Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: HyJOoHT+n2N62psgH8rzS3I7uD7TySBlNdHfPslFiRY=
Subject key identifier: D8:D7:83:62:D1:21:DE:FA:AE:17:41:80:92:E1:99:B8:7E:5B:7E:5A
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 01A1DF14F89F7E3EDAD1AC8CCC4246952573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 16A7
Signing time: Sun 15 Nov 2026 12:00:55 +0000
Manifest this update: Sun 15 Nov 2026 12:00:55 +0000
Manifest next update: Mon 16 Nov 2026 12:00:55 +0000
Files and hashes: 1: c4Qf9cjp1Zuiyk0ZV_2t8e_U7qw.roa (hash: l61lmJGYF+47jzqFgSAHtGTYQ02LLii0JStcef3Q1S8=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: rsk199cMhBwrMrkX8+0UsittXwlsi0qtxGFLYqquaJE=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:14:f8:9f:7e:3e:da:d1:ac:8c:cc:42:46:95:25:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Nov 15 12:00:55 2026 GMT
Not After : Nov 16 12:00:55 2026 GMT
Subject: CN=d8d78362d121defaae17418092e199b87e5b7e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:1a:32:82:5c:35:2f:43:d2:6d:a7:5e:ef:
d9:f1:a8:e2:30:d7:a1:f9:d2:87:24:9b:42:0d:15:
6d:bc:97:d5:4c:0d:d6:ef:8a:66:bb:71:55:c9:69:
44:30:53:62:0e:13:ba:fa:19:9c:a6:0d:21:65:d2:
b1:5d:00:de:fa:e8:2c:84:e8:69:26:f4:36:0d:a7:
5b:59:56:53:6b:a7:28:38:b0:7b:fb:17:84:8a:c9:
f4:f1:84:42:fa:c9:11:69:a5:5e:70:19:63:62:33:
60:36:50:ef:3b:64:5c:b6:2c:43:b9:12:7d:9e:1e:
02:23:57:f3:b7:a9:23:55:c2:df:f9:08:ca:f7:fa:
28:67:8a:62:9f:ec:67:6d:63:00:ba:84:f1:d0:a3:
60:36:82:f8:33:76:4a:51:ed:ea:69:e7:b1:a4:90:
c6:2b:61:3a:04:5b:54:52:ad:92:40:0e:59:d4:4a:
a4:97:35:6c:17:7d:cb:24:53:56:9c:c0:c3:da:f8:
ff:14:49:8b:0a:e1:7c:aa:34:0a:35:e6:16:4c:3a:
e6:d2:01:fb:86:e9:f5:b5:9a:71:e3:89:0e:be:83:
3f:75:ae:60:f6:14:31:9e:95:55:c6:94:7a:42:06:
34:1f:f9:08:d2:57:c6:ec:85:b6:c3:5c:e8:89:50:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D7:83:62:D1:21:DE:FA:AE:17:41:80:92:E1:99:B8:7E:5B:7E:5A
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:e1:60:23:c6:63:de:63:0a:a8:f5:ac:49:96:b2:63:b9:
46:e7:46:1c:7d:6f:93:3b:e0:05:2d:f8:18:4d:02:fd:7f:7d:
9e:03:a0:c9:be:62:92:56:01:1b:3c:fe:02:53:81:e7:1b:e7:
46:cb:7a:33:24:60:af:28:85:e3:9e:9c:45:b2:11:2b:e2:79:
bc:cf:62:1a:61:3a:80:fd:f7:6e:1b:e1:d9:06:bd:f1:d4:9e:
89:8f:07:7a:ee:e3:65:58:cc:fd:54:fd:0f:c6:b9:0c:4d:a8:
42:c4:00:79:ff:29:33:c7:b9:36:54:fa:0e:24:8f:c9:ed:19:
54:fd:40:5b:4d:7a:6a:17:9d:18:8f:42:4a:d4:6a:29:d4:f4:
14:c0:8e:3e:32:d8:df:58:20:47:b2:8a:be:e7:d9:4b:5e:b7:
0d:30:33:7c:33:e1:6c:f0:a5:c3:0a:54:4d:76:6d:13:24:bb:
02:70:cf:98:41:2f:1f:d7:f3:13:db:ec:12:05:bc:d8:f8:13:
aa:71:77:54:fd:97:ea:8f:58:27:3a:0f:06:77:83:a0:f5:74:
9b:c0:7d:1e:4d:2a:40:e2:b4:e2:68:59:09:62:92:40:99:c6:
84:90:08:73:48:ad:bd:aa:c4:05:8e:dc:23:5e:b9:00:b5:f8:
b2:67:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:53:43 2026 by rpki-client