Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: VfR41eVvpYs3y2Tbb7o8Yh9pp+KxOCP9RFMpdgl/A6I=
Subject key identifier: 1C:73:0A:AB:DE:3A:AD:2E:18:18:BD:49:84:BF:20:7D:3E:DD:2B:55
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 01A1841A81FD15A769AD302F73F74489A481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 08AC
Signing time: Wed 28 Oct 2026 20:01:31 +0000
Manifest this update: Wed 28 Oct 2026 20:01:31 +0000
Manifest next update: Thu 29 Oct 2026 20:01:31 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: cxE8qs4vccYe8wKbaxsgJJsQOHreHElKxu9i4MEnATM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:81:fd:15:a7:69:ad:30:2f:73:f7:44:89:a4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Oct 28 20:01:31 2026 GMT
Not After : Oct 29 20:01:31 2026 GMT
Subject: CN=1c730aabde3aad2e1818bd4984bf207d3edd2b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:c2:15:12:84:4b:0b:3c:4f:af:c8:d1:f8:
16:57:60:07:c8:87:f3:d3:82:d7:59:b4:c2:78:fa:
91:cb:9d:e4:c8:53:c4:20:e5:7f:d5:c1:21:52:02:
37:81:cf:db:3d:9a:dd:aa:ef:5c:4a:4d:e6:e0:5c:
f4:28:37:73:69:1d:31:bb:e6:e7:36:02:32:e8:7e:
d0:2f:55:8a:40:9b:b0:55:84:85:97:b6:01:7c:4b:
d3:7c:29:15:59:d7:13:72:c7:d9:eb:12:24:40:f8:
6f:33:72:46:17:03:68:f6:c5:1d:01:13:d1:18:b0:
da:ae:fb:db:a6:12:d8:be:42:fc:73:15:5e:b5:49:
6b:f4:83:41:8b:29:38:1c:c7:2d:2c:f0:7b:21:e0:
f3:b2:c8:95:4c:0a:7f:22:90:cf:66:c7:5a:55:db:
66:08:6e:35:89:19:58:4f:9d:5b:78:2e:96:03:0b:
d4:6f:d2:a9:ae:50:1d:08:31:76:fb:55:fc:b1:76:
64:00:da:d8:8a:61:f5:95:35:8e:59:7a:c8:61:97:
7f:b5:4f:cb:c9:ad:f8:37:37:48:69:28:6f:46:22:
4f:9b:4a:c4:ee:f2:55:82:80:fe:b5:e3:9f:ed:c7:
10:4c:a1:46:d0:5f:51:61:66:00:5b:49:b0:dd:bd:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:0A:AB:DE:3A:AD:2E:18:18:BD:49:84:BF:20:7D:3E:DD:2B:55
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:47:24:54:a4:82:5c:43:ac:7f:5a:77:c6:ce:da:07:5b:f6:
9d:24:c8:62:d2:a1:5d:71:6f:0d:e6:b3:d0:df:01:c6:67:7e:
b4:62:28:bf:e6:d8:8d:81:c7:4a:a2:61:b8:8b:19:b3:b8:29:
c6:57:d3:73:42:37:07:c0:6c:44:bf:ce:03:ff:2b:d9:c3:16:
fa:15:fc:fe:6e:32:35:32:fa:9c:e3:2a:d2:66:49:47:e3:cd:
52:7c:ba:bb:49:5f:45:32:78:f0:21:77:3e:74:12:63:7c:e1:
49:bd:41:96:75:e7:c5:c0:bb:83:bd:2f:cf:0f:dd:29:f2:12:
46:15:4c:f3:0b:fe:42:86:63:bb:0e:97:00:46:a9:5f:00:27:
ed:94:c7:75:f4:c3:59:13:de:71:59:c0:be:7c:42:df:8b:84:
f2:9f:1d:c9:06:df:f1:b0:57:58:99:73:1e:59:97:bc:d3:13:
ae:d4:8d:e5:e6:b3:c5:da:eb:5e:54:cc:b5:e2:2a:85:6e:69:
e5:a5:4c:bb:fb:25:01:c5:13:da:0a:05:6b:5b:b1:30:71:23:
a6:5a:f2:29:cb:93:7c:24:c6:65:a1:2b:82:7e:24:28:49:aa:
d9:ed:58:5d:85:a1:72:97:49:7a:f6:94:81:e1:b7:ae:80:b3:
2e:40:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:13:02 2026 by rpki-client