b:93:44:48:4c:1f:87:e4:e4:
36:e5:97:b2:30:68:20:f4:f6:fa:e5:52:c5:60:40:84:e3:09:
b4:15:dc:8e:f0:bd:d0:ac:68:42:7a:51:56:8d:81:10:49:11:
c5:ce:8e:dd:ed:99:db:53:44:08:a6:1c:ba:3e:8d:e5:c8:93:
93:65:70:8b:22:b8:c4:7a:71:e9:8c:92:3d:bf:18:8d:a0:55:
e9:0c:08:6a:cf:3a:84:a0:9d:a1:cf:af:f0:f1:6e:45:66:7d:
77:88:e9:55:fb:06:0f:a8:ba:70:dd:8d:7c:b4:08:ce:66:9d:
b1:9d:a1:89:dd:a2:47:f3:2d:e2:b4:f6:0c:a8:69:1c:b1:1b:
99:42:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:18:02 2026 by rpki-client