
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier: XMR5TA+mhHjPEEKXnX+rGy9A5XqnOK/+lfJljLE2s1I=
Subject key identifier: 56:40:53:E7:5E:0E:71:00:5A:06:34:4E:1A:CE:D3:33:DA:A6:43:8F
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial: 01A1878853CE2C4E72EBACCD650C37ACC0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number: 0A76
Signing time: Thu 29 Oct 2026 12:00:20 +0000
Manifest this update: Thu 29 Oct 2026 12:00:20 +0000
Manifest next update: Fri 30 Oct 2026 12:00:20 +0000
Files and hashes: 1: VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa (hash: lWi4+CdVg9U/MmtchWvR41UmLMSzY3HTa3grdEf3jrk=)
2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: cavah2Y+vftVbA74GWAE1qAvVR1zsNKSAmdAq840/6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:53:ce:2c:4e:72:eb:ac:cd:65:0c:37:ac:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Validity
Not Before: Oct 29 12:00:20 2026 GMT
Not After : Oct 30 12:00:20 2026 GMT
Subject: CN=564053e75e0e71005a06344e1aced333daa6438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:0a:24:c2:ac:3e:cb:83:91:65:d6:96:01:
8a:8f:a9:c7:03:ce:94:29:9b:6e:68:02:5d:8f:d4:
18:58:cc:dc:58:3d:ca:4f:ff:ff:b1:ad:8c:1d:ee:
07:ea:cb:0d:5e:65:3a:fa:b5:2c:9a:e3:2f:45:57:
5a:22:ff:9b:61:fe:c2:d9:fa:e2:b8:8f:85:0b:f5:
e2:85:8c:19:49:cd:58:4d:6c:9d:c4:18:3e:c2:9f:
c1:40:a5:0e:eb:a6:00:8a:2d:ee:87:2f:83:2e:eb:
7f:ba:3d:58:be:8a:2b:7f:68:06:63:d3:81:84:46:
19:d7:2e:d0:8e:58:cf:57:3c:fb:54:59:d2:cb:3d:
35:c5:43:24:ca:97:f9:5a:f8:d6:c7:ff:55:0f:b7:
8d:f6:9c:49:f2:6f:f9:a0:da:39:67:0a:8a:d7:52:
f6:f9:7d:c6:00:eb:e8:97:6d:af:59:67:1b:3a:06:
7a:16:16:82:f2:fe:fa:a6:8c:cf:40:4c:38:5f:bc:
3f:6f:01:a5:db:82:8a:60:2e:07:9c:51:60:8f:aa:
73:4e:b7:f8:81:5e:e5:4b:c4:fa:32:af:cc:e6:7e:
2a:60:3b:e8:38:2b:77:21:99:18:ce:ac:22:c2:36:
24:7a:a6:44:ca:47:aa:c7:c2:f2:bd:d3:0a:64:d9:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:53:E7:5E:0E:71:00:5A:06:34:4E:1A:CE:D3:33:DA:A6:43:8F
X509v3 Authority Key Identifier:
keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7a:38:09:54:ea:7c:1d:05:66:59:05:3c:eb:46:4d:ec:6b:
5f:e1:99:ff:19:0e:36:42:f0:30:9e:f9:51:11:58:00:a8:ee:
1c:9b:19:c1:bb:7e:dd:3b:51:fe:64:64:b9:74:59:87:85:9e:
a0:fa:27:41:24:b2:d8:52:49:97:3f:a9:d3:8e:a1:2d:b4:4f:
9b:14:52:67:36:d1:f6:70:6f:56:7c:bb:77:c7:09:bc:b5:74:
ea:56:13:f5:b6:2a:e5:1a:66:96:8b:43:6c:76:d8:3b:89:6e:
03:39:38:97:58:46:4b:4f:20:59:ad:d2:ac:ff:4e:50:c7:66:
83:cb:e3:be:71:91:c8:c0:00:16:e6:92:84:bd:3c:02:70:7e:
92:f2:17:54:5e:cd:41:4b:b4:d7:45:50:ab:6d:0e:a3:5c:3a:
35:e5:8f:a4:65:f6:f5:23:d3:a0:b3:53:2c:c8:48:be:bc:ed:
15:3f:df:e3:ff:71:27:64:dc:f7:48:32:f1:58:e7:89:8b:42:
4e:14:ff:54:47:66:01:15:40:f9:ea:b9:26:30:76:34:fe:83:
9e:df:bc:05:78:e3:54:25:22:2b:64:b5:59:77:5b:fc:b2:0a:
cb:9c:4e:99:2e:e2:3e:99:8d:0d:81:ed:0c:dc:ec:4e:85:dc:
f0:d6:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:59:59 2026 by rpki-client