Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: bY+v/8MngCwuO700/8tE1Med2EIOevXSNOx1SLkM8oU=
Subject key identifier: FD:32:66:50:6A:4E:6B:4B:3C:45:AB:AD:11:DF:69:A6:D5:45:59:01
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 01A03A831030CFE55044CF855D9679A67172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0D35
Signing time: Tue 25 Aug 2026 20:01:02 +0000
Manifest this update: Tue 25 Aug 2026 20:01:02 +0000
Manifest next update: Wed 26 Aug 2026 20:01:02 +0000
Files and hashes: 1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: Cfqmxz82/nVDAYYfRKlovkKenbmdpqJFcid7MvEf+qE=)
3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:83:10:30:cf:e5:50:44:cf:85:5d:96:79:a6:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Aug 25 20:01:02 2026 GMT
Not After : Aug 26 20:01:02 2026 GMT
Subject: CN=fd3266506a4e6b4b3c45abad11df69a6d5455901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:d3:b8:88:20:73:fa:e7:2a:96:20:51:49:
22:ca:75:20:4b:37:97:b4:84:18:d1:15:9f:23:37:
fc:bd:a4:11:28:62:bc:2f:30:28:ab:06:f3:36:bb:
a1:8a:54:17:31:f2:58:da:75:f5:79:4a:29:cd:c5:
59:a6:f0:a2:6f:10:f6:0b:04:d9:8a:f7:91:6c:f7:
92:7c:0e:da:95:2f:5e:d3:20:96:aa:47:26:ee:13:
eb:34:3a:97:7b:1f:76:0e:e6:d3:41:39:30:20:83:
d7:e2:d4:db:81:bd:5a:86:c6:cc:bb:40:cc:15:68:
25:82:77:de:b4:08:35:fa:31:f0:d5:33:ea:4d:65:
66:df:c8:f5:ee:13:6d:d3:f6:eb:af:c1:d5:5f:bf:
7d:4f:44:d4:04:47:c6:f6:f1:bd:d3:ed:49:c3:cc:
7b:6c:6e:ae:e8:1c:92:15:73:25:fc:6a:8f:80:cb:
e7:7b:aa:0f:71:41:e7:ef:80:c5:e5:42:bb:5f:ce:
9e:69:99:90:4e:80:37:4b:af:71:13:ee:df:28:0a:
82:73:1a:25:6e:e6:2a:5f:56:0c:cb:51:c3:7b:ef:
a9:c7:a4:51:d9:90:b1:22:26:77:91:65:88:d6:c3:
26:05:a3:01:f7:72:e8:c3:09:fb:4e:ba:eb:f3:ec:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:66:50:6A:4E:6B:4B:3C:45:AB:AD:11:DF:69:A6:D5:45:59:01
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:59:11:53:15:63:47:b4:7d:37:64:89:4d:cd:76:6b:d1:
06:6f:d0:9b:6e:c6:c7:0c:f5:95:1a:8b:49:87:b3:ab:03:09:
c0:10:9f:2b:b7:d7:83:90:65:b5:8d:7b:6e:1a:86:5c:82:9c:
0c:15:b5:42:7e:b6:41:e2:00:ad:67:58:78:55:ab:c8:45:08:
1b:b0:bf:00:eb:b0:43:e6:7c:8b:d4:7a:c9:4a:56:e0:cd:2a:
91:7b:7a:a5:eb:2f:2b:39:97:3a:9d:82:c8:92:45:9a:4a:53:
a7:4b:32:e9:ec:e0:5c:09:32:96:d5:2d:7d:df:67:48:5f:0b:
61:14:14:45:a2:f9:34:ca:d9:0f:cb:0b:77:95:f1:aa:a8:5c:
30:f9:86:e0:e5:70:be:8e:c8:64:b3:83:b2:c3:1e:8a:4e:db:
d4:e0:c2:04:21:9d:61:f3:0f:6e:db:0c:d2:b4:cc:8d:fa:7b:
94:5a:7b:0b:ac:53:5e:f2:9d:32:19:5d:f9:69:c9:9c:f4:62:
a3:d9:38:63:bf:1c:40:ef:22:a4:fb:88:ee:27:bd:1e:b3:1c:
23:37:ac:e1:74:b4:d0:d9:c6:3b:16:3f:56:9d:df:e7:66:8f:
f8:99:eb:30:22:46:06:f8:55:21:af:de:e6:4b:03:63:b7:bc:
d9:40:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:43:11 2026 by rpki-client