Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: qlS0T0rARURXt1IAY1Ea684xGMqBh/CvPawqa3v0QNU=
Subject key identifier: 98:68:CF:4B:5E:E1:13:CF:15:6B:8B:9C:D4:8F:DB:9C:FB:80:FE:41
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 01A17B4D824D6423BBE331C754F45DC38E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 082D
Signing time: Tue 27 Oct 2026 03:00:39 +0000
Manifest this update: Tue 27 Oct 2026 03:00:39 +0000
Manifest next update: Wed 28 Oct 2026 03:00:39 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: vOwZJ4e5H3QpRbGJE2Wwzg/kVXnOHyw6UbeV51MWlUs=)
2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:82:4d:64:23:bb:e3:31:c7:54:f4:5d:c3:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Oct 27 03:00:39 2026 GMT
Not After : Oct 28 03:00:39 2026 GMT
Subject: CN=9868cf4b5ee113cf156b8b9cd48fdb9cfb80fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c0:c2:91:27:a0:d7:42:1a:ea:05:4a:29:f8:
74:d1:24:2f:ee:f2:8c:42:8a:9d:39:e5:ae:05:61:
f8:1f:ca:bf:bd:68:34:d9:d6:b8:6c:f4:9b:bd:c2:
4b:0e:2e:09:e6:36:2c:7c:f0:fd:8a:22:bb:95:cc:
d6:07:cf:fe:d5:df:01:d4:68:2b:49:b5:4c:2f:92:
b4:c7:ed:75:29:39:4b:26:86:24:ee:b4:44:ba:38:
4e:9d:49:56:c6:ca:27:d3:8b:4b:9f:ad:ea:95:b2:
b5:fa:52:3a:28:84:9f:b3:ee:65:85:0c:46:33:a8:
bb:fd:2a:a9:f2:54:2c:3d:1b:18:dc:3f:a4:d8:03:
dd:47:a2:d2:de:8c:ea:ec:c7:1d:0c:8a:5f:f1:da:
4a:2f:7c:1e:b5:e7:df:e6:16:1a:0e:c8:74:18:06:
5f:15:70:f5:3b:91:e7:88:12:ca:93:3d:36:77:8f:
11:52:dc:e6:65:57:3c:f5:63:f1:f1:b8:98:8b:4e:
a0:81:d3:1d:4d:47:8d:bc:07:fe:87:09:de:7d:83:
91:3a:57:e4:3f:74:2d:23:36:9f:8c:be:b6:db:4b:
f0:55:c4:34:17:47:02:b3:b0:d7:03:60:cd:5a:1c:
02:56:53:1b:7d:7f:0a:77:6e:99:78:87:7f:43:26:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:CF:4B:5E:E1:13:CF:15:6B:8B:9C:D4:8F:DB:9C:FB:80:FE:41
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f7:f2:c1:db:91:0c:f6:18:e6:b7:1e:e3:f1:76:75:42:c0:
0f:77:1c:4a:7c:2a:e8:de:ea:f3:c4:b8:4e:c1:e7:b1:15:6e:
7a:f6:25:a4:07:0b:39:ad:30:9f:0f:26:ae:23:5c:d3:a5:dc:
2a:89:ba:07:fc:81:05:d6:3c:ff:52:6b:5c:e2:47:a6:7d:f8:
be:19:2a:c8:e7:ea:12:59:56:ce:14:ef:d1:39:9b:f5:b1:0a:
f3:11:66:50:70:4d:5f:96:8b:64:20:8f:df:4d:a3:ce:f0:19:
a2:70:7c:08:de:5b:30:ae:d7:50:8e:cf:e3:08:18:f6:30:10:
4c:10:a9:fa:c0:a9:0b:14:7a:02:10:12:07:6f:f9:b8:55:b2:
2f:a5:48:ce:a7:58:e3:44:f5:c4:05:4c:5c:4f:a7:f1:2e:5c:
77:cf:71:90:3c:ee:f2:e3:e6:4f:ec:76:5b:4c:0c:29:98:8f:
94:95:e4:1c:ca:13:a1:07:fb:1e:2a:62:07:c5:fb:24:5b:d1:
28:77:f6:61:ae:0b:2c:48:b7:dc:e6:ae:6a:b9:34:21:c0:02:
b4:8b:7d:4c:1d:22:f8:64:e6:23:64:76:9f:4d:f9:2e:3d:a2:
ca:b2:18:39:24:54:4b:81:68:cd:82:2b:b8:88:70:b7:43:20:
54:eb:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:24 2026 by rpki-client