Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File: wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier: 3EtdMBUcLyMVsRQGnnW5V8NhdJ3MIpRJ4vbUeXMhFe8=
Subject key identifier: 3A:A1:0B:41:33:99:7A:AF:5E:A7:A7:32:B8:7A:0F:91:CA:D6:D1:B0
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 01A0D2DEBB3F6B206899FB81C992C231DA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 10:03:27 +0000
Manifest this update: Thu 24 Sep 2026 10:03:27 +0000
Manifest next update: Fri 25 Sep 2026 10:03:27 +0000
Files and hashes: 1: 36T8Tn4Sup8fmQcjWCy26dR6re0.roa (hash: SG3LgOxnqBUaF6P4Vt2PLcBh7paYsvxM9iIaS6ERJJ0=)
2: 5QI4fVyPMm0-K60PBKXaZ8ZbhYY.roa (hash: PJ8hWL8fv95vnL+98n7N2nc5zp7ZDQ14+kWYLI42xqM=)
3: D3Scbfl6fBr15c-mbPSi-zu0HHY.roa (hash: GocWeJMCxjrHRiAM5S4dU7oou7wP+fPBVESKdHPj5Io=)
4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: /JF9HeMgRrQNochSxLk9f4/80ak2SjUB+BsTcxT2HJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:bb:3f:6b:20:68:99:fb:81:c9:92:c2:31:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Sep 24 10:03:27 2026 GMT
Not After : Sep 25 10:03:27 2026 GMT
Subject: CN=3aa10b4133997aaf5ea7a732b87a0f91cad6d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:9e:bf:b9:d3:21:26:d1:9d:67:c2:66:ea:
88:0e:87:f9:1f:d2:5c:ad:d6:2e:15:e3:1d:58:52:
62:23:a1:d9:16:ac:ac:e8:6e:07:dd:07:a2:cf:f4:
e8:92:50:45:84:5a:78:53:24:72:cb:50:15:4a:fa:
58:ff:6c:5c:5a:58:37:75:84:4e:c7:70:05:25:ab:
88:82:fc:c0:f6:1d:88:87:9b:5a:e9:52:7b:02:94:
be:98:c0:93:f3:47:0b:18:59:3b:25:df:70:37:83:
2b:dd:9b:39:c2:56:07:4f:de:fb:1d:26:64:c9:70:
07:03:a2:2f:b0:91:54:7f:9f:c5:bf:6d:fc:48:8f:
fa:d0:0e:f7:74:e2:75:42:ac:19:99:59:36:ee:be:
8f:cf:5a:50:5d:38:ff:7c:b8:51:09:8a:8b:2a:9d:
d5:bc:8d:b4:7c:85:0d:1a:35:46:d8:35:69:99:b1:
0a:2d:27:ec:4f:a3:d1:6c:fd:a0:f7:31:56:eb:30:
97:1d:7c:9a:34:20:af:84:88:bf:8a:ef:c3:8e:26:
36:38:a7:1e:ce:3c:7f:4c:74:82:82:e6:07:2e:85:
94:04:6b:e5:f8:ce:32:5d:f9:37:a5:73:94:26:77:
11:8d:30:50:eb:59:9f:50:3d:69:4d:58:ee:84:d7:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:0B:41:33:99:7A:AF:5E:A7:A7:32:B8:7A:0F:91:CA:D6:D1:B0
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:69:49:d0:14:03:cd:3e:ca:ae:04:51:b0:6a:23:e7:5a:
a8:c7:e2:1d:c0:f5:30:71:14:21:a3:89:97:79:c0:b7:ce:30:
55:b4:34:22:0e:2f:c3:f8:d6:58:8b:26:76:fa:14:29:a9:c2:
f8:9c:ea:5f:f4:6e:f7:cf:bf:03:90:82:2d:de:00:25:89:bc:
4b:3e:54:01:ca:3f:00:29:1f:be:fb:ee:10:23:67:d2:bc:e2:
80:d2:49:4c:92:0a:83:8c:0e:13:14:ac:b3:63:17:d0:09:9e:
1d:5f:ef:3c:8d:34:30:72:2f:58:11:7d:5e:2d:3f:ba:d5:e0:
43:b8:25:df:82:48:1e:22:c4:9d:1e:57:22:02:60:70:e8:38:
6f:d5:c4:94:00:68:ac:b1:bc:97:3a:06:82:1c:74:18:0c:60:
f1:d9:2e:ee:e9:88:40:ae:f1:44:d3:fc:57:3f:58:5a:14:b2:
4e:0c:f0:ae:58:58:a4:9f:6f:dc:f0:9b:e7:80:92:66:05:3b:
27:4d:f5:ee:f1:f3:82:d5:5d:5f:93:16:d4:a8:a9:cf:10:c0:
10:63:d8:fa:9f:6b:58:fa:1d:49:79:10:f5:98:b9:67:1d:e7:
b8:5b:95:5a:7f:f8:b8:3c:9e:e5:1f:43:3e:5b:f3:8f:ce:9b:
2c:8d:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:40:40 2026 by rpki-client