
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: fBJGoZPuoB0X7r0yblqqPI7ZCuzIZU6JwTSMxFXwH8Y=
Subject key identifier: 2D:C1:7F:6C:68:C6:F3:25:3A:D3:86:8C:44:94:CB:15:52:7C:90:7F
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 01A1724AFDFD40BA4FEA675B809496FC74F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 09:01:19 +0000
Manifest this update: Sun 25 Oct 2026 09:01:19 +0000
Manifest next update: Mon 26 Oct 2026 09:01:19 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: RTQHZuM137gxoaks+vdrYDnd4oAJF5MSD22kzddNc1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:fd:fd:40:ba:4f:ea:67:5b:80:94:96:fc:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Oct 25 09:01:19 2026 GMT
Not After : Oct 26 09:01:19 2026 GMT
Subject: CN=2dc17f6c68c6f3253ad3868c4494cb15527c907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:47:5d:1a:d4:bd:58:3e:dd:38:fa:a9:43:
e5:f6:e1:32:91:30:ab:7a:ee:4b:df:36:58:f4:f0:
f6:bd:ba:c5:cb:ef:3b:2a:96:cb:13:31:66:1a:3a:
1d:36:49:9c:c9:72:c7:5b:60:dc:72:9e:05:48:09:
ae:2e:3a:30:f2:13:b4:d9:8c:59:43:d1:8c:fb:d3:
5d:96:e3:89:14:8d:9e:53:27:b7:49:59:0b:6e:c8:
cf:62:04:b9:5b:4e:5f:42:cd:4b:36:ae:1a:9f:d1:
61:ba:93:18:8e:a9:e4:b6:ff:bf:75:b9:ac:8b:cf:
40:6c:4b:89:2e:89:19:26:dd:be:85:ae:bb:1c:3e:
58:a2:74:81:17:67:4f:ab:d9:8f:aa:85:67:e1:1d:
ce:40:ee:9d:69:94:e5:b9:06:f0:f2:10:15:04:40:
07:48:cd:c4:38:d6:c0:db:b8:4a:ce:f5:65:99:9d:
26:e1:41:dd:2e:f8:bb:a1:1f:7b:26:d5:2d:97:94:
00:28:cd:d7:88:dd:bb:03:60:90:09:f5:8a:98:83:
f0:b6:1d:e3:89:a7:cb:52:bb:09:cc:01:cb:d3:8b:
e9:9c:ad:b8:0b:c2:b4:7c:56:d9:d4:9a:21:c4:ae:
6a:bb:03:3f:02:e7:3f:d2:2b:a2:eb:0c:6d:b1:dc:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:7F:6C:68:C6:F3:25:3A:D3:86:8C:44:94:CB:15:52:7C:90:7F
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:5d:b3:90:c6:66:21:7d:56:2c:d8:6a:dc:76:0b:8f:97:04:
af:6c:72:83:33:10:e4:61:f3:b4:86:02:17:ff:85:1d:4f:2b:
6e:30:3a:fc:6f:88:2e:ea:85:0c:ac:2e:c2:73:36:47:79:72:
b9:1c:23:31:b7:07:49:14:98:d5:55:bb:20:74:05:31:90:cc:
52:08:e8:35:38:9a:a9:4f:5b:54:2a:f6:05:46:74:52:89:a4:
0f:b1:9e:e1:2a:78:5e:09:86:1c:db:ca:56:aa:e8:ec:65:06:
27:d9:dd:09:2d:a9:59:ea:d9:2b:5c:f5:7d:5c:62:9a:2a:0e:
0d:d5:2f:24:1b:9e:e3:4e:67:43:af:d8:54:08:f3:cb:f6:dd:
e3:d1:d8:09:e8:44:86:29:f0:2e:5e:bd:eb:22:98:bc:62:51:
78:71:2d:f2:36:4c:70:d3:76:e3:c7:74:ff:a4:cc:6b:cc:c2:
0b:f3:cd:7c:9e:29:c3:d0:ac:08:44:14:dd:13:88:a6:2b:b4:
ed:bd:55:f0:db:f3:72:8d:63:03:c6:e9:8e:8d:d6:de:c2:bc:
f2:d4:5b:6f:41:76:b6:69:83:65:30:47:dd:f9:dd:05:84:38:
39:2c:99:38:56:83:2f:4a:61:49:4c:3a:c5:d4:2c:c3:73:83:
16:1e:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:22 2026 by rpki-client