Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
File: wvQTfZw_qGHggQT02hKJ2un9XrA.mft (raw, json)
Hash identifier: OhlhRfCCThlbCnllyGq//8ngs66cFOU766/7YeZOUPM=
Subject key identifier: 73:EB:04:AF:3E:7C:C9:BD:92:47:41:5F:4E:EB:3E:68:33:57:63:7A
Authority key identifier: C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
Certificate issuer: /CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Certificate serial: 01A107DCBF28E0B387891EE6D5247C1AACC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
Manifest number: 30
Signing time: Sun 04 Oct 2026 17:01:09 +0000
Manifest this update: Sun 04 Oct 2026 17:01:09 +0000
Manifest next update: Mon 05 Oct 2026 17:01:09 +0000
Files and hashes: 1: AzooWuklm-3P7PJRiw22avIbtzA.roa (hash: kgzWAt/cYY+uCetaCudrArQVeL4ScGnH/K5j6IEA5fI=)
2: wvQTfZw_qGHggQT02hKJ2un9XrA.crl (hash: XoRFbr63D1aeCjtBBLxuuDkkkvg5QO89cienQdc7i1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:bf:28:e0:b3:87:89:1e:e6:d5:24:7c:1a:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Validity
Not Before: Oct 4 17:01:09 2026 GMT
Not After : Oct 5 17:01:09 2026 GMT
Subject: CN=73eb04af3e7cc9bd9247415f4eeb3e683357637a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:ac:3a:d7:87:7e:ee:7e:c3:a6:4a:4e:b4:
7f:70:f0:9b:d7:e4:58:80:6d:ce:ad:07:6f:18:8f:
3b:85:58:e1:12:31:d9:1a:9a:6f:51:4c:ff:6a:9d:
de:01:69:8a:e4:1f:cd:22:4d:20:09:f5:a1:b0:ea:
3a:b0:32:21:c7:0f:27:2f:3b:9b:ad:25:98:09:9c:
03:9e:20:86:4f:d6:1b:31:e4:cd:38:08:c7:56:d5:
91:67:4e:f9:2f:21:90:35:25:8c:4f:97:8b:12:f3:
e3:42:c2:4a:8c:88:14:0e:b4:55:23:40:f7:8d:fd:
50:12:29:5e:c1:9a:02:c9:43:1d:ec:a0:bd:7a:11:
a5:09:ff:ea:b7:9e:b5:2b:ba:43:c2:36:69:f6:25:
4e:35:75:3a:a4:59:f0:0f:dd:f6:94:81:29:6f:10:
0f:60:9b:6e:fc:fa:49:e8:56:37:17:74:7f:01:af:
66:86:aa:3f:94:34:ee:05:74:e9:a0:fa:d0:7e:1e:
b8:c6:8d:f3:e3:bf:09:f1:73:d2:2c:81:12:5d:ba:
65:48:9e:21:0a:2f:58:45:37:7c:de:fb:1b:65:fd:
89:95:1b:5f:48:35:7b:08:fd:02:68:88:56:63:65:
43:40:60:57:16:65:72:f2:bb:f3:b5:6e:a7:8d:0e:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:04:AF:3E:7C:C9:BD:92:47:41:5F:4E:EB:3E:68:33:57:63:7A
X509v3 Authority Key Identifier:
keyid:C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:95:d7:bb:d5:49:d2:5e:e5:90:36:9b:b0:db:6f:69:d4:
10:f3:5c:db:cd:9a:b5:fd:47:74:03:43:bd:56:0b:ba:29:9a:
69:6c:01:28:66:23:a5:03:aa:e5:9e:aa:2d:19:b0:ba:64:ef:
fd:7a:8c:40:bc:a0:b8:66:79:9d:89:39:d1:c8:c7:80:af:34:
89:60:03:f5:f4:d3:bd:15:39:d2:f5:9b:29:9b:48:e2:8f:52:
0c:eb:df:93:3b:e7:fa:cc:6e:32:4d:f2:5c:82:06:b3:d9:92:
b1:26:e1:6a:65:55:b8:dc:a0:ae:d1:ed:97:28:a5:40:e5:d0:
8d:25:89:ed:06:6d:05:b1:ce:0a:e3:1a:5a:cc:8a:d2:56:09:
81:ee:aa:4e:07:c6:58:bf:42:38:ff:48:30:a1:fa:4a:b7:e5:
42:06:a7:60:61:3d:c8:ef:98:24:fd:50:73:bd:64:39:15:a2:
89:82:78:97:3a:fd:d3:ac:b8:c4:44:fc:fa:c3:69:1b:95:c3:
8b:0b:a8:a2:c1:91:d4:59:b2:78:88:cf:23:9c:c3:3b:5a:d3:
49:ab:ee:da:71:9e:96:09:49:34:94:f2:13:dc:18:48:0e:b7:
a1:b3:db:f8:1d:8f:d3:8a:df:a9:ef:bb:04:82:be:a1:1e:f4:
f8:b8:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:38:41 2026 by rpki-client