Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: xhKh+86XCf4NJSWKHrgqlXE6X+tY6t23+yVuRP77ZMo=
Subject key identifier: 2E:6D:21:90:FD:3D:F8:C7:F9:45:D0:22:CB:B7:DF:0A:58:48:A0:00
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 01A17C28BBFD483C6B936BE7B7FF74DB4FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1AD4
Signing time: Tue 27 Oct 2026 07:00:06 +0000
Manifest this update: Tue 27 Oct 2026 07:00:06 +0000
Manifest next update: Wed 28 Oct 2026 07:00:06 +0000
Files and hashes: 1: VIJwQfnhHs3GHlmC403kclYI19k.roa (hash: pBGpIGY8oZecekT32agQOuUVvcZzYj8n135ZMBKxfjM=)
2: v0t-x1ezAOQzRGxbJKUbHeC0HN4.roa (hash: NklbdNXJrdH3kXOcwc9Kb/YETkdY+vXKTqyupumOkFo=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: AvbslzlqFfhDOy0OYlXsMXL9HtL5rovDp9SMJURpyF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:bb:fd:48:3c:6b:93:6b:e7:b7:ff:74:db:4f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Oct 27 07:00:06 2026 GMT
Not After : Oct 28 07:00:06 2026 GMT
Subject: CN=2e6d2190fd3df8c7f945d022cbb7df0a5848a000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:28:15:21:fa:a8:5d:e2:da:be:c4:90:22:
6c:ee:b1:39:e3:af:c3:d1:95:b1:26:40:cc:35:26:
ed:6e:54:12:bf:b2:d7:d4:de:4c:d8:9d:5b:30:2c:
f9:5f:2f:0f:4c:ba:ca:b1:74:b7:e0:c2:51:0b:a7:
32:bf:2a:3e:c1:cc:de:46:6f:6c:c4:18:72:4e:52:
f0:28:8b:60:90:57:27:a0:bf:ba:b3:53:e3:c0:96:
08:49:70:80:8a:85:d1:6b:1b:27:e7:6c:01:ca:ac:
9e:de:0a:7e:c0:0d:e9:87:85:55:f8:21:37:d6:57:
e8:47:75:7a:f3:d2:39:1c:14:0a:e4:18:ab:28:bb:
96:f0:eb:14:96:16:8d:b2:6b:56:9c:dc:88:7f:34:
b5:09:09:1b:24:8c:1e:48:a8:a2:1c:5a:45:99:db:
62:a2:47:b0:d7:d8:ed:81:73:d0:47:93:a4:e4:b1:
41:ce:db:6d:cb:5f:39:d2:be:cb:26:dd:b4:8b:ed:
da:ec:6b:d2:4d:83:bb:62:59:1a:f4:a8:14:2c:89:
ac:71:9c:2e:1e:24:7a:08:86:12:8c:9b:1b:77:2b:
84:7a:c7:84:af:5d:fe:fa:4e:86:43:63:5e:b5:bb:
7b:b6:2e:55:6e:72:0e:3c:bf:7e:45:31:35:a3:f2:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:21:90:FD:3D:F8:C7:F9:45:D0:22:CB:B7:DF:0A:58:48:A0:00
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:4a:c3:f6:dc:07:d7:87:02:32:a9:25:17:61:20:d1:b1:
41:59:11:75:da:ea:30:31:39:47:dc:1d:e6:e7:3b:bb:cf:3e:
6e:be:dd:3c:25:d8:68:58:fd:21:b7:22:92:01:42:3c:39:b9:
71:95:9d:dc:bb:c7:43:62:07:0a:24:d7:3c:fa:85:43:89:0c:
5e:87:d5:83:05:08:3d:71:65:d8:d8:6a:f6:ce:3d:c9:5a:ec:
0e:66:83:44:70:48:9a:f9:44:6d:78:a6:76:d9:7a:99:f8:14:
ae:02:7d:6d:eb:ac:82:f9:60:ec:73:ce:7d:d6:46:88:c5:e1:
60:7d:d1:63:b7:73:a8:eb:71:82:b2:4c:47:a9:d2:11:0f:64:
4b:d7:77:0e:0c:c5:8f:40:ca:e7:08:fc:5a:1a:fd:86:1b:5a:
f1:de:e0:9e:9c:8f:71:c0:a3:ff:5e:2d:83:b7:ee:a8:07:8c:
9b:d4:a7:46:38:c4:78:66:c8:45:fb:7d:78:95:27:31:fc:44:
67:84:87:8f:ed:9f:88:d5:19:4a:bb:b3:7f:4e:7a:80:22:47:
fc:61:1f:26:02:76:09:0b:c7:bb:0b:84:22:9c:8e:9a:d0:04:
c7:89:f0:c2:32:59:dd:3c:0d:81:0d:e5:86:3a:14:85:0f:21:
0f:e6:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:56 2026 by rpki-client