Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.mft (raw, json)
Hash identifier: 0bmTFgcfrMmQyuAqVnO6h+FxiELtUgEz3Qvd00vYZfY=
Subject key identifier: F4:A9:8B:D1:64:9C:39:E2:F8:3E:07:B1:C0:62:C9:57:7E:A5:96:6A
Authority key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Certificate issuer: /CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Certificate serial: 01A0BC545672E8F14D1DB2AF5A3C9F28C612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
Manifest number: 1A5C
Signing time: Sun 20 Sep 2026 01:00:38 +0000
Manifest this update: Sun 20 Sep 2026 01:00:38 +0000
Manifest next update: Mon 21 Sep 2026 01:00:38 +0000
Files and hashes: 1: wq8ZpG9azIz4_QNiSmG3koqBjNA.crl (hash: 5HmuOtA8g3XOqlumQ+kcCOrVOmL926nI9Ibxui2A5pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:54:56:72:e8:f1:4d:1d:b2:af:5a:3c:9f:28:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Validity
Not Before: Sep 20 01:00:38 2026 GMT
Not After : Sep 21 01:00:38 2026 GMT
Subject: CN=f4a98bd1649c39e2f83e07b1c062c9577ea5966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:f7:7f:24:01:a9:f0:37:44:0e:de:05:1f:
ea:40:c7:e7:09:be:d8:16:ce:c5:61:30:73:8f:21:
ed:07:f9:45:83:63:46:4c:94:b8:2e:94:5c:04:43:
3c:7d:b2:f0:7b:ce:34:0a:2e:77:f9:8a:b9:e9:7d:
6f:a7:79:bc:21:dd:3d:f9:bf:63:d1:2f:98:63:f7:
e6:22:c2:7f:a5:b1:82:dc:d5:46:c3:1f:3e:e6:5e:
68:05:de:bc:93:b0:35:c1:85:f2:01:a1:b4:30:5e:
93:ab:37:08:88:e7:a9:ac:42:9a:30:39:45:84:2c:
af:f9:97:a4:5d:f9:97:eb:54:1c:43:c4:48:70:a5:
73:f7:ab:73:50:16:e2:23:23:7b:55:3c:f3:b0:d3:
28:c6:6a:88:4d:5d:3c:b5:a4:76:f1:fa:c4:d4:ca:
e4:11:73:af:a1:3e:80:61:38:4a:aa:0d:ae:1f:e7:
06:6a:48:92:75:31:93:e2:9d:03:54:28:22:ea:be:
b8:3b:ac:48:8e:9e:3d:9f:94:46:65:3f:ff:d3:de:
f9:03:80:0a:83:47:7e:c1:87:10:bf:4c:72:e4:f2:
bd:c4:56:7d:d1:db:99:13:e8:90:c0:90:46:84:2c:
c7:f8:54:9d:1f:28:e9:1a:01:c2:bf:3d:65:53:d5:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:8B:D1:64:9C:39:E2:F8:3E:07:B1:C0:62:C9:57:7E:A5:96:6A
X509v3 Authority Key Identifier:
keyid:C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:27:74:e2:73:a5:7e:2b:5d:a2:8b:b0:65:1f:44:e6:f9:a5:
f5:48:b8:ec:ae:97:b7:4b:aa:8d:62:af:11:46:8b:8d:3a:ee:
10:3a:62:9a:bc:66:39:de:ff:26:91:55:ff:83:e7:bd:f9:7c:
cd:72:65:a0:c8:05:1a:4b:20:5b:d8:ad:68:75:d4:14:00:d3:
9c:63:f3:26:64:63:a8:e6:74:da:19:df:07:41:a5:6b:bf:30:
6a:c4:f2:bb:b6:31:2e:a0:2e:10:e0:da:da:e1:cf:e8:be:23:
43:a4:aa:74:b3:17:48:c9:ed:3f:c7:61:12:7f:2d:b1:43:40:
14:6c:c2:89:f5:f9:e2:76:bc:e1:f6:59:98:47:f0:31:93:a3:
a9:2c:69:e8:85:b5:b3:54:15:fe:68:6c:73:c2:df:2b:13:c2:
8f:8f:2f:46:8d:d4:49:c5:d3:85:13:f0:5c:3f:38:a1:67:c7:
78:64:69:2c:cb:42:44:03:b1:80:17:8d:bc:8c:c5:7d:02:bc:
f3:3e:5c:5c:5a:f8:88:00:76:b5:e3:94:cc:f4:69:86:10:41:
b3:ba:78:2c:3d:a8:03:4b:28:fe:6e:a0:6f:44:34:b2:66:97:
fe:91:99:e1:aa:29:ca:86:54:ab:b3:52:87:44:c4:9a:62:5e:
49:35:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 03:59:11 2026 by rpki-client