Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: uD5fGLNCgf5uCRXnCscImIalwqRPFRGYmrsGUXz5PAg=
Subject key identifier: 4F:7B:CA:62:6A:82:47:66:22:F6:CC:48:25:D9:53:B3:F7:FF:8A:75
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 01A181504EBEF64677DDDEC19B45FDB55375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1644
Signing time: Wed 28 Oct 2026 07:01:26 +0000
Manifest this update: Wed 28 Oct 2026 07:01:26 +0000
Manifest next update: Thu 29 Oct 2026 07:01:26 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: WYemXLXV3MxsSE6f/wNo3xKYPmIB4TN4w9or7g4mcAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:4e:be:f6:46:77:dd:de:c1:9b:45:fd:b5:53:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Oct 28 07:01:26 2026 GMT
Not After : Oct 29 07:01:26 2026 GMT
Subject: CN=4f7bca626a82476622f6cc4825d953b3f7ff8a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:df:ae:a5:5a:ab:41:3c:30:57:62:1d:b2:
da:4b:90:7a:03:2f:02:28:b9:a1:70:37:4f:ef:23:
8a:2a:f3:aa:40:ac:6f:54:e0:e8:9d:ea:98:3e:ea:
9e:fc:14:1d:95:f9:21:0b:41:87:51:e5:7e:f1:62:
ff:da:74:87:74:45:e5:76:ad:68:d7:58:0a:2f:91:
96:fd:b7:4f:4f:72:de:2c:7c:a9:6a:07:60:79:0d:
36:d5:f8:80:90:7c:87:c2:f8:00:43:1f:c1:83:79:
e2:d0:8e:4f:f8:fa:e0:79:e9:a2:0d:ca:d9:f1:9d:
5f:40:15:79:de:77:36:ca:be:29:97:b5:21:a6:cc:
6e:c5:47:95:74:16:93:93:b8:a8:98:59:07:4f:5b:
45:3b:3f:0c:19:cf:93:aa:e8:97:b7:a3:16:fa:75:
e8:de:75:7d:b7:db:05:c5:44:fa:07:bc:c9:7e:74:
4b:e5:93:67:bd:bd:09:a1:1a:27:b5:1b:5e:a9:f8:
ad:df:b8:6f:59:fc:53:ef:27:9e:6a:73:f6:a8:e4:
67:ce:38:3c:a4:52:e5:d6:c2:59:b7:42:f0:02:01:
50:99:d7:ad:8a:31:1a:65:53:03:a8:9f:1d:c0:ba:
bc:d4:fd:46:c8:63:8b:b4:0a:b0:4a:26:c0:b7:3c:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:CA:62:6A:82:47:66:22:F6:CC:48:25:D9:53:B3:F7:FF:8A:75
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:70:ad:08:65:3c:e8:d5:8b:4f:bf:01:9f:10:06:f8:fc:5a:
ba:a5:83:1c:8e:46:67:b1:da:a4:8d:1b:e1:2c:6c:df:ba:30:
ec:f8:9e:23:ca:3a:09:ce:33:6c:8e:06:52:09:84:8a:ee:ba:
d2:7e:28:d6:64:0f:b1:7f:e2:18:fc:1a:34:ac:25:ee:c7:0e:
f4:1a:4e:8d:39:cd:af:12:7f:a4:34:96:57:3d:ac:dd:07:02:
2f:b7:59:80:10:b2:79:fd:79:52:2b:a4:b9:54:87:ef:01:db:
47:0f:3e:e6:f0:99:23:bc:ab:81:c1:0a:f7:66:2e:4c:88:3d:
8c:4f:53:43:e2:d2:a5:e3:c9:c0:18:54:87:f1:f4:9d:65:81:
28:44:7c:e7:87:a3:3d:f4:06:f5:40:13:9e:91:c2:81:b4:90:
f9:b4:13:5c:86:ab:12:48:0f:62:5a:9c:6c:74:cb:a6:d5:29:
87:da:a4:c7:56:e0:c8:94:1e:7c:de:8d:5c:10:7a:d9:84:3b:
7b:f9:18:8d:5e:da:45:ef:b5:d4:fc:fa:24:a0:9d:2b:ae:f0:
bb:6f:30:65:a6:d0:1e:31:a0:cf:99:da:ec:95:9d:e5:22:4d:
bf:4c:f8:50:78:c7:67:7a:7b:dd:b8:a4:bb:64:4e:25:96:9b:
9e:8c:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:49 2026 by rpki-client