Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File: Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier: 3eGimB+MNXRtb5mGt62BdSLrxV1IPJhW2PR3uLiwu6Q=
Subject key identifier: 31:02:D8:67:20:52:30:A0:F4:E5:0E:17:64:E0:1B:C3:25:B4:CA:6E
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 01A0DB04282D27510B5BB6C9D9341349210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number: 09CC
Signing time: Sat 26 Sep 2026 00:01:17 +0000
Manifest this update: Sat 26 Sep 2026 00:01:17 +0000
Manifest next update: Sun 27 Sep 2026 00:01:17 +0000
Files and hashes: 1: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: hw9RIe7QLTCip0P+h2QPBCKs9uR90gq64Ov3Or1ndqs=)
2: d3VInPdLirBsLVvGRzvBNOU5GVY.roa (hash: 1H0FqCjUTy4udmz5J8jd2r4LaLaCADLPuji2yS6Osxs=)
3: vskKnMst18EVmBm6lBj0YzIpNuk.roa (hash: jTxDQ4a1vled+k24Z+iZwB1mJUNUMg7H5qSldRSueFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:28:2d:27:51:0b:5b:b6:c9:d9:34:13:49:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Sep 26 00:01:17 2026 GMT
Not After : Sep 27 00:01:17 2026 GMT
Subject: CN=3102d867205230a0f4e50e1764e01bc325b4ca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:78:f4:86:12:3e:3c:e4:55:31:ca:e0:b0:
1a:4d:41:ab:3c:8f:fa:90:70:0f:cb:42:4f:d0:e0:
9d:de:59:1a:2c:08:df:33:0c:99:2b:aa:a4:f9:c4:
e0:eb:65:ca:d0:aa:b2:51:a2:8f:ab:92:95:38:43:
c9:fc:62:e8:c4:c0:9b:47:f6:0b:a4:8e:ac:73:2f:
f5:8e:bd:7a:55:8f:7a:47:41:1e:79:da:16:48:48:
19:86:61:e6:40:61:0d:ba:91:94:ae:94:0e:92:ce:
18:8d:2e:23:42:f1:03:93:ff:8f:a8:0d:28:30:ed:
c7:0b:eb:a2:e5:63:8b:51:ff:2e:ac:f8:a3:97:9b:
aa:ba:b5:99:b7:1c:3c:a1:f3:6d:82:3b:8c:74:7a:
52:bc:d6:cc:20:b9:91:25:e7:89:72:17:89:4b:a4:
7b:88:29:cd:89:e0:1d:7a:a2:19:9a:39:25:fb:40:
2c:77:e4:d4:c7:5f:e2:d3:a8:71:37:f5:4d:38:bd:
a3:ac:85:d4:c5:eb:a8:7b:41:8a:63:d8:6e:fa:2d:
b6:dc:c8:14:e2:f1:e7:9a:24:d4:43:4d:ba:36:37:
e5:67:b3:de:f3:10:c2:2d:11:2e:29:93:a3:68:35:
fe:77:92:df:b8:0a:60:8c:f8:e4:e6:58:fc:2f:cc:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:D8:67:20:52:30:A0:F4:E5:0E:17:64:E0:1B:C3:25:B4:CA:6E
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c6:a8:96:c2:74:d9:d8:db:3c:ab:49:fb:fe:0f:da:74:29:
56:18:14:2d:db:57:df:39:d3:f8:89:60:8a:27:01:bd:ba:a2:
b0:98:75:9a:52:57:89:37:bf:ee:14:5f:b7:90:a9:38:5b:36:
c2:51:3c:fa:e3:2e:58:ac:7c:ea:e3:a6:3a:22:10:dc:b4:10:
4b:1c:36:f8:0e:84:d3:b0:09:9e:41:4f:04:27:dc:54:fe:3c:
4c:59:80:3d:cc:3a:f2:ec:29:45:59:20:57:cb:2d:42:d4:50:
d6:61:94:0b:b3:7d:35:68:47:35:eb:19:a6:21:cc:46:e3:aa:
61:84:bf:eb:ef:38:80:84:66:45:32:f5:a3:5b:9a:12:eb:b3:
13:a3:fb:e8:37:af:e9:c9:22:02:0a:48:e9:c4:19:97:d5:d7:
21:18:52:17:ca:87:68:18:09:f8:d0:41:5b:a6:39:60:57:38:
a4:1f:09:bd:40:41:b8:47:53:3c:e7:86:7e:13:38:aa:c5:3e:
54:8a:03:0a:97:6a:0f:92:b2:14:a0:35:9c:a4:61:58:fc:6d:
3d:3f:9a:95:8f:1e:db:5c:21:53:bb:9c:28:fa:b2:4c:cd:cf:
eb:45:09:e2:b6:6d:22:b8:2e:ef:f3:2a:37:41:30:08:46:f0:
2b:8e:40:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBCgtJ1ELW7bJ2TQTSSEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWM3YzA4ZDc0OTAxYjdiODEwOTM3ZWM2M2U4NTU2M2Qz
Njc4NmEwHhcNMjYwOTI2MDAwMTE3WhcNMjYwOTI3MDAwMTE3WjAzMTEwLwYDVQQD
EygzMTAyZDg2NzIwNTIzMGEwZjRlNTBlMTc2NGUwMWJjMzI1YjRjYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyx49IYSPjzkVTHK4LAaTUGrPI/6
kHAPy0JP0OCd3lkaLAjfMwyZK6qk+cTg62XK0KqyUaKPq5KVOEPJ/GLoxMCbR/YL
pI6scy/1jr16VY96R0EeedoWSEgZhmHmQGENupGUrpQOks4YjS4jQvEDk/+PqA0o
MO3HC+ui5WOLUf8urPijl5uqurWZtxw8ofNtgjuMdHpSvNbMILmRJeeJcheJS6R7
iCnNieAdeqIZmjkl+0Asd+TUx1/i06hxN/VNOL2jrIXUxeuoe0GKY9hu+i223MgU
4vHnmiTUQ026NjflZ7Pe8xDCLREuKZOjaDX+d5LfuApgjPjk5lj8L8wZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEC2GcgUjCg9OUOF2TgG8MltMpuMB8GA1UdIwQY
MBaAFFpcfAjXSQG3uBCTfsY+hVY9NnhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MzgwNWItOWJmZi00ZDA0LWJkYzQt
MWE1YmEzYmI3MGFiLzEvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MzgwNWItOWJmZi00ZDA0LWJkYzQtMWE1YmEzYmI3MGFi
LzEvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsaolsJ0
2djbPKtJ+/4P2nQpVhgULdtX3znT+IlgiicBvbqisJh1mlJXiTe/7hRft5CpOFs2
wlE8+uMuWKx86uOmOiIQ3LQQSxw2+A6E07AJnkFPBCfcVP48TFmAPcw68uwpRVkg
V8stQtRQ1mGUC7N9NWhHNesZpiHMRuOqYYS/6+84gIRmRTL1o1uaEuuzE6P76Dev
6ckiAgpI6cQZl9XXIRhSF8qHaBgJ+NBBW6Y5YFc4pB8JvUBBuEdTPOeGfhM4qsU+
VIoDCpdqD5KyFKA1nKRhWPxtPT+alY8e21whU7ucKPqyTM3P60UJ4rZtIrgu7/Mq
N0EwCEbwK45AuA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:17:56 2026 by rpki-client