Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: nUWqMpHahK7SEYyAZU2ZEaIJKBgjGQu3dwfolKcjHjA=
Subject key identifier: 25:02:4F:67:DB:5E:DC:C9:5C:84:8E:F7:F8:BF:6E:89:C3:1A:B7:68
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01A1829972742EC1FA5CA9DCB07CD5213809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 13:00:56 +0000
Manifest this update: Wed 28 Oct 2026 13:00:56 +0000
Manifest next update: Thu 29 Oct 2026 13:00:56 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: EUCBWbGq42nyvD/mdPhs7cJFSu59ZB3wBYATkP3TcsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:72:74:2e:c1:fa:5c:a9:dc:b0:7c:d5:21:38:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Oct 28 13:00:56 2026 GMT
Not After : Oct 29 13:00:56 2026 GMT
Subject: CN=25024f67db5edcc95c848ef7f8bf6e89c31ab768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:3c:84:c7:79:a2:60:02:97:9f:15:93:23:
5e:2f:e6:98:08:2a:05:ba:aa:25:bf:28:82:4a:a3:
9d:e2:01:54:be:b1:64:4b:e4:c3:69:de:a8:25:99:
bd:4a:33:39:b3:c2:80:88:c7:8a:c8:28:49:8c:d0:
26:07:53:b2:a1:f3:46:07:ef:6c:99:8a:6e:a5:3d:
d1:e2:33:9f:b0:72:78:9d:de:6b:d5:40:52:3b:1e:
d9:b7:f5:ee:e3:94:0a:d8:02:fd:a0:e6:6f:65:5b:
84:f9:74:f8:a3:d8:46:10:fe:4b:94:71:b4:35:b3:
9f:c5:9f:21:1a:40:1b:3c:99:3c:77:96:b2:4d:71:
1a:09:d5:81:b1:69:88:7d:72:73:83:8e:28:fd:68:
58:2f:8b:66:57:b4:2e:74:56:06:8d:97:2b:dd:ea:
b5:dd:dc:57:be:ee:ec:e2:84:49:f0:ab:41:fe:ad:
f4:00:15:31:64:b2:3b:46:a5:ac:17:99:ff:99:a0:
1e:a6:cd:bc:fc:01:b8:6b:84:f8:61:ba:46:eb:99:
6d:91:fe:ae:17:ba:4c:eb:94:7d:95:f0:b1:17:82:
81:e2:7b:45:6e:7d:cc:1f:77:c4:b7:47:2f:2e:a8:
9d:2d:4a:6a:c7:b1:07:ea:ec:71:e1:01:fd:8e:ce:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:4F:67:DB:5E:DC:C9:5C:84:8E:F7:F8:BF:6E:89:C3:1A:B7:68
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:92:91:d8:fc:59:99:aa:68:cc:09:cb:ee:0a:a5:52:22:
d8:76:b3:8e:fb:57:9d:36:f3:84:a5:16:6c:b2:98:52:8d:7f:
d8:78:76:c2:34:b7:72:e8:3c:c9:f4:73:14:b6:ce:43:01:11:
4c:19:a5:db:4c:84:8e:56:e2:67:d1:14:5c:e5:3e:fc:91:fa:
eb:80:47:10:ec:cc:57:d8:52:bb:88:89:81:86:3e:28:9e:60:
40:61:19:c7:b0:ca:49:ec:a5:c5:0a:46:4b:34:8d:ca:e5:eb:
ff:33:ec:49:35:62:2c:53:e7:d6:55:f0:81:17:c7:ff:01:20:
8f:0a:d6:5b:f2:f3:3b:31:ce:10:a6:2c:a5:95:2b:b1:02:93:
7a:f6:ea:6d:a3:88:86:b8:af:5a:5c:09:99:99:b4:ef:21:c8:
8d:cb:b9:bf:d3:82:a8:38:62:0b:7e:20:6e:b2:c5:a3:63:87:
9d:84:fb:60:d5:6d:6c:5e:f4:9b:82:df:6a:da:84:ae:1d:0a:
e3:47:15:15:06:b7:10:46:dc:06:56:db:61:1b:12:97:b9:72:
b5:17:c5:b5:05:56:b5:ed:ba:4e:01:67:61:f5:4a:bf:bc:f1:
74:19:de:e8:2e:be:95:e5:56:86:70:23:e8:a5:87:69:a3:f5:
8d:9e:d6:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmXJ0LsH6XKncsHzVITgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjYxMDI4MTMwMDU2WhcNMjYxMDI5MTMwMDU2WjAzMTEwLwYDVQQD
EygyNTAyNGY2N2RiNWVkY2M5NWM4NDhlZjdmOGJmNmU4OWMzMWFiNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS08hMd5omACl58VkyNeL+aYCCoF
uqolvyiCSqOd4gFUvrFkS+TDad6oJZm9SjM5s8KAiMeKyChJjNAmB1OyofNGB+9s
mYpupT3R4jOfsHJ4nd5r1UBSOx7Zt/Xu45QK2AL9oOZvZVuE+XT4o9hGEP5LlHG0
NbOfxZ8hGkAbPJk8d5ayTXEaCdWBsWmIfXJzg44o/WhYL4tmV7QudFYGjZcr3eq1
3dxXvu7s4oRJ8KtB/q30ABUxZLI7RqWsF5n/maAeps28/AG4a4T4YbpG65ltkf6u
F7pM65R9lfCxF4KB4ntFbn3MH3fEt0cvLqidLUpqx7EH6uxx4QH9js4vIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUCT2fbXtzJXISO9/i/bonDGrdoMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1CSkdj8
WZmqaMwJy+4KpVIi2HazjvtXnTbzhKUWbLKYUo1/2Hh2wjS3cug8yfRzFLbOQwER
TBml20yEjlbiZ9EUXOU+/JH664BHEOzMV9hSu4iJgYY+KJ5gQGEZx7DKSeylxQpG
SzSNyuXr/zPsSTViLFPn1lXwgRfH/wEgjwrWW/LzOzHOEKYspZUrsQKTevbqbaOI
hrivWlwJmZm07yHIjcu5v9OCqDhiC34gbrLFo2OHnYT7YNVtbF70m4LfatqErh0K
40cVFQa3EEbcBlbbYRsSl7lytRfFtQVWte26TgFnYfVKv7zxdBne6C6+leVWhnAj
6KWHaaP1jZ7W7Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:51:04 2026 by rpki-client