Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: ifJDP9I/vg7lxzx0WUwI6Y6XNoqG1sNmsxXZfFpU/Eo=
Subject key identifier: DC:EA:E2:91:E6:66:B2:06:5B:B5:50:67:38:74:19:72:B2:F3:E2:95
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 01A181BE9F99555799B9CBAA3022BB616988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 18F9
Signing time: Wed 28 Oct 2026 09:01:55 +0000
Manifest this update: Wed 28 Oct 2026 09:01:55 +0000
Manifest next update: Thu 29 Oct 2026 09:01:55 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: Ji2PNKXiyxyFZlouTJda7O/EhBgcsBqZoFC+lcvnBXA=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:9f:99:55:57:99:b9:cb:aa:30:22:bb:61:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Oct 28 09:01:55 2026 GMT
Not After : Oct 29 09:01:55 2026 GMT
Subject: CN=dceae291e666b2065bb5506738741972b2f3e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:ee:52:66:45:ee:5c:2a:71:c7:e7:18:1e:
98:a7:6e:16:df:5c:62:b8:f1:49:9a:cc:77:7a:ba:
7d:65:ea:e1:94:3d:59:34:a1:d5:74:a3:23:23:fd:
69:6c:8b:6e:65:a1:7c:e4:f7:13:cc:2c:0b:79:3b:
a4:23:19:a7:5f:77:0d:96:4a:9f:35:3f:75:05:fc:
42:3b:f6:6b:e6:47:db:ad:4d:42:75:81:d9:a3:b7:
6b:23:92:25:d5:51:ae:82:34:3e:7d:25:7e:f5:65:
bd:87:fb:e5:12:12:4c:a4:20:46:27:e3:27:d1:e2:
e0:43:73:68:08:d7:8d:00:39:37:16:f6:e2:aa:f8:
a2:1e:35:35:b0:1f:c0:f8:ae:f4:dc:de:88:ef:63:
64:20:2c:f9:b1:a4:d6:7d:cb:c0:05:d4:88:61:e2:
3f:0b:0a:04:c7:53:6e:19:14:9a:b2:19:81:74:9e:
8f:9c:0d:76:a1:64:e4:ed:46:e3:6c:0d:28:ee:d8:
4a:bd:1d:35:1b:fb:98:ac:d1:97:0b:d1:94:a8:a3:
8a:5a:e6:68:03:d9:e1:67:b1:e1:50:88:59:33:45:
67:75:5d:bd:99:1f:ed:f7:a4:b1:ed:b8:86:93:a1:
0f:c6:fc:7d:fa:9c:c2:7b:6e:1e:28:4b:b3:ee:87:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:E2:91:E6:66:B2:06:5B:B5:50:67:38:74:19:72:B2:F3:E2:95
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:25:21:60:f4:25:54:e5:b4:2a:93:50:01:2f:9c:67:33:0a:
7f:b5:41:75:9a:f0:74:62:80:29:06:5d:4d:22:73:57:d3:1f:
4a:4e:66:12:4c:13:de:28:69:37:9d:6f:3e:c7:fd:74:e0:73:
43:9f:59:7a:f6:62:9e:1d:78:49:a9:f9:8c:76:11:55:f6:ba:
79:27:7d:b0:4e:f6:00:88:af:dc:bb:64:ea:26:ef:dd:41:41:
20:7e:f6:7b:94:5c:84:e7:c3:73:51:53:f2:53:cf:64:fc:a5:
24:7e:b5:72:6a:3e:05:12:94:8e:1c:b5:cb:ab:33:0d:d7:82:
8a:1d:27:a4:72:6a:9f:c8:7d:18:0d:b3:0b:46:92:5f:fe:b7:
6e:15:fb:a9:bc:d8:fe:32:bd:e3:7e:98:0b:42:51:ff:ac:03:
66:7e:ee:70:80:aa:59:4c:89:25:56:d4:cd:f4:92:68:d8:cd:
36:79:9e:b7:9a:a6:d5:d9:6f:03:d2:2c:be:5a:03:e5:81:5a:
e3:15:9b:1c:5a:22:54:4b:01:ca:c6:93:c5:b3:46:9e:56:b1:
7d:86:3d:59:be:ed:02:55:d2:8e:17:dd:b5:00:64:aa:60:d0:
a9:80:bc:20:68:d6:a7:ca:ad:8d:2b:62:b4:c9:86:0f:44:ae:
2b:ea:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:34 2026 by rpki-client