Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File: v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier: bxZIhXq9RKNuzF0Udwn4OrcWGglLWEj8uAJfgZGfnWY=
Subject key identifier: 9D:81:BA:DC:E7:01:FC:17:99:C4:D3:D5:6C:E4:F4:0F:04:09:47:41
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer: /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial: 01A181BD7868477C96F4D3AA9287B071912A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number: 1223
Signing time: Wed 28 Oct 2026 09:00:40 +0000
Manifest this update: Wed 28 Oct 2026 09:00:40 +0000
Manifest next update: Thu 29 Oct 2026 09:00:40 +0000
Files and hashes: 1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: B6G+zEhfuijoR59CgFfitMTGs7GAYTR+xZVHpPIXAG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:78:68:47:7c:96:f4:d3:aa:92:87:b0:71:91:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Validity
Not Before: Oct 28 09:00:40 2026 GMT
Not After : Oct 29 09:00:40 2026 GMT
Subject: CN=9d81badce701fc1799c4d3d56ce4f40f04094741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:85:04:c4:cd:45:4a:ab:86:c9:1f:c0:cf:
0c:38:f0:3c:91:e8:32:74:1e:2c:e6:fb:5a:b6:65:
e9:76:62:d1:f5:a1:19:2e:7f:5e:18:01:95:e8:a7:
26:dc:25:81:a4:be:68:ec:93:d8:29:6e:79:19:cc:
5d:6e:4e:13:10:28:f6:d5:5b:e8:d7:a1:b8:ba:17:
43:8a:db:8e:b1:bb:b8:d0:a6:cd:ff:00:ef:bf:c2:
df:7c:87:20:69:af:a9:5e:1e:31:9e:61:72:6a:55:
f0:29:ee:cf:e5:f9:bf:fb:2c:23:98:e5:34:9a:69:
f2:d5:a6:55:16:3f:74:3d:f5:e6:37:6f:33:8c:63:
46:c4:00:5b:6b:83:c8:a6:9f:34:42:0a:4e:f9:d2:
51:da:19:b9:97:86:3b:f2:48:a9:e5:9a:8d:88:fe:
72:7f:96:81:3a:f4:7e:e8:a2:56:ef:f9:1b:e5:97:
bd:48:09:d0:a9:2c:d6:2b:3d:c1:f4:a1:c1:83:8c:
12:4d:ae:39:45:31:6d:56:7d:c4:73:4a:5c:64:41:
1f:dc:80:46:ef:3c:38:8c:e4:44:03:43:8e:f5:ec:
07:ca:0f:68:27:fe:47:8a:5a:93:e5:90:13:46:04:
ea:9e:84:55:e9:28:16:6c:60:35:1e:6a:a5:9c:c5:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:BA:DC:E7:01:FC:17:99:C4:D3:D5:6C:E4:F4:0F:04:09:47:41
X509v3 Authority Key Identifier:
keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:bd:40:6a:02:14:da:33:ce:2d:8f:eb:77:c4:ac:10:e8:
d9:1f:39:59:21:db:02:ae:e8:84:85:20:81:9c:4d:e7:a5:b6:
0c:f7:4a:2f:c7:ea:18:79:14:1f:6f:c2:34:13:a2:25:47:c6:
7a:a2:3c:8e:42:f1:43:15:26:d2:af:04:95:08:18:2a:b0:dd:
2c:03:f8:5e:9c:aa:ea:8e:37:b6:7d:e7:38:6e:d0:23:e6:f1:
d2:88:73:72:2b:dd:49:e5:48:8f:83:01:62:82:2d:92:35:2f:
d0:49:9a:48:3f:79:51:21:47:f8:78:6f:c6:86:e1:7f:c8:f0:
3d:e6:91:d2:63:ec:08:fb:da:81:c1:3a:c5:63:bc:b4:8e:ed:
d4:cd:ef:8c:0b:ff:d1:7e:ab:25:29:47:dd:35:5c:8a:fd:95:
0b:7e:dc:6a:c2:cf:83:e3:74:f1:de:af:d1:af:44:cd:c3:a6:
1e:13:75:0f:51:bf:3e:2a:3f:be:e7:26:da:d5:cf:22:46:fe:
e7:34:ff:f4:57:69:af:10:a6:ca:01:52:e3:5e:0c:d1:0b:d5:
39:ab:9f:e9:28:46:bc:6a:71:5d:c1:9c:d2:8f:44:cf:66:02:
02:c6:cd:22:d1:86:f3:91:bb:bc:2a:0a:ee:25:cb:32:92:ee:
96:67:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:51 2026 by rpki-client