
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File: wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier: 4MRJC3yo3ccNWOGh7TWUCNfj/O5iZVJCS36TmefsWHs=
Subject key identifier: 33:6E:1E:69:D3:BC:0D:E7:66:54:B3:14:42:33:48:64:E7:65:E7:5F
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 01A11B6300A2418C15007948F7620216506F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 12:00:35 +0000
Manifest this update: Thu 08 Oct 2026 12:00:35 +0000
Manifest next update: Fri 09 Oct 2026 12:00:35 +0000
Files and hashes: 1: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (hash: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY=)
2: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (hash: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=)
3: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (hash: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=)
4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: uGbm7sHopgscY5CiZ9kHsoo48hTrjE6AMs9vpbAjOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:00:a2:41:8c:15:00:79:48:f7:62:02:16:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Oct 8 12:00:35 2026 GMT
Not After : Oct 9 12:00:35 2026 GMT
Subject: CN=336e1e69d3bc0de76654b31442334864e765e75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:c3:83:07:d6:3b:4b:f1:4e:86:a8:3f:9b:
c3:42:96:b1:70:e5:be:66:06:e2:8b:46:7c:6f:d0:
34:e5:49:6e:45:f0:6b:96:32:9b:15:87:b1:44:ca:
07:b1:8a:4f:37:c0:ee:2f:89:70:b0:7f:9a:ed:0d:
b7:27:a4:66:dd:a8:04:e3:37:b6:06:03:aa:9d:fe:
67:b4:98:7e:a3:08:3d:1f:5b:3d:ce:6f:55:a0:2a:
c1:b6:1b:10:bb:c7:35:11:65:d3:32:8c:78:d5:04:
52:d0:3f:c0:b2:42:da:32:fd:d0:49:49:70:21:1e:
1a:39:48:70:ee:04:f9:01:2e:a2:fe:32:f3:8d:3d:
78:47:33:b6:21:a3:68:8c:eb:39:d8:07:e5:18:b8:
ee:27:15:d1:a8:6e:bd:3a:cc:56:e8:3a:18:9d:39:
34:0a:c5:c7:c2:b4:03:b8:f3:6e:f2:f6:c1:26:40:
86:06:ad:94:73:7d:75:78:52:7b:99:aa:6f:59:25:
4a:5c:47:1b:14:63:34:21:0a:dc:39:08:e5:db:81:
d7:e0:49:c2:66:05:c2:ce:e2:0d:95:bd:8b:f3:13:
5f:e1:64:0e:79:fc:52:39:f5:84:ae:d0:54:c5:7b:
ba:06:70:00:75:c5:3e:fe:f8:bf:af:1c:17:84:0e:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:1E:69:D3:BC:0D:E7:66:54:B3:14:42:33:48:64:E7:65:E7:5F
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7e:6a:3e:4f:ab:88:88:aa:18:74:6e:67:be:84:35:f5:e3:
32:71:55:65:2c:65:d2:34:dd:dd:d4:4e:01:18:6c:14:0f:09:
9a:d6:fe:7b:2e:c6:02:13:c9:a0:f7:0f:89:45:39:15:30:77:
db:c8:d1:c9:b8:05:5e:49:a8:37:f3:66:c2:43:c0:da:8d:6a:
8f:34:b8:fb:ed:22:5e:95:1b:3d:49:06:6a:7d:fc:1b:b5:55:
83:96:af:4d:67:d0:49:bd:77:77:15:89:4b:f2:27:1a:f0:6b:
7c:61:d7:73:49:e3:31:19:fe:8d:90:a4:b8:f1:36:34:3e:85:
9f:48:98:08:2a:fe:91:d2:89:f3:f6:90:00:36:c2:ec:bf:13:
1f:ff:b1:a0:8d:9c:45:0c:c0:9e:fd:3e:e1:5b:3a:0d:b8:a8:
7d:3e:ac:37:e1:73:ad:7e:d5:36:9e:9c:3e:e8:36:75:6b:85:
d3:3e:be:98:de:08:0a:03:d0:e0:ba:71:ad:ac:9b:65:76:6a:
f1:fd:80:b8:cf:dc:99:10:88:48:45:00:8f:ad:f4:9e:2f:51:
27:ed:a1:ec:36:76:75:a9:67:8f:f5:97:77:26:11:a1:c7:ed:
3c:77:bd:2b:c3:60:0c:fd:14:98:af:59:48:b3:1d:f2:46:da:
2a:f4:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:53 2026 by rpki-client