
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: hhNKN6x8hiN7+p2SWGo3kp/bVSWslU10M91SCjib+Kk=
Subject key identifier: DB:F8:99:E6:A3:01:3F:60:19:FE:30:15:09:55:22:36:4C:AA:DE:D7
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 01A0E475A4191AB56B7CB0E5A622D2DAD5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 17EC
Signing time: Sun 27 Sep 2026 20:01:49 +0000
Manifest this update: Sun 27 Sep 2026 20:01:49 +0000
Manifest next update: Mon 28 Sep 2026 20:01:49 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: Ki4jsIP9jCLxAhE1/xvC6x/IK/KLTZHiLmb53savPS0=)
2: zE1sOss2Cg32j0X0LNQt0cDGXbo.asa (hash: HavmcuBg0wPxS/tbiRtJOzpEY6kAVYKIWL2lIcI0BrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:a4:19:1a:b5:6b:7c:b0:e5:a6:22:d2:da:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Sep 27 20:01:49 2026 GMT
Not After : Sep 28 20:01:49 2026 GMT
Subject: CN=dbf899e6a3013f6019fe3015095522364caaded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:ed:4d:3a:74:31:a9:af:0c:37:2f:84:c3:
b5:c4:05:eb:44:fd:6d:69:c7:d8:b2:7f:c8:1f:c9:
28:75:8b:fe:85:d3:a6:44:a8:ef:b5:1e:ce:78:e4:
7f:cd:b7:85:20:54:45:f8:e1:7b:45:af:ec:c0:74:
9d:14:70:7c:52:c5:de:2d:50:6d:1c:16:d2:62:31:
a7:c1:69:1d:a7:cb:d8:ee:25:40:68:7f:3f:7b:89:
0f:1c:ed:16:7d:f0:86:17:1c:a8:21:24:66:35:bf:
fd:39:e6:32:84:c2:b4:96:d8:71:25:6e:f4:77:37:
6a:ed:fe:88:76:37:46:09:4a:70:21:a6:61:8e:eb:
f3:20:81:f0:b6:35:ea:a6:65:0a:77:1e:f2:b5:2a:
c8:92:70:0b:16:81:17:44:e5:2f:55:c7:6e:de:1c:
31:70:03:3c:8d:d6:b9:d0:06:ac:cb:6b:02:c3:3c:
51:63:4d:1a:24:3e:f3:2b:08:5d:c1:85:ca:fd:75:
59:aa:e4:33:27:5d:59:1d:0a:ec:b5:f4:98:0b:9a:
12:24:78:08:5a:3c:82:f3:75:47:b5:15:42:9f:ce:
c3:f7:7d:8c:ae:43:9e:75:83:30:3b:86:3a:d5:2c:
11:f2:9e:35:5b:be:f3:ee:4c:10:a4:2d:18:9a:6c:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F8:99:E6:A3:01:3F:60:19:FE:30:15:09:55:22:36:4C:AA:DE:D7
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:ef:16:43:f3:54:a5:cf:fb:c6:1a:8a:c4:6c:31:31:8b:
16:86:3b:a7:a8:89:6d:28:47:3f:1b:72:00:ce:6b:67:93:da:
2b:65:2d:72:b3:fd:0f:54:76:44:a0:e4:fe:61:48:85:c1:28:
fa:83:27:38:24:0f:8f:0c:4e:74:33:f3:8b:04:9f:3a:cb:71:
48:9d:37:78:55:b5:c2:f1:ce:8f:32:70:34:72:c8:9d:8a:43:
64:d9:ac:3b:38:6d:a6:fb:7b:1c:e5:09:9e:1b:62:09:b7:a7:
56:00:aa:49:e5:aa:2f:83:3c:2d:7c:27:2a:28:f6:34:5f:78:
81:eb:81:ea:ca:98:0d:8f:eb:35:2e:88:0e:65:c8:6f:05:f2:
98:1b:be:e8:2d:96:53:26:5b:50:3c:aa:ae:cb:9b:65:f8:e6:
ee:76:c3:ab:6a:dd:89:11:18:d1:d9:dd:bd:e9:66:59:ac:be:
fc:0d:5a:2e:ce:a1:e2:73:06:30:5a:b0:00:b2:53:fb:5c:e5:
2f:fd:6b:40:29:60:51:1a:39:76:e7:89:f9:e1:66:6f:72:3c:
57:0c:5d:f6:b1:f2:c7:e2:fa:ae:17:ed:42:1d:94:72:83:4c:
65:37:c6:7c:c7:d6:e4:72:fd:36:15:de:bc:4d:12:0f:c9:18:
45:b6:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:50:10 2026 by rpki-client