Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: ggRJDip6X/I6N1sAhwnHz+AvQKVmaLlkzupembaOqB4=
Subject key identifier: D9:09:7D:8D:FC:21:C0:45:13:75:DD:72:9B:E3:3A:79:DA:47:30:FF
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01A180AB4F394F46C80CBA11D8BB686C1465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1ACD
Signing time: Wed 28 Oct 2026 04:01:12 +0000
Manifest this update: Wed 28 Oct 2026 04:01:12 +0000
Manifest next update: Thu 29 Oct 2026 04:01:12 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: nEpAHt0ttHxYSCbYMqO1QHMHOVWpyhCF4Wyf85qm6q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:4f:39:4f:46:c8:0c:ba:11:d8:bb:68:6c:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Oct 28 04:01:12 2026 GMT
Not After : Oct 29 04:01:12 2026 GMT
Subject: CN=d9097d8dfc21c0451375dd729be33a79da4730ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:62:8a:30:30:d3:85:c5:93:ce:5a:d1:cc:
15:56:c9:5d:69:d1:65:d7:a7:1d:a4:02:32:12:df:
43:39:3f:31:5e:3c:90:8e:6f:b3:74:31:35:ca:c0:
3f:12:63:18:eb:05:fb:5c:d5:67:f2:72:42:89:33:
9f:c4:51:7e:3f:e9:13:33:40:b1:d0:23:f5:a0:b1:
13:52:42:b7:ce:41:58:52:1c:0a:b0:6d:af:bf:03:
cf:1b:45:9d:c9:00:66:d5:a9:94:a6:32:8f:4c:19:
61:40:50:e7:2d:6a:21:68:fa:1e:ab:28:90:39:77:
fe:d7:53:c0:7d:d5:f4:bc:8b:ec:4e:13:9f:5d:77:
29:27:3c:04:99:9d:dc:67:a7:a7:72:9d:e0:b8:82:
2d:f0:90:ba:39:62:71:e3:0d:f2:76:2f:4f:95:0e:
a8:45:25:c1:13:1b:e1:b4:74:61:1c:c7:17:b0:7c:
ff:ef:56:91:db:3b:62:a9:36:a4:41:c0:74:e1:fc:
46:a9:3e:63:03:bd:cc:7a:dd:9d:e5:b0:56:44:d4:
b6:7c:83:94:29:97:62:27:46:b0:85:7b:49:a6:69:
4b:c1:94:6b:f8:f0:2f:d0:a1:a9:ed:b1:ed:9a:bf:
ee:82:da:1c:3e:3f:bf:4b:c6:4f:b9:32:af:55:4e:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:7D:8D:FC:21:C0:45:13:75:DD:72:9B:E3:3A:79:DA:47:30:FF
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5b:5b:bd:66:11:a2:85:29:19:a9:d4:d0:ee:83:1b:8f:4f:
a7:9b:41:d7:6c:69:ef:21:67:fe:13:4a:c1:44:06:29:5f:c8:
ba:b7:39:5c:66:1c:13:d9:86:d8:f8:a4:4b:2c:0b:07:6b:e9:
21:5f:8f:74:79:c3:ea:30:ae:b8:01:d4:47:00:f6:c0:23:97:
c4:8f:87:3e:7a:a0:d9:5f:d3:7b:17:a8:d8:cf:c8:1d:3b:0c:
c1:34:d2:ee:45:9d:5c:62:a2:ad:32:35:4d:fe:92:ef:44:20:
3a:9e:cd:61:55:bf:71:dc:14:df:89:9f:9f:0e:db:03:0b:df:
2d:b0:65:8d:5f:f4:fe:5e:09:d2:e5:d4:9b:a7:07:52:68:49:
ab:f5:2f:35:d6:85:6f:74:db:47:3b:44:ce:40:65:14:0d:a6:
9d:8e:a9:97:47:ce:30:77:c1:79:98:1b:86:14:88:fc:ce:af:
fa:a3:cd:82:47:ea:45:17:9a:53:69:14:77:fd:43:70:cc:ec:
52:6a:b7:dd:cd:7f:e8:05:98:d5:31:62:97:c5:e1:7f:b5:51:
13:01:b6:53:8f:a3:70:f6:2e:76:97:98:fa:cc:cb:55:b8:84:
02:95:89:36:e8:5b:c9:77:ad:4f:73:de:85:fb:d4:c0:40:99:
e1:61:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:20 2026 by rpki-client