Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: OhKP6IxA3LTOfxT3f6ZB5nYuhn5MIjknT5by0AQ142s=
Subject key identifier: 3C:D3:AD:3F:96:C3:21:0E:34:13:56:1D:81:AA:C7:08:6F:90:D8:72
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 01A16156CA0E147998A8103F47C426096792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 0934
Signing time: Thu 22 Oct 2026 02:00:39 +0000
Manifest this update: Thu 22 Oct 2026 02:00:39 +0000
Manifest next update: Fri 23 Oct 2026 02:00:39 +0000
Files and hashes: 1: V7dSFe54YguWMOBd5igSa3CG0jM.roa (hash: rMSDIp9OV5dVl6Akl8E0YEDyEMw4raUR7F/H+734+DI=)
2: pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa (hash: sH0uhgJw4LrCTAOetXBWIMlVqm3VIDbyxnZ0hMsIubE=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: a0bz6evgxouCZXShAlxsFTqdY45WN0hSl+sItae0+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:56:ca:0e:14:79:98:a8:10:3f:47:c4:26:09:67:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Oct 22 02:00:39 2026 GMT
Not After : Oct 23 02:00:39 2026 GMT
Subject: CN=3cd3ad3f96c3210e3413561d81aac7086f90d872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:33:2b:ab:02:1d:d7:71:09:4f:eb:5e:bd:
5a:68:7e:a3:4c:bc:3e:eb:61:a9:b8:4f:15:86:fb:
dc:26:5d:a0:aa:3a:77:04:9f:1d:c6:5a:dc:d0:5b:
81:3a:91:55:c8:ba:4a:c4:fd:b8:35:c9:9d:7d:83:
ab:34:c3:9b:8e:ec:ea:ff:37:39:0d:d9:6b:ac:6b:
4d:d6:78:52:6b:88:07:06:e3:c7:f8:34:0d:59:e9:
b4:df:0f:39:f8:2a:92:6e:c4:42:a1:8c:c0:ad:69:
c1:6c:0a:3f:eb:07:d0:ff:dc:3d:5f:b5:0f:22:9a:
b7:19:24:6e:95:3a:0d:da:80:9a:e9:d0:e4:a7:32:
a2:76:1a:ec:fe:9b:d1:27:05:b5:ba:94:e8:9e:03:
36:96:d6:8f:9f:84:71:f3:a1:71:e4:b9:59:f3:ec:
e6:73:8b:8d:94:59:2d:29:a2:40:95:19:b3:3c:dd:
3b:8e:d3:73:2b:9b:47:81:8d:c4:73:4b:37:01:ae:
fe:ec:1c:22:4f:eb:c4:3f:46:4f:6e:51:b0:25:8d:
28:8a:64:7f:27:76:66:e7:50:3f:6b:f8:c3:8b:70:
32:7e:ef:10:c3:f9:92:e2:ab:bb:f4:2a:25:e0:8e:
42:66:48:59:3e:b2:c9:6f:6b:cd:c7:b7:92:53:73:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D3:AD:3F:96:C3:21:0E:34:13:56:1D:81:AA:C7:08:6F:90:D8:72
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c6:0b:a2:fe:9a:6e:c0:5b:3d:67:ec:27:f8:b9:dc:4e:dd:
20:d1:5c:26:86:d4:8c:73:6b:7c:7f:7c:2a:75:90:69:b9:ed:
4c:40:a3:5a:6b:ce:30:85:98:bd:6c:50:23:15:78:91:64:66:
bc:ae:55:1b:f6:9e:05:6a:95:db:3b:20:ea:45:3a:25:05:6f:
8c:82:5e:b3:aa:09:6e:8e:1e:0b:ca:30:32:14:c5:09:91:87:
66:2e:5b:ea:d1:66:25:cc:a3:f1:0f:99:25:cf:3f:97:cf:d2:
6c:1f:03:9d:ca:31:ac:b6:b6:69:bc:94:4c:43:b6:8b:de:49:
fa:e0:05:b1:74:79:cd:a2:1c:bc:13:df:9e:8a:39:4e:f2:fe:
85:98:54:e4:5f:fa:c8:f3:d1:63:7a:6f:8b:6c:c3:ad:ec:80:
90:67:d3:b1:e1:a1:46:51:70:46:94:94:bf:7c:e3:d5:e9:dd:
a7:90:c0:0f:a6:ad:db:0d:9a:0c:00:8b:8d:f0:7a:3a:e3:d5:
89:1e:34:50:00:1d:e5:e2:8d:23:4e:62:fb:d9:4a:8a:85:84:
60:25:7a:d5:55:46:39:cb:2b:17:6d:63:d2:5c:ed:40:65:c6:
24:05:88:6a:a3:63:23:d8:66:b7:ef:f5:b0:27:98:9c:79:93:
2d:a2:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:53:54 2026 by rpki-client