Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: ArBY5/ziGwvn0wBA/exsX7F8cNbfLDIaneXKYqNn75c=
Subject key identifier: 2A:CC:1A:1E:BA:D3:73:4B:B7:A3:F5:1E:2E:A1:C2:A2:BB:CE:45:30
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 01A187F691EB14CAA42F3B1255E161CF232C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 1135
Signing time: Thu 29 Oct 2026 14:00:45 +0000
Manifest this update: Thu 29 Oct 2026 14:00:45 +0000
Manifest next update: Fri 30 Oct 2026 14:00:45 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: SOK4MHAgHFzcrjQblUtotsDEcKvONwW32K5NS76A9XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:91:eb:14:ca:a4:2f:3b:12:55:e1:61:cf:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Oct 29 14:00:45 2026 GMT
Not After : Oct 30 14:00:45 2026 GMT
Subject: CN=2acc1a1ebad3734bb7a3f51e2ea1c2a2bbce4530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:df:a6:e1:d6:57:e7:17:05:3a:4e:88:bf:
35:91:f2:1c:d0:35:fa:ac:83:fe:c6:77:76:b6:cb:
44:3c:8d:9c:e0:e2:f0:f0:2a:58:0f:a8:3e:f7:aa:
ab:bb:6a:19:b8:58:03:f9:ee:46:c6:42:6e:b2:00:
71:f6:56:7a:75:aa:c9:50:2e:4c:60:3b:b2:f0:c4:
be:24:2b:af:53:ac:15:73:0a:ca:94:aa:33:6c:6c:
ff:d9:0e:11:05:64:07:ab:1b:54:7d:71:e3:48:9c:
6c:4e:c6:c5:1e:9e:be:34:68:73:48:34:8c:3c:df:
8c:b1:01:4b:2b:46:cc:c0:f0:02:5b:29:ff:fa:bc:
e4:8a:17:b0:76:98:38:9f:e5:cd:c8:8c:b3:a4:c0:
c6:e9:ab:85:85:bd:9f:2d:e5:44:c6:5a:44:86:7c:
db:df:3b:c4:d2:36:d4:74:ec:dd:02:08:6e:36:1c:
67:33:91:4d:2e:59:30:c3:e8:85:f8:60:15:4f:71:
3b:c7:74:aa:2f:06:fb:ff:e7:04:98:50:b5:ea:2c:
47:5b:6c:a3:a6:1b:64:97:91:ca:98:5e:a8:e1:99:
7f:34:16:91:8d:71:50:21:ae:bc:ca:a1:5c:52:b4:
7a:72:d7:93:7e:88:5d:74:d3:08:bc:93:a0:46:5c:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:1A:1E:BA:D3:73:4B:B7:A3:F5:1E:2E:A1:C2:A2:BB:CE:45:30
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9c:e8:ae:93:b6:45:ac:80:ff:30:b2:5e:25:eb:07:4a:cf:
72:a6:58:5f:dc:56:e0:70:94:ae:f7:dc:a0:90:e2:df:66:59:
99:88:ac:47:6f:d0:89:39:86:c2:76:8a:6d:33:c9:47:59:54:
95:07:59:d4:7f:8e:e8:34:13:b5:3e:98:c3:22:5f:0f:9b:08:
6a:a4:1f:d7:f6:c2:79:9a:7a:14:72:66:cf:99:a3:dc:23:fb:
f3:74:29:a3:43:01:af:20:b3:3b:d4:e6:f4:05:8d:4c:ec:f7:
a2:f6:79:41:fb:ab:da:57:73:59:63:16:be:62:55:07:68:40:
95:32:36:70:41:0a:1a:b7:ab:2e:aa:86:3b:37:b3:f7:c1:24:
07:f9:86:4e:f6:0e:f2:99:fb:e3:f1:f4:46:a1:e9:27:48:b0:
01:d8:53:76:4d:56:6b:6e:25:54:c8:4c:2f:02:ae:08:3a:f2:
4f:9d:c0:e5:18:b2:15:e0:8f:4c:0b:12:0d:f4:9b:d3:ee:5f:
50:cd:d5:c4:44:1f:4b:48:69:4f:91:a1:48:a5:e2:90:60:3a:
0d:83:37:7a:b8:00:ca:63:4d:92:55:7d:9e:32:31:2e:75:9e:
04:44:e3:ab:b6:2e:d2:58:15:a9:b7:27:15:e7:21:eb:a0:4b:
bc:6b:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:10:58 2026 by rpki-client