Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: Abf+J6RGegpCOV+A9Ntio7fUnwwg1+gK9E+mC/RgKcA=
Subject key identifier: 14:CE:67:34:5C:54:98:D6:EC:FF:8F:44:33:30:A9:0B:7A:77:A0:20
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 01A0D8A87692C19C9B6D82034C2FF65A1432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 06C1
Signing time: Fri 25 Sep 2026 13:01:54 +0000
Manifest this update: Fri 25 Sep 2026 13:01:54 +0000
Manifest next update: Sat 26 Sep 2026 13:01:54 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: axbF7A90ahx3v3uPvvLp0Z4TO0LcYnkfW2lF/0yP1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:76:92:c1:9c:9b:6d:82:03:4c:2f:f6:5a:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Sep 25 13:01:54 2026 GMT
Not After : Sep 26 13:01:54 2026 GMT
Subject: CN=14ce67345c5498d6ecff8f443330a90b7a77a020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:a3:3c:ea:49:58:e3:de:e6:44:29:ab:94:
dc:1a:35:fe:e6:de:80:60:02:d6:51:5a:ea:6e:e0:
93:6b:13:24:af:fc:26:af:e2:bb:17:d8:b5:d2:81:
39:db:e0:05:6c:ea:5f:d9:17:9a:ff:63:40:5a:8f:
1e:51:d0:94:b4:52:ca:0b:1c:29:86:8c:05:45:67:
26:c3:ca:7d:23:15:3b:a4:4e:03:35:53:19:35:91:
4b:e8:34:ac:96:54:5d:eb:d9:2b:86:c8:57:8e:58:
ab:4f:e6:ad:d3:ec:90:53:ea:78:9c:67:ac:01:11:
0a:f4:fd:e5:a3:e2:ab:05:cb:04:f9:f3:83:fd:da:
c4:d3:0f:37:27:46:30:9f:24:04:91:f4:71:64:b7:
42:90:ff:b1:e3:40:f1:6b:c0:08:51:58:50:4c:1a:
bd:28:6a:9e:b0:2b:db:64:0b:9f:e6:5a:83:9c:31:
0a:13:2b:0b:56:46:a4:27:e3:ed:10:0d:66:f9:f9:
a1:14:d2:2e:35:52:09:11:0c:4f:89:93:f7:fe:4d:
8a:b2:a3:fc:84:02:20:14:fc:cf:f1:c4:85:fd:28:
df:02:d7:23:eb:04:33:db:66:fb:b9:04:02:1d:b6:
aa:d9:81:cd:ca:87:0b:1e:64:2c:14:3e:5d:09:a2:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:67:34:5C:54:98:D6:EC:FF:8F:44:33:30:A9:0B:7A:77:A0:20
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f4:89:89:f2:a4:43:1d:99:c7:ff:28:aa:eb:54:ba:0e:5f:
16:bd:2e:71:53:68:c9:bf:59:80:67:1e:ad:81:30:71:cf:44:
ea:9f:e9:6c:d2:cd:d6:75:a2:7a:0a:99:c2:11:88:68:a5:f0:
bb:de:22:f9:22:b6:3b:a9:ba:39:ab:8c:9e:84:98:c2:fc:26:
9c:a3:64:2a:62:78:c6:08:92:fd:44:27:d2:46:e1:72:05:43:
05:66:3a:45:11:42:61:83:13:82:a4:3a:9f:0a:99:e1:e9:ba:
45:8a:18:23:91:fe:30:e1:dc:de:c0:ad:01:48:d5:5c:04:70:
0c:74:b5:fa:55:70:96:25:e1:57:6b:f8:bf:65:96:cd:13:69:
c4:a4:08:18:01:c1:b8:a9:1d:fe:45:2e:7f:c3:e9:e7:49:1a:
00:f1:1c:e5:38:96:fa:ab:16:7c:ed:fb:e5:4c:57:f2:56:1a:
aa:1d:a2:03:19:25:15:52:ad:18:78:ab:31:8d:48:34:cc:f8:
b5:17:40:c8:aa:7a:8d:84:df:20:57:f3:59:73:21:61:7d:96:
b0:50:45:af:09:93:a4:bb:42:b8:4a:d0:f4:20:28:72:6f:b4:
98:70:c3:86:e2:05:5e:b9:3f:eb:77:53:d9:df:c8:b4:39:fd:
a0:3d:8c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqHaSwZybbYIDTC/2WhQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3
ZTg5NzAwHhcNMjYwOTI1MTMwMTU0WhcNMjYwOTI2MTMwMTU0WjAzMTEwLwYDVQQD
EygxNGNlNjczNDVjNTQ5OGQ2ZWNmZjhmNDQzMzMwYTkwYjdhNzdhMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHmjPOpJWOPe5kQpq5TcGjX+5t6A
YALWUVrqbuCTaxMkr/wmr+K7F9i10oE52+AFbOpf2Rea/2NAWo8eUdCUtFLKCxwp
howFRWcmw8p9IxU7pE4DNVMZNZFL6DSsllRd69krhshXjlirT+at0+yQU+p4nGes
AREK9P3lo+KrBcsE+fOD/drE0w83J0YwnyQEkfRxZLdCkP+x40Dxa8AIUVhQTBq9
KGqesCvbZAuf5lqDnDEKEysLVkakJ+PtEA1m+fmhFNIuNVIJEQxPiZP3/k2KsqP8
hAIgFPzP8cSF/SjfAtcj6wQz22b7uQQCHbaq2YHNyocLHmQsFD5dCaK7xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTOZzRcVJjW7P+PRDMwqQt6d6AgMB8GA1UdIwQY
MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt
YzczY2JlNzBhYmI5LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5
LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPSJifKk
Qx2Zx/8oqutUug5fFr0ucVNoyb9ZgGcerYEwcc9E6p/pbNLN1nWiegqZwhGIaKXw
u94i+SK2O6m6OauMnoSYwvwmnKNkKmJ4xgiS/UQn0kbhcgVDBWY6RRFCYYMTgqQ6
nwqZ4em6RYoYI5H+MOHc3sCtAUjVXARwDHS1+lVwliXhV2v4v2WWzRNpxKQIGAHB
uKkd/kUuf8Pp50kaAPEc5TiW+qsWfO375UxX8lYaqh2iAxklFVKtGHirMY1INMz4
tRdAyKp6jYTfIFfzWXMhYX2WsFBFrwmTpLtCuErQ9CAocm+0mHDDhuIFXrk/63dT
2d/ItDn9oD2M1Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:31:53 2026 by rpki-client