Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: onYpqHojlcwj6l90wk0wu53fd/aI12Z9FkzyyZSXeDk=
Subject key identifier: A5:F9:A8:B4:E2:6E:4A:65:C7:DD:B9:69:5E:31:F1:40:C0:D1:12:47
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 01A1506328202F2AD37B9C71A9B52A27C869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0CD7
Signing time: Sun 18 Oct 2026 19:00:37 +0000
Manifest this update: Sun 18 Oct 2026 19:00:37 +0000
Manifest next update: Mon 19 Oct 2026 19:00:37 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: BECJIDDckn/7QA1ul/u1tkX4Uyv9aGQG6eugASCcoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:63:28:20:2f:2a:d3:7b:9c:71:a9:b5:2a:27:c8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Oct 18 19:00:37 2026 GMT
Not After : Oct 19 19:00:37 2026 GMT
Subject: CN=a5f9a8b4e26e4a65c7ddb9695e31f140c0d11247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:f3:5e:5c:40:3f:4b:bd:64:d6:8e:72:44:
80:80:74:4a:ae:9f:d0:e1:cb:15:6a:ab:94:47:51:
7c:d7:cf:a9:fc:cf:de:fe:5b:34:d1:ad:30:ee:cf:
94:aa:95:93:18:0b:ef:f6:17:7d:56:04:91:ba:c7:
43:94:f0:a4:14:61:44:96:b1:17:54:ad:a0:b5:90:
02:fb:2c:d4:b9:ec:ca:1a:64:58:13:c6:58:5d:89:
6d:95:85:5c:cf:85:e2:25:4a:85:27:4d:69:21:16:
22:f8:7e:02:f1:a0:82:65:4c:cd:c4:df:b1:fd:43:
70:8d:b0:46:4c:7f:dc:bd:fc:b1:32:92:28:f8:2a:
2c:d7:70:e8:5d:41:c3:25:85:e4:8c:39:62:1e:66:
8b:92:97:12:8a:62:f9:08:6c:66:9f:18:a7:48:39:
15:c5:52:08:bd:a5:6c:81:88:9f:e7:4d:ba:28:37:
71:38:45:9a:37:bf:1a:7d:15:82:7a:98:64:96:43:
98:cf:f7:16:ed:75:56:25:72:4d:04:6a:95:f3:43:
01:02:60:63:90:3e:42:42:66:20:01:84:5c:05:d1:
61:0d:37:57:a5:cb:e7:d2:60:85:b7:db:77:a3:8d:
06:f4:42:24:b6:f2:5d:a5:67:3b:b1:93:f5:f9:d3:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:A8:B4:E2:6E:4A:65:C7:DD:B9:69:5E:31:F1:40:C0:D1:12:47
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:02:9c:3e:81:e4:ad:07:59:84:ce:f1:4a:62:65:57:ad:
c5:b6:a4:61:26:8e:3a:8a:09:bd:00:b5:78:e0:f9:22:fa:87:
1f:44:1a:ef:21:cc:72:35:e9:4c:80:a4:e8:09:9e:c4:8e:2a:
eb:7c:b5:98:b0:59:5e:27:a9:25:1d:d6:15:2f:ad:28:c0:ff:
d5:b4:e8:6f:af:6e:2d:5f:cd:37:ff:94:29:9b:97:d6:d3:dd:
9d:6b:cb:70:fe:12:cb:69:fc:bc:74:81:f3:d6:96:47:84:c4:
8e:c2:6c:e3:4e:b8:32:53:4f:17:85:f1:95:0f:bb:d7:6b:16:
02:6f:34:af:af:8c:8c:2c:80:c2:c4:77:82:61:30:9c:bf:34:
1f:3f:78:30:d9:3c:1a:19:4d:07:6b:04:1d:bc:21:69:77:c3:
73:b3:85:24:2c:21:ef:53:f6:be:40:d2:8e:d7:e4:90:ac:b1:
02:88:1c:c6:28:fd:5e:ef:af:02:a3:a8:c5:d1:b3:55:7a:db:
41:aa:f1:67:53:f6:3f:26:a3:f7:b8:84:5b:c4:1a:16:8c:24:
83:b1:f8:2f:cb:5a:59:98:2d:16:1d:e9:c0:be:c7:fb:82:12:
e8:39:4d:c6:fb:f7:fc:c9:92:10:49:7c:65:0a:23:bc:dc:71:
26:1c:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:08:59 2026 by rpki-client