Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier: xwPBgJEfbsUtoMGxtcb0+/0PxgT+S1RlXdmFts6Sso4=
Subject key identifier: 17:CF:45:D7:CA:7B:AA:DB:74:31:4D:9B:96:5B:6D:B4:2B:57:53:B4
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial: 01A17739FAC8DB0DE6212E6D3CD935BDDB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number: 05D0
Signing time: Mon 26 Oct 2026 08:00:50 +0000
Manifest this update: Mon 26 Oct 2026 08:00:50 +0000
Manifest next update: Tue 27 Oct 2026 08:00:50 +0000
Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: OzjrRL7L+1oyy+YiWq3Mmp/d2FcNkKFSYrVc4wO/et8=)
2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:39:fa:c8:db:0d:e6:21:2e:6d:3c:d9:35:bd:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Validity
Not Before: Oct 26 08:00:50 2026 GMT
Not After : Oct 27 08:00:50 2026 GMT
Subject: CN=17cf45d7ca7baadb74314d9b965b6db42b5753b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:9f:cf:23:88:ac:59:22:cd:ab:09:59:c1:
32:dc:97:d5:01:ff:f8:34:7b:70:dd:81:75:9e:bf:
c9:b2:ce:e2:95:79:45:42:82:fc:2c:8c:95:d3:ab:
d6:a2:76:70:d5:39:d2:2f:9e:f2:af:00:6d:2f:ff:
88:87:8c:8a:a5:ff:66:4b:4a:90:61:95:51:c9:3e:
82:4c:bf:4f:3b:ee:8f:9e:6b:5a:13:f9:09:40:ae:
84:14:56:3d:f7:5b:cd:b4:60:6f:ec:62:32:e9:6b:
48:d6:7f:d3:b3:15:45:76:dc:55:1e:d4:5d:50:0d:
9e:08:27:da:89:70:9d:a6:0a:21:ef:b1:5c:48:4a:
11:b8:1a:22:28:c1:4c:61:4d:99:25:5c:0a:9c:b9:
ab:fa:93:4b:0a:7f:ca:51:20:ea:0c:9b:7e:82:a3:
ae:34:a4:96:7f:51:0a:35:65:60:cc:51:43:6f:17:
7f:19:59:f9:5f:eb:22:64:1b:95:0a:fa:c0:77:d7:
1a:ac:b7:d8:98:61:5d:51:e6:76:98:5c:b5:bd:b6:
2e:85:a7:03:c1:7b:4f:e8:4d:cc:48:6c:d7:15:09:
fb:de:fb:f6:b1:70:58:61:91:f0:ed:89:33:b4:29:
72:3d:34:55:c3:cd:b5:de:02:ac:11:67:0b:89:41:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:45:D7:CA:7B:AA:DB:74:31:4D:9B:96:5B:6D:B4:2B:57:53:B4
X509v3 Authority Key Identifier:
keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:c0:88:4d:fc:e2:a6:e2:ee:0b:d8:53:81:ba:b8:1e:08:
7a:50:77:2d:e7:9c:01:80:9b:59:01:8f:00:9e:5e:74:14:4d:
31:2f:93:f3:51:14:86:57:a4:f9:86:91:47:5f:33:95:d6:f7:
f5:12:29:d9:9f:4f:cd:ab:a9:3f:8a:8f:45:40:20:2e:20:68:
23:77:33:81:36:d9:9d:a3:74:e5:c7:41:d2:a1:89:14:a1:ba:
99:9b:c0:b5:ba:23:d1:ed:ad:52:a7:e5:e1:4c:b2:da:2c:45:
97:0e:70:a6:81:16:b0:c7:2d:ae:e0:5f:f9:0b:51:f0:2b:e2:
20:ca:66:8a:2b:23:f1:d1:f2:fd:65:88:e7:ad:95:de:7d:64:
8a:54:43:0b:ea:7e:46:3a:95:66:72:92:aa:6d:3e:46:65:70:
52:e6:0f:38:df:61:b0:1d:42:b2:f4:81:47:96:ec:8c:10:b7:
83:13:4c:a7:d7:72:28:c0:5b:03:f5:a2:ee:8e:86:93:56:86:
50:ac:44:0d:af:5f:f2:39:d1:ca:dd:56:a9:ea:a5:6e:29:ba:
31:1c:7e:4a:81:04:f9:d2:ef:05:2b:61:b5:0b:e4:c3:68:c6:
22:20:44:4a:36:ce:97:e4:22:b1:38:20:f8:2a:20:a9:10:71:
ad:cb:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:47:18 2026 by rpki-client