Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
File: wntzN4NAR9_qqYcCUyvow3XdB3o.mft (raw, json)
Hash identifier: O+qTwocNoVRa851Z6gh4riXGoSgM1L8as7lSyyTh/AU=
Subject key identifier: BB:22:CB:2B:F1:38:8F:7B:D0:EC:93:06:78:8D:DC:72:85:CA:93:88
Authority key identifier: C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A
Certificate issuer: /CN=c27b7337834047dfeaa98702532be8c375dd077a
Certificate serial: 01A17FCF6F1C5455D23A85B19888E4C278B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:03 +0000
Manifest this update: Wed 28 Oct 2026 00:01:03 +0000
Manifest next update: Thu 29 Oct 2026 00:01:03 +0000
Files and hashes: 1: aqK2yV13pktyyVa6pRyNZueOCTI.roa (hash: WeiFnY8BGtV7+1lMlp9uKyJPDrkxhq8o+eMa1t7FgGw=)
2: wntzN4NAR9_qqYcCUyvow3XdB3o.crl (hash: wK/xlGi45Juu3u5JGqCFSy1Q0OTzAjtNtWarRerwDPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:6f:1c:54:55:d2:3a:85:b1:98:88:e4:c2:78:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27b7337834047dfeaa98702532be8c375dd077a
Validity
Not Before: Oct 28 00:01:03 2026 GMT
Not After : Oct 29 00:01:03 2026 GMT
Subject: CN=bb22cb2bf1388f7bd0ec9306788ddc7285ca9388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:42:b6:ca:72:17:8a:b8:3a:47:f6:cc:d4:
92:e0:ef:65:48:57:f2:da:71:b7:e2:ed:93:ad:53:
25:5a:01:cf:f2:fe:9a:49:02:45:ab:9d:7a:9c:c4:
d2:08:dc:15:a2:50:87:41:b3:a8:45:6e:36:34:19:
f9:77:b3:0d:61:d3:78:e8:f9:67:74:2f:a3:33:e7:
f4:2c:b2:f2:1e:3b:1c:fe:4a:8f:4b:d2:db:d0:61:
b2:a3:31:c4:24:82:69:b0:80:84:24:17:a9:db:d0:
17:32:6d:8f:26:33:82:59:bb:a3:19:5f:69:ae:6e:
cc:96:c8:b4:9e:d9:77:25:93:28:8f:75:95:d5:1d:
cf:f9:1a:f0:13:8a:86:82:b6:12:1e:cd:8a:1c:af:
f0:59:39:9f:fb:a0:d5:5b:6d:c1:84:d0:6b:f9:a4:
3c:ea:3d:23:07:b2:9e:5d:ff:2f:48:31:7d:e6:a4:
29:70:dd:8d:6e:46:1d:bd:0f:36:23:22:85:bf:b5:
74:2a:23:b1:00:93:bc:a3:0e:7d:91:28:d9:e6:83:
b8:50:3b:c8:80:b5:84:9a:75:f5:28:e4:b9:40:6f:
63:d5:ff:7c:0b:82:3c:e9:b1:97:f1:f2:1e:fb:d0:
c4:ac:94:03:7d:7f:0c:db:13:41:2f:12:99:2c:c2:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:CB:2B:F1:38:8F:7B:D0:EC:93:06:78:8D:DC:72:85:CA:93:88
X509v3 Authority Key Identifier:
keyid:C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:01:64:74:c6:82:16:ee:b9:9a:ae:29:0c:01:9d:80:f0:f9:
51:f8:8f:bc:86:d8:3b:a9:37:dc:86:1b:99:94:0e:a3:76:91:
00:8e:d2:e9:7f:e9:5f:b3:dc:39:bb:74:2a:24:be:da:3d:0b:
7d:3c:d4:c6:d3:a2:4e:4d:92:5f:c8:03:da:6e:76:39:af:f1:
6e:3b:e0:38:31:16:3a:74:ff:c4:a4:ac:41:a1:9a:b3:30:70:
85:63:ca:e7:35:e2:24:34:9d:4a:4c:30:8a:09:14:05:3f:dd:
4f:92:ca:6b:d4:f1:06:f9:65:88:99:8d:b2:c1:9b:cf:b3:38:
4b:46:57:98:7a:53:0c:f0:94:95:1c:1e:24:5b:de:6f:6c:73:
78:9e:c4:3e:de:0a:6b:38:9d:43:7d:bb:16:69:e9:f0:e9:37:
81:7a:ea:63:36:9c:85:36:22:f0:d4:14:f8:31:94:e6:59:a6:
78:21:bb:2f:03:b8:9e:0a:69:3f:b5:2a:51:36:ea:2e:49:34:
4c:2e:5b:a7:8b:ae:e8:e8:b2:c6:97:9e:ae:1b:f8:82:0c:8e:
0b:5b:63:6e:61:9e:90:85:f5:f9:03:8f:20:42:2e:de:55:e0:
48:cd:31:fd:a4:92:73:1b:2c:be:35:79:cf:8a:d1:6f:34:35:
c6:0d:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:41:11 2026 by rpki-client