Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: bvdqQn7Xz5NfPHOfcV8XTJosnJX52cDr+1wmWVpbbzo=
Subject key identifier: 20:A4:FB:A5:DA:6F:7D:D3:08:16:E0:31:6D:FC:79:C8:4F:8C:11:24
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 01A0DC8507A872BBC6FAB8804D749FC1C234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 06C3
Signing time: Sat 26 Sep 2026 07:01:40 +0000
Manifest this update: Sat 26 Sep 2026 07:01:40 +0000
Manifest next update: Sun 27 Sep 2026 07:01:40 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: wt+e69hRfMhqkZJfipduzwam4lYfxhf9kZl5hNdIHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:07:a8:72:bb:c6:fa:b8:80:4d:74:9f:c1:c2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Sep 26 07:01:40 2026 GMT
Not After : Sep 27 07:01:40 2026 GMT
Subject: CN=20a4fba5da6f7dd30816e0316dfc79c84f8c1124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:5b:91:d5:ae:86:a2:23:38:aa:df:84:c6:
64:5a:76:d2:90:ed:75:10:8f:be:c3:ce:be:08:36:
b8:e9:4e:b5:22:ed:ec:13:32:d0:cf:f4:66:98:66:
4b:1a:06:af:27:cd:68:26:72:cb:a5:e0:af:27:c2:
02:ab:9d:fc:77:5f:f7:5b:fb:04:98:ca:e1:6a:2a:
8e:d8:9f:e2:cc:57:6b:dc:4e:a1:2d:db:b0:9a:37:
d5:b0:c1:ee:11:94:4a:ff:03:94:3c:c3:f5:6c:ec:
a1:26:78:64:5e:41:ff:ee:56:15:38:4d:92:da:d3:
a3:ab:97:e4:d9:93:47:0b:e5:2f:f3:a9:16:26:5b:
4a:db:1d:6b:54:8e:bc:2e:7d:fa:a6:2e:1c:d5:50:
81:13:06:83:7e:a7:2e:da:44:af:0a:02:7f:c0:4c:
99:66:6f:5e:71:be:cd:9c:65:3b:b6:53:ed:6d:01:
57:a0:14:24:f2:0b:81:2d:57:09:8f:3d:45:82:63:
d3:63:a9:4c:4d:94:24:8f:2d:ac:5e:cc:91:84:61:
af:00:66:1c:c6:3b:56:95:35:a9:38:d5:ef:20:42:
8f:5e:7a:89:7b:1e:05:38:5a:a2:04:d0:55:aa:77:
cf:e9:66:9d:d6:e6:0f:87:91:bd:a5:5d:a2:c8:1e:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:FB:A5:DA:6F:7D:D3:08:16:E0:31:6D:FC:79:C8:4F:8C:11:24
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:05:8c:79:4c:3d:19:ae:3f:0e:2f:54:4f:03:71:24:45:e9:
50:1d:9a:e5:64:af:75:a5:9d:a9:53:55:da:8a:05:9f:cd:48:
d6:e0:16:d8:5c:11:c3:13:14:2f:db:f2:76:30:4f:9b:ee:62:
d9:82:8a:64:ff:30:86:bb:d3:2b:b9:c2:42:0f:c1:3f:98:87:
bb:ab:7d:be:03:28:1f:55:17:19:75:a3:2b:a6:81:9e:7e:1d:
bb:be:c1:b3:17:e6:22:02:bd:c1:f1:8b:86:3f:60:65:b8:f5:
8b:38:cb:4f:64:4b:b0:67:66:a4:1a:da:8d:41:e1:a6:77:71:
80:d7:e1:21:62:5c:8e:64:f7:30:6d:57:cb:81:91:e9:2d:71:
64:a8:bb:de:fd:5e:f1:64:15:84:d2:95:80:cf:47:b8:3b:23:
20:86:8c:6e:03:d9:e1:42:82:fb:5a:30:95:47:56:29:f9:ba:
40:ab:a6:16:0d:e9:bf:60:ac:fb:73:51:ae:af:95:2f:81:c3:
28:97:71:6f:46:b0:76:e7:2b:11:6d:72:37:e0:a1:19:7d:78:
16:e8:88:d2:9f:7e:c4:5b:c3:ac:cf:2f:0b:58:a6:fa:3d:4f:
3b:d5:de:79:2e:ce:a9:aa:55:50:64:d9:2d:bb:16:ad:44:65:
bd:37:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:48 2026 by rpki-client