Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: idRo1OSTg3JkLJ3rj+ZmlEXbLVqkUrVgS3w0RlBRH2c=
Subject key identifier: 88:0A:32:DF:78:81:39:9D:05:8F:AE:D7:FF:FD:A7:90:1D:24:36:DC
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 01A0DC173842FD01C6E9BB9E1C95660DCDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 195C
Signing time: Sat 26 Sep 2026 05:01:44 +0000
Manifest this update: Sat 26 Sep 2026 05:01:44 +0000
Manifest next update: Sun 27 Sep 2026 05:01:44 +0000
Files and hashes: 1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: e5KF32LKsaf4V6uQYsNWDRbx6kVvBisXIqpD4pZLsjk=)
2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:38:42:fd:01:c6:e9:bb:9e:1c:95:66:0d:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Sep 26 05:01:44 2026 GMT
Not After : Sep 27 05:01:44 2026 GMT
Subject: CN=880a32df7881399d058faed7fffda7901d2436dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:b2:af:27:b3:32:f6:54:05:80:4c:7f:84:
25:dc:91:3a:68:27:9d:0d:e5:ad:27:e3:f8:ca:f8:
92:3e:23:3b:15:5f:42:a5:3e:4e:8c:c5:de:5e:b2:
f0:d3:98:ae:cf:4a:54:f6:a2:92:85:3b:42:a4:83:
b9:60:40:2a:a9:d0:2d:ed:bb:06:f0:0c:c2:1a:6e:
8e:35:46:2c:12:7c:47:81:71:0e:f7:11:a8:dc:ff:
49:b6:b3:39:02:5f:a9:b9:67:b6:85:0e:19:7a:23:
93:dc:b7:c0:0e:80:d5:fd:60:28:fb:96:7e:d4:9a:
71:d0:bf:3d:54:eb:04:c0:be:61:8c:b8:94:19:b0:
1a:c1:a0:e2:c1:f4:95:7e:93:3c:b9:53:97:92:b6:
52:9d:25:c5:97:c4:cd:49:80:42:44:a3:85:c1:55:
96:bd:ed:dd:2d:17:78:f3:3f:1b:cc:31:94:60:94:
1e:f3:fa:81:c3:5c:a7:29:ad:a5:23:00:9b:83:cd:
6b:96:24:83:17:0e:67:56:67:36:0e:58:b9:89:80:
a0:b5:cd:6f:ad:13:16:72:fb:60:0e:02:b7:00:1d:
1a:7c:cc:30:c1:a8:11:45:b0:34:d9:26:a5:d2:6b:
6e:6c:94:2c:a0:1b:c5:d0:bc:40:34:5b:e2:17:60:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:32:DF:78:81:39:9D:05:8F:AE:D7:FF:FD:A7:90:1D:24:36:DC
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d3:42:6b:8e:7e:6b:8f:3c:c4:ef:7d:ca:ed:91:06:87:cf:
6e:54:54:5b:33:e8:62:2a:13:38:ca:75:40:3d:c1:39:29:c8:
5a:37:2f:c6:76:c4:59:e6:80:96:2e:6a:7d:e3:63:f0:61:72:
81:08:a3:6e:70:b8:f7:6e:5e:e9:a2:d0:77:fc:29:25:0e:ce:
5d:ac:30:8a:c8:32:eb:c7:69:3b:5a:19:ea:12:f6:e5:b4:22:
ae:ae:e4:75:91:af:dd:98:90:58:7b:98:6a:40:80:18:60:3a:
20:dd:5d:7d:72:24:1f:da:d1:de:49:fd:8b:76:c4:4e:cb:1d:
64:af:1a:05:86:5e:ed:94:a1:19:69:12:a1:9c:f9:da:99:89:
4f:1a:c4:fd:b0:a1:33:48:e1:04:99:c2:7d:ce:43:43:a0:3f:
d8:b1:19:df:d0:38:da:c1:ca:6c:82:ef:58:00:d1:4d:3a:e6:
5f:43:ad:ad:05:a7:d0:31:3d:e4:90:fc:16:ba:ea:bd:68:c4:
3e:d9:3b:f6:ee:e0:89:92:c4:62:a5:97:0a:55:01:f3:f3:69:
fa:92:52:1f:07:41:e2:7a:0a:3e:0b:a8:f0:cb:aa:d2:0c:c6:
f2:c9:77:63:df:4e:16:5b:9c:46:f9:38:43:a0:1b:af:be:b1:
39:e7:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:35 2026 by rpki-client