Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: 1nFAIR25afKDooZRzuc14yvUAYviUHdxgCqh/JIa2Hs=
Subject key identifier: 53:5D:7E:D2:3C:B6:02:CF:E2:8C:08:5C:89:62:3E:44:35:D1:02:11
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 01A173CADA1261AACA480A1B9756F2D7BF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 0A25
Signing time: Sun 25 Oct 2026 16:00:36 +0000
Manifest this update: Sun 25 Oct 2026 16:00:36 +0000
Manifest next update: Mon 26 Oct 2026 16:00:36 +0000
Files and hashes: 1: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: GAy6DQDGXAmV2go2KZaX4N0JKZDbJqAzW+7P85Rrg/0=)
2: pCg_IO1cPrzNc2xa1m7otiwxh4Y.roa (hash: xhDhbtSEarX85N5AGFHu5oduKKvgeHiQNe7PQ5nfYFQ=)
3: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (hash: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:ca:da:12:61:aa:ca:48:0a:1b:97:56:f2:d7:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Oct 25 16:00:36 2026 GMT
Not After : Oct 26 16:00:36 2026 GMT
Subject: CN=535d7ed23cb602cfe28c085c89623e4435d10211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:e7:b3:ed:73:d0:d5:ce:3e:ca:15:b2:89:
63:ee:7e:7e:64:5d:49:93:00:6b:ac:76:37:a9:2e:
3f:ca:71:e0:3d:4b:64:ca:f8:65:36:c4:f3:b3:02:
dd:ab:ad:64:c9:16:ce:fd:2d:45:a7:bc:d1:f5:2e:
7b:fc:36:4d:dc:b8:16:5b:10:ca:08:49:e7:63:03:
ab:3d:85:d6:60:9f:7d:8d:48:31:b7:9b:11:ab:57:
d7:c7:f7:27:12:13:e8:8a:43:dc:fe:fb:8d:c9:a8:
79:4b:38:5b:1a:2e:f5:7b:ab:62:33:19:71:f5:ff:
6d:5b:76:1d:3e:48:9e:9c:98:a9:a3:6d:f7:0d:b1:
fc:1d:d9:f7:1e:e2:39:02:40:11:14:6e:5c:f9:5a:
02:30:00:2e:10:6f:db:55:54:67:a3:08:1b:3c:79:
db:68:c7:16:af:b9:ba:4a:7f:b7:06:b9:83:75:03:
46:18:84:bf:12:fb:0a:0e:2c:66:09:19:5d:01:36:
c3:27:59:93:58:6c:4a:26:e8:4d:0a:d9:56:8f:98:
ab:ee:bd:73:33:66:31:f8:fd:b7:51:55:ed:96:5a:
88:9a:bc:fb:48:d3:5e:08:33:01:62:c6:a8:4d:33:
ab:2e:d8:2f:24:ac:bf:49:b0:f8:7a:37:47:8f:49:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:7E:D2:3C:B6:02:CF:E2:8C:08:5C:89:62:3E:44:35:D1:02:11
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:13:6d:4f:51:12:02:dc:aa:26:d5:ca:2a:ce:6a:7e:34:cc:
29:2a:20:fb:6b:0f:6b:5c:8a:93:36:8a:eb:c4:07:f9:bf:8d:
62:9b:fd:00:d8:33:c5:08:8c:de:65:f6:08:5d:5a:df:e7:48:
2c:41:17:11:05:72:aa:66:3a:56:b6:a3:9c:5b:79:ba:84:c8:
ac:f9:d8:8e:e5:4b:e4:19:9e:2d:4d:c9:3d:18:95:23:c7:de:
5b:c0:c2:af:86:85:19:09:ca:81:05:f8:f5:f9:d8:19:2f:5b:
ed:ed:45:e0:ca:fa:31:9a:a8:58:04:2e:19:98:c1:4b:a6:82:
f5:09:f5:f3:b4:49:51:0b:0f:9e:8f:f3:6e:5f:3a:b9:13:e8:
d8:b6:3b:26:67:ed:69:68:4f:c7:96:bf:17:fd:4f:70:34:d3:
a0:8e:13:92:78:9a:de:59:bc:8c:11:9b:88:d8:f9:3a:a3:a4:
97:15:85:5a:d8:b5:96:d8:c9:35:da:b8:8f:de:21:7b:c0:29:
f9:0f:0b:fa:b8:f0:9e:74:a4:e8:e7:a7:93:16:5f:0e:a3:2a:
ee:e7:4e:f6:37:fb:d1:c9:52:41:18:98:08:81:93:ee:8b:a9:
0a:7c:03:43:4f:11:d6:94:db:f7:7b:1f:32:c6:67:92:ba:a1:
85:f5:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:03:29 2026 by rpki-client