Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: hTSH3NbtyNBpj7YmGk2PfwLXVg7zUupYiWsr3uhITxY=
Subject key identifier: E4:53:A8:D7:30:5F:80:1F:D1:5A:FF:5B:4C:7F:EF:0F:C8:FD:9F:C0
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 01A17E85F87E9F76225F55BF8C2121C8FF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 10CA
Signing time: Tue 27 Oct 2026 18:01:11 +0000
Manifest this update: Tue 27 Oct 2026 18:01:11 +0000
Manifest next update: Wed 28 Oct 2026 18:01:11 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: 4vhl0ev2kEKNEhloClMxxQJl4xhNVDeYp+ZhW4D48/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:f8:7e:9f:76:22:5f:55:bf:8c:21:21:c8:ff:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Oct 27 18:01:11 2026 GMT
Not After : Oct 28 18:01:11 2026 GMT
Subject: CN=e453a8d7305f801fd15aff5b4c7fef0fc8fd9fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:a6:b7:c5:b2:96:e9:4e:06:ae:44:43:f6:
79:e7:e4:d2:c3:7f:5f:5b:a4:2b:3e:73:0c:43:74:
00:3f:d2:aa:05:c6:de:1f:70:96:52:13:19:ba:9a:
a6:f0:96:cb:39:c1:a6:fe:b2:4b:85:10:f9:da:2e:
4a:53:11:d3:a8:02:43:0f:b8:5e:00:3f:23:16:de:
6a:5f:15:3a:b9:1e:68:b1:8f:aa:31:22:b4:06:03:
cb:1c:da:33:bf:fe:58:a1:74:d4:c8:2a:86:50:39:
97:96:41:cd:fa:dd:f2:76:71:b7:e8:61:3b:5e:0d:
88:3d:03:ee:44:fa:29:7b:fb:be:52:7e:13:d9:40:
94:fc:fd:98:bf:fc:2e:eb:11:0b:00:1f:fe:63:e7:
d7:81:e4:61:87:49:ca:b6:40:1a:d0:1a:a0:86:78:
42:47:4b:b1:83:9a:29:c0:7b:77:e2:6e:1a:9e:df:
be:49:89:13:86:0f:57:e9:d9:c5:cc:74:b9:41:a3:
7f:2d:d1:ad:78:3c:fd:d4:5e:6e:99:ff:f3:95:2f:
19:39:43:ee:16:7f:fe:64:5f:70:4a:7f:5e:fb:40:
c6:0b:25:e8:a2:5c:97:a1:e7:1f:dd:f8:82:74:d1:
c9:74:40:bd:3a:f4:71:52:91:e8:c2:0a:9a:97:a3:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:A8:D7:30:5F:80:1F:D1:5A:FF:5B:4C:7F:EF:0F:C8:FD:9F:C0
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9f:50:33:c4:1c:df:fc:88:8f:3b:4b:f7:3e:27:43:d5:1a:
c2:1b:d5:03:1e:4f:ea:24:03:d9:aa:c2:d7:c9:d0:34:85:45:
51:3d:ff:8c:91:d0:d9:f4:36:26:59:bc:56:c8:49:58:61:e6:
07:8c:63:84:5e:66:39:75:04:b6:78:0a:a0:f0:3d:ab:c1:0a:
7c:d2:45:ab:c4:5b:dc:e9:d3:92:8a:97:59:3f:68:cf:25:bc:
5b:29:34:26:ae:24:b3:3e:84:3b:13:be:11:b3:46:b4:b9:f0:
b0:2a:89:c1:d0:9d:89:e8:82:9c:cd:07:86:4d:68:6b:d4:51:
bb:8a:47:d0:f6:9b:a8:f5:41:ef:a8:22:73:00:78:53:97:84:
59:b3:cc:a8:e4:61:bb:01:08:59:e3:2f:23:37:04:d8:ec:a3:
79:61:00:7b:97:2c:e3:17:f6:27:1e:0e:f6:18:47:83:cb:f8:
02:5b:41:08:1b:c6:7d:a1:d0:d1:f8:03:f9:a3:68:a8:f1:38:
ed:ec:9b:91:d6:dc:ab:09:08:36:8e:4a:34:9f:e2:44:4c:79:
d9:b6:43:2c:b7:a5:ec:cf:9e:5d:28:46:83:35:42:66:05:14:
0e:61:5d:d9:33:2f:1f:8e:19:b8:31:27:9f:ed:54:0c:e1:8e:
ea:08:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:23:25 2026 by rpki-client