Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
File: wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft (raw, json)
Hash identifier: gbh9q9+YN5MAmccEyhFsQh4OSmmk/X8IaW2P6h6+drA=
Subject key identifier: 97:84:4F:E6:4E:87:99:57:B2:D3:93:EC:5C:BD:EA:CA:1C:AA:35:AC
Authority key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Certificate issuer: /CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Certificate serial: 01A17A04714DACC2AD2F38E96765010C22C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:01:13 +0000
Manifest this update: Mon 26 Oct 2026 21:01:13 +0000
Manifest next update: Tue 27 Oct 2026 21:01:13 +0000
Files and hashes: 1: n-LkYEYl_BKToTd94568MGgE5jc.roa (hash: dbNcQZB+XqGNZ6CWLvpvwNF67hivn9OZiLltxklIlbE=)
2: wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl (hash: UYWVX1vqCsHbDdO7lU2o7qNOHI4qLbA5DZ8Ci5RGG5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:71:4d:ac:c2:ad:2f:38:e9:67:65:01:0c:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Validity
Not Before: Oct 26 21:01:13 2026 GMT
Not After : Oct 27 21:01:13 2026 GMT
Subject: CN=97844fe64e879957b2d393ec5cbdeaca1caa35ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:d0:66:15:39:a3:e6:29:78:b2:dc:64:72:
8e:86:a3:90:a6:bc:a8:25:1a:45:f4:ee:fe:85:b0:
4f:83:be:38:ef:4a:9c:6b:46:d6:1d:eb:6c:ac:54:
99:2f:88:62:a3:8b:86:ff:9e:e1:2e:dc:f8:00:d8:
3f:51:8a:77:d7:10:f9:f0:cc:f8:8d:2f:0b:8a:03:
ab:b3:77:c3:ef:80:1c:d6:0c:1e:31:cf:14:f8:b8:
6c:84:96:4c:ec:cc:51:63:c1:81:3a:41:83:bb:e9:
6e:3d:ea:13:b0:5e:86:54:c8:d2:05:1b:67:9e:cd:
09:8a:2c:f9:2a:c3:cc:df:9e:f8:43:5b:29:5b:e7:
f6:1f:4d:61:f3:14:43:3c:a9:ab:50:6b:a9:30:7a:
02:cf:0a:c8:b7:03:6e:ef:fc:45:50:e4:9f:a3:e7:
ad:ff:a3:45:94:be:eb:82:d0:e9:88:3f:26:66:c0:
ee:52:0c:c4:65:a0:45:1e:dd:d0:2b:8f:e9:9c:36:
3d:ea:60:15:49:a2:38:be:a4:08:4e:a6:e4:71:df:
73:6f:4f:22:d3:88:7a:a9:6e:3d:3c:4e:db:ab:dd:
72:92:38:5e:25:02:33:9c:fc:28:d6:78:33:a2:95:
1f:89:e4:51:e9:ef:94:dd:69:61:b5:4f:75:ca:19:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:4F:E6:4E:87:99:57:B2:D3:93:EC:5C:BD:EA:CA:1C:AA:35:AC
X509v3 Authority Key Identifier:
keyid:C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:05:c3:53:82:4d:e3:df:8f:0c:2f:dc:cb:9d:3f:f7:6e:5f:
e5:f4:c9:64:37:70:95:5f:fa:9c:14:a3:9a:68:fa:cc:3c:83:
ae:54:1b:1a:3e:25:ee:9d:a0:0c:15:6b:a5:75:42:f9:ae:2d:
5a:75:bb:7d:38:24:a5:70:87:53:aa:4f:54:6e:b1:92:64:46:
03:0c:d5:1e:59:93:4f:7d:e5:59:da:a0:19:57:89:43:ae:7f:
3f:87:2c:d3:61:fb:af:13:46:ed:a3:36:96:52:2c:93:34:ce:
56:b5:e0:ec:28:d5:99:52:0c:25:a9:bf:5c:67:c2:bc:fa:b2:
ac:f0:2f:67:9c:7a:2d:4f:d3:cf:22:58:f5:15:3e:c1:5a:31:
ec:84:80:81:43:51:4c:10:71:a0:57:dc:d0:9f:18:3f:81:a6:
94:0b:78:f8:84:c1:e9:0e:c2:82:6c:59:f9:0e:37:fe:c5:3b:
1c:17:08:89:24:cf:c8:ec:12:ec:fb:93:29:10:84:db:b0:65:
30:46:b8:3e:4b:00:c5:76:0f:01:8f:db:50:b2:b7:41:e2:a9:
60:b9:10:82:37:6a:c0:93:35:9a:ce:c9:5c:ae:18:ed:9d:b9:
ac:09:d9:01:f4:83:d9:82:5c:2e:d5:e4:68:34:3d:43:52:3f:
6c:33:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:46:43 2026 by rpki-client