Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: YsUm3flA9fcGbBy2fjEUkYckfQ81PkTPb4vU3/osVMw=
Subject key identifier: A2:31:FA:00:92:AE:7D:63:55:55:7E:B3:97:2D:69:EA:04:73:61:06
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 01A151763D9D662DE34BB484A85BFC641569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 1AAE
Signing time: Mon 19 Oct 2026 00:01:05 +0000
Manifest this update: Mon 19 Oct 2026 00:01:05 +0000
Manifest next update: Tue 20 Oct 2026 00:01:05 +0000
Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: xnuEe82ErEGQMElAKGyhgNREcThNJbLYnYak2GKm73c=)
2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:3d:9d:66:2d:e3:4b:b4:84:a8:5b:fc:64:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Oct 19 00:01:05 2026 GMT
Not After : Oct 20 00:01:05 2026 GMT
Subject: CN=a231fa0092ae7d6355557eb3972d69ea04736106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:b0:3e:d8:d9:d4:ea:5a:7b:ab:19:a5:c6:
cb:1a:2f:f0:79:c8:eb:78:15:3a:a6:a5:ae:50:5d:
1c:98:bf:1e:4b:18:df:ce:cb:6f:1f:74:4b:fe:8b:
4e:0e:9e:99:a1:e7:81:7b:b8:b4:bf:67:73:36:4b:
21:b7:a4:3c:91:8b:0c:ea:fe:c9:48:d8:91:2b:65:
0b:a2:7b:10:8d:c5:39:51:36:06:fd:b7:78:67:66:
9c:6d:89:4a:eb:b3:a8:2d:cb:87:9f:ce:c0:a8:e7:
73:55:36:24:92:43:ea:0d:26:e5:0d:11:78:a8:d2:
e2:63:ac:69:bb:6a:ba:da:f4:36:90:c4:01:bc:10:
db:eb:ca:b6:8b:5a:e0:32:b6:fc:93:a5:d5:a2:c2:
61:3f:8c:29:a9:35:db:80:1e:0f:5f:29:f5:c6:99:
e5:9e:46:9f:6a:3a:46:8c:1f:c8:b1:51:ce:8d:54:
6a:22:2a:84:5f:57:8c:3c:f2:14:90:96:3b:22:8e:
7f:62:f8:d3:2f:10:f1:4d:76:4f:d1:fa:aa:38:8a:
2f:29:fc:31:8a:8a:3a:5a:53:ac:cc:a6:cf:fb:f8:
08:ec:4e:2a:92:2a:39:7c:0b:c4:01:45:69:c2:d8:
f9:ed:21:41:ec:90:df:94:5d:e3:27:22:31:e3:6d:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:FA:00:92:AE:7D:63:55:55:7E:B3:97:2D:69:EA:04:73:61:06
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:47:e5:d7:d0:a4:03:0d:20:20:1c:a1:a7:10:2c:b5:47:b4:
6e:9f:40:df:92:ce:79:cc:3d:49:3d:c0:07:9c:54:55:ea:d0:
4b:9d:9f:8d:cc:13:a3:c9:4a:c6:e2:5a:09:41:8b:34:ae:52:
19:13:ea:6c:ea:d6:15:28:40:dd:f8:34:0f:20:b8:6d:d2:98:
a3:32:c0:2c:a2:f5:65:3d:7d:ab:1b:8a:a6:59:24:db:79:b5:
dd:e8:99:d3:ec:70:d3:bf:46:5b:69:43:59:4f:94:70:15:c3:
46:06:67:17:e1:c9:4d:ee:ba:1c:b7:49:1e:d0:9e:b3:60:3e:
1d:f0:cc:0d:48:48:53:77:18:60:26:17:06:e3:18:d2:21:1a:
58:ca:44:5f:39:ac:4b:38:d7:6c:7f:03:bc:5a:dc:8e:2d:f5:
50:39:cf:6a:15:1f:a2:3f:dd:c4:61:64:41:95:89:a7:20:dd:
c1:fa:46:a6:5c:cc:62:94:7c:60:28:3b:3a:63:e1:18:60:17:
c1:f0:2e:c0:88:fd:ce:08:df:87:77:bb:c4:d5:3b:fc:08:23:
8d:2b:1c:e2:4b:f2:a3:0b:e6:11:bf:2f:27:f3:a4:9f:4e:fd:
81:30:5a:dd:23:2c:b4:3b:a1:36:1b:22:96:80:bf:d6:a6:f2:
9f:93:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:25 2026 by rpki-client