Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: Gd6WzGkhXnLZYQRwF496vkNz4/+WiclntNSnQ8e9MGg=
Subject key identifier: E7:D1:1F:96:96:6C:EA:B5:BE:59:F7:C9:D1:40:DF:97:28:69:AE:5C
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 01A040F287EE4E68576D530D3023A5F996E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 0A10
Signing time: Thu 27 Aug 2026 02:00:31 +0000
Manifest this update: Thu 27 Aug 2026 02:00:31 +0000
Manifest next update: Fri 28 Aug 2026 02:00:31 +0000
Files and hashes: 1: JlmnFaROi5T304MtHTA71UjxRy0.roa (hash: WacUNUJcf2dZiJ0rjzTFqXu+Ypi8vybjU4bLACTaUYw=)
2: chRqXv4l8jU9phwlrQ8CaAOFK_Y.roa (hash: uN3QCljvhH/hI1ryljX3s/pkHZPxweJQBqNIl5lLmBQ=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: PgO4ahIJSYwenZaq5PKGZOM0PGe05WKjRMrncUhQotM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:87:ee:4e:68:57:6d:53:0d:30:23:a5:f9:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Aug 27 02:00:31 2026 GMT
Not After : Aug 28 02:00:31 2026 GMT
Subject: CN=e7d11f96966ceab5be59f7c9d140df972869ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:ba:03:50:0c:50:24:3a:6a:49:95:66:2b:
55:fb:b5:68:c5:75:c4:6b:24:88:1b:ba:19:fb:e0:
83:92:87:a9:27:a7:99:83:da:33:38:76:80:b7:14:
4e:ff:fc:5f:f2:56:4e:58:33:37:56:71:ee:9b:07:
8e:ad:1e:4b:e5:55:73:bf:1a:ce:3c:99:71:4d:80:
72:c7:3e:6f:91:10:2f:f2:83:84:e7:0f:c7:e4:96:
43:09:76:38:98:b6:26:ae:79:4d:ee:bc:74:d6:57:
06:b3:e0:1e:27:20:61:85:86:cb:ea:de:80:62:67:
8b:9c:b9:7d:96:e3:bc:7b:57:56:ed:98:cb:b2:48:
c4:f1:b0:d8:95:36:99:05:9a:e5:4f:fd:f4:41:4e:
74:26:d5:7e:2f:74:43:de:09:f9:62:c9:bc:fc:f9:
7a:c2:e3:ac:d9:a0:52:a9:76:61:31:e4:ef:af:ad:
b8:4b:1d:cf:23:17:e1:11:49:5e:2f:b6:00:cc:e3:
10:55:8b:2c:83:ce:1f:0e:73:cd:ef:84:78:16:6f:
24:d4:c7:8a:73:0d:b3:44:75:05:67:12:74:e5:ea:
77:d4:c8:cb:c9:fe:8c:85:8b:70:93:34:06:bf:11:
2c:8a:46:fe:c0:14:b3:26:c3:34:b0:dd:24:f0:66:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:1F:96:96:6C:EA:B5:BE:59:F7:C9:D1:40:DF:97:28:69:AE:5C
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:de:6e:92:5e:18:e7:dc:b1:69:1f:da:9b:44:4c:6a:92:
12:89:0d:5a:ea:cc:38:69:a7:ce:39:13:7a:48:1d:49:40:e6:
74:92:af:67:e9:1f:94:2f:a9:eb:b8:54:cb:b6:5b:98:42:71:
17:a2:11:2e:e1:04:42:44:3a:56:b9:b5:1d:71:53:09:6b:eb:
5c:56:36:69:3d:63:57:74:e4:2c:36:3b:34:29:b1:37:f4:92:
d6:8b:23:25:cf:c2:29:ad:ee:a4:09:83:a4:f0:d3:76:b9:d1:
74:c0:5c:0c:fe:38:1c:a0:7a:d4:f0:af:bc:e1:35:d3:7a:d0:
d3:c8:cd:1f:8f:38:62:da:cf:4a:1b:fe:d3:10:ea:0d:79:8d:
96:22:9c:ae:a8:c2:03:fc:ae:74:9f:ea:59:3d:3c:ef:e8:bc:
aa:7c:ef:a2:7a:74:00:e1:a2:48:8f:ec:f1:22:95:f3:34:0f:
47:58:83:6c:66:59:a3:2f:f2:1e:bb:e1:64:ca:a4:0f:0e:e5:
6b:e4:8b:96:6d:ce:26:04:37:57:49:59:9d:16:31:0e:df:3e:
ff:67:41:14:06:c9:e6:94:59:14:93:69:04:e2:7a:6f:59:74:
96:ac:be:a1:e9:5b:5e:a4:b9:b9:f2:c7:5c:62:bc:ef:90:0a:
3c:4b:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:45:07 2026 by rpki-client