Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File: W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier: u/5ePwYzYj7MggFtPrWxG7Xo9c8Ye+qV0IDAUhHj++A=
Subject key identifier: DD:E5:16:5E:B0:8A:63:9E:D8:3C:18:EE:5F:CC:B3:18:6D:72:15:17
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer: /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial: 01A1822B65C4BEEDFFA104ECC2EA7699A64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number: 0276
Signing time: Wed 28 Oct 2026 11:00:44 +0000
Manifest this update: Wed 28 Oct 2026 11:00:44 +0000
Manifest next update: Thu 29 Oct 2026 11:00:44 +0000
Files and hashes: 1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: 20yxMxc30kz8I7mE+VI5wEh9q/EIWHiI9xCaWNohQEA=)
2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:65:c4:be:ed:ff:a1:04:ec:c2:ea:76:99:a6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Validity
Not Before: Oct 28 11:00:44 2026 GMT
Not After : Oct 29 11:00:44 2026 GMT
Subject: CN=dde5165eb08a639ed83c18ee5fccb3186d721517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:1e:fc:18:36:63:da:87:8f:30:80:1c:3f:
b0:6a:25:5a:06:67:2e:4b:c2:03:1d:d1:a3:8a:8b:
af:da:a9:af:48:2d:0a:3c:46:5b:61:43:b9:65:e7:
2b:c5:dd:bd:ae:d8:00:c6:f6:da:09:79:2a:04:6b:
c8:68:59:ed:a2:91:fc:70:ce:e7:dd:38:c5:8e:58:
e6:7b:3b:c7:96:f0:42:e9:35:ea:9d:2e:1b:5a:b3:
5d:05:ae:10:74:32:71:79:77:50:9f:46:7d:e5:d2:
e9:0f:10:98:a5:de:e7:73:96:21:85:cd:87:92:3f:
11:de:5d:4b:85:b1:43:fe:c0:54:d4:1a:9d:9e:59:
4f:5b:5b:0c:19:35:55:47:eb:50:65:d0:3d:1b:86:
97:f9:42:06:16:de:3b:e2:17:ee:02:4c:e8:6f:cf:
13:32:e2:ab:60:b5:bd:a2:50:4d:2e:da:12:13:3c:
9e:d1:34:84:90:50:64:c0:d5:4d:78:15:c2:8f:7e:
57:42:20:c5:5a:a2:09:47:21:ed:ed:75:1c:79:34:
37:43:7f:88:b5:02:38:b7:22:e4:a5:28:15:77:9d:
9b:de:0e:d0:f0:23:bb:74:cf:e9:02:a2:93:e8:9e:
17:99:f5:5d:c0:de:37:e2:8a:f7:77:64:2a:2a:64:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:16:5E:B0:8A:63:9E:D8:3C:18:EE:5F:CC:B3:18:6D:72:15:17
X509v3 Authority Key Identifier:
keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:55:17:5a:2b:8b:c2:b0:8c:5e:1d:0d:58:0b:d4:1a:bb:64:
c2:53:6a:cd:53:a4:d5:bb:b3:e5:e2:17:2e:f5:d1:54:9f:9b:
24:64:87:34:77:fd:dd:67:65:6d:ae:3a:02:1b:6a:6c:88:52:
3e:8a:0f:71:c4:ac:cd:7d:f0:ad:cd:07:10:d9:6d:5a:ab:97:
b1:ff:26:4f:f8:0a:b1:da:7d:a1:a9:fe:15:f3:23:06:39:01:
fb:84:e3:ef:64:71:61:4f:3c:a1:25:8f:a6:e1:b6:1f:fb:2c:
28:9f:11:ae:6b:71:c2:ef:06:85:3d:93:5c:f3:64:40:c7:c2:
6c:c6:34:cf:78:c3:c1:5e:32:49:93:ca:04:90:fe:c5:5a:96:
e2:7e:ac:14:70:9d:b2:10:4b:cb:0d:9b:08:4f:04:a5:d2:a5:
97:f6:1a:78:6e:6d:38:2c:15:e4:3a:78:9e:c6:8a:6f:48:73:
c3:90:4e:88:e5:b1:95:97:28:e3:62:2d:e0:98:b1:d1:0b:0a:
58:5f:bb:1e:d2:26:d3:0c:03:65:ad:a1:cc:d5:4c:6e:0c:f4:
df:07:f7:c4:03:55:cd:8b:0d:fb:c1:c7:50:11:9f:40:e8:3c:
b2:0b:86:77:00:37:70:2c:24:f5:e9:b2:fe:33:ba:59:3a:48:
51:f0:e1:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK2XEvu3/oQTswup2maZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNGFjYzFkZjI4NTgzY2JlMzk4NmY2NWFkM2EwZDJhMTI3
MWQ3OTYwHhcNMjYxMDI4MTEwMDQ0WhcNMjYxMDI5MTEwMDQ0WjAzMTEwLwYDVQQD
EyhkZGU1MTY1ZWIwOGE2MzllZDgzYzE4ZWU1ZmNjYjMxODZkNzIxNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHse/Bg2Y9qHjzCAHD+waiVaBmcu
S8IDHdGjiouv2qmvSC0KPEZbYUO5Zecrxd29rtgAxvbaCXkqBGvIaFntopH8cM7n
3TjFjljmezvHlvBC6TXqnS4bWrNdBa4QdDJxeXdQn0Z95dLpDxCYpd7nc5Yhhc2H
kj8R3l1LhbFD/sBU1BqdnllPW1sMGTVVR+tQZdA9G4aX+UIGFt474hfuAkzob88T
MuKrYLW9olBNLtoSEzye0TSEkFBkwNVNeBXCj35XQiDFWqIJRyHt7XUceTQ3Q3+I
tQI4tyLkpSgVd52b3g7Q8CO7dM/pAqKT6J4XmfVdwN434or3d2QqKmT6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3lFl6wimOe2DwY7l/MsxhtchUXMB8GA1UdIwQY
MBaAFFtKzB3yhYPL45hvZa06DSoScdeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzByTUhmS0ZnOHZqbUc5bHJUb05LaEp4MTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yMGY0YWEtMWMxYi00OTY0LWEwMzMt
YjViNzA3MTZkODNkLzEvVzByTUhmS0ZnOHZqbUc5bHJUb05LaEp4MTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yMGY0YWEtMWMxYi00OTY0LWEwMzMtYjViNzA3MTZkODNk
LzEvVzByTUhmS0ZnOHZqbUc5bHJUb05LaEp4MTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFUXWiuL
wrCMXh0NWAvUGrtkwlNqzVOk1buz5eIXLvXRVJ+bJGSHNHf93Wdlba46AhtqbIhS
PooPccSszX3wrc0HENltWquXsf8mT/gKsdp9oan+FfMjBjkB+4Tj72RxYU88oSWP
puG2H/ssKJ8Rrmtxwu8GhT2TXPNkQMfCbMY0z3jDwV4ySZPKBJD+xVqW4n6sFHCd
shBLyw2bCE8EpdKll/YaeG5tOCwV5Dp4nsaKb0hzw5BOiOWxlZco42It4Jix0QsK
WF+7HtIm0wwDZa2hzNVMbgz03wf3xANVzYsN+8HHUBGfQOg8sguGdwA3cCwk9emy
/jO6WTpIUfDhLQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:46:04 2026 by rpki-client