Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: fSdHouQqdDscgkCRiorxw/tgX8n1lrWqH+ySJCyIMKc=
Subject key identifier: 6D:9A:A5:80:5F:88:8B:73:9E:13:F2:F5:89:4D:A4:B8:91:73:55:51
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 01A17A041243B365C13178FE378CAE51F2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 21:00:49 +0000
Manifest this update: Mon 26 Oct 2026 21:00:49 +0000
Manifest next update: Tue 27 Oct 2026 21:00:49 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: UDv6NWxHcuOvE8YUsQw9BHuJRTBiRCdaDMLrK5hWS50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:12:43:b3:65:c1:31:78:fe:37:8c:ae:51:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Oct 26 21:00:49 2026 GMT
Not After : Oct 27 21:00:49 2026 GMT
Subject: CN=6d9aa5805f888b739e13f2f5894da4b891735551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:7d:fe:bf:f2:bd:6e:07:2c:bf:48:aa:ec:
01:d6:df:08:8e:ed:d8:b0:9f:f3:de:64:5c:ef:8a:
9f:6a:a8:1f:33:cc:d9:d9:96:9f:8e:cd:ce:a3:71:
a1:f4:b7:7d:c8:77:65:05:13:ca:68:2f:0b:1c:b8:
8f:12:46:76:37:49:ec:fb:b2:8f:52:07:e4:41:88:
89:98:da:29:21:56:a5:90:31:24:26:27:ff:ee:98:
9d:12:1b:c5:97:79:31:88:a6:da:d5:c6:e8:1d:da:
44:d0:2b:ec:0e:78:c2:bf:15:95:84:43:13:40:c3:
9c:df:3e:64:3c:a6:57:43:03:e6:f5:bc:13:94:5f:
ce:37:8d:fd:82:51:3c:b8:92:9c:c0:b5:92:d3:41:
c7:6c:b8:2a:88:92:ce:71:eb:c9:f9:e8:be:6d:57:
27:f0:c3:83:69:ff:2c:54:95:8e:74:16:6b:fb:80:
1a:83:28:eb:ab:1c:7c:bf:7b:5e:f9:22:86:67:ac:
a2:1c:bd:a3:86:55:42:d9:82:53:eb:ae:da:d4:20:
c5:f6:a4:06:4e:6c:7b:ad:7d:98:80:8a:8b:61:71:
ec:87:7e:6a:84:db:8f:9c:e4:50:4f:6a:28:51:82:
cc:cd:57:2e:9a:fa:50:66:c6:c4:8c:23:99:c7:c9:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:A5:80:5F:88:8B:73:9E:13:F2:F5:89:4D:A4:B8:91:73:55:51
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4f:08:0d:48:9d:45:4c:28:d8:e2:f8:ad:26:b8:99:cc:9a:
92:da:db:b6:a6:17:c0:ab:b2:8b:53:1c:6b:45:41:87:a2:67:
ba:82:42:9f:f6:3c:ae:e7:82:65:1c:70:8f:a4:d0:28:fb:ed:
d8:8d:83:6f:68:30:26:aa:c9:47:a6:64:a1:f7:ff:71:7d:65:
f8:18:07:61:20:52:39:e8:c1:7b:6e:f1:b7:a0:1a:00:88:f9:
12:5c:b7:16:0b:07:7e:d9:7a:b6:c1:93:67:45:07:18:9c:b6:
e6:d0:f3:03:65:25:6f:a3:83:db:d4:e6:9e:c4:f5:ef:1f:5e:
e1:82:17:8f:80:b3:8f:ab:3d:8f:ac:41:0e:ee:e7:f1:b9:1d:
06:71:34:6e:32:7f:b6:8a:c3:47:f1:82:37:b6:50:c8:48:51:
a8:b0:fd:7b:89:d6:44:10:08:11:83:36:1e:05:53:33:43:6f:
57:e5:da:ee:33:b1:ed:b8:3c:57:cc:96:cd:e7:3c:7f:9d:3d:
94:31:66:e7:09:fb:be:e8:49:bf:81:67:57:d6:2b:3a:fa:67:
1c:0b:1b:55:ff:a3:e2:11:13:e6:d8:65:50:64:b4:c9:3b:2b:
1c:54:a3:61:27:9e:12:ed:ae:d8:0b:79:95:97:18:b6:5d:a5:
f6:1d:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:12:47 2026 by rpki-client