Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
File: wA_3yZHBXTi_3_s648uYg1ZSnsI.mft (raw, json)
Hash identifier: HDNqJyUadrF0pDr6cdtv84MqdDV3RhBYE/EbUuvwYLg=
Subject key identifier: B1:F7:25:2E:97:FC:F9:00:C0:40:FF:6E:B1:FF:38:48:FE:13:E3:BF
Authority key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Certificate issuer: /CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Certificate serial: 01A189ADEEE8BA92F8F71C6F33F72A539B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
Manifest number: 011B
Signing time: Thu 29 Oct 2026 22:00:39 +0000
Manifest this update: Thu 29 Oct 2026 22:00:39 +0000
Manifest next update: Fri 30 Oct 2026 22:00:39 +0000
Files and hashes: 1: tJdEpKTyQFiB6etKYnTD5TRM42I.roa (hash: fkYiQBu5Trdut7tZ/7hqit0Set+zAtJH4HGx3n50MEc=)
2: wA_3yZHBXTi_3_s648uYg1ZSnsI.crl (hash: BHLO+U14A0zKwt7ZWEZC/6PON6b9qZsrWgcA9AmJ78w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:ad:ee:e8:ba:92:f8:f7:1c:6f:33:f7:2a:53:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Validity
Not Before: Oct 29 22:00:39 2026 GMT
Not After : Oct 30 22:00:39 2026 GMT
Subject: CN=b1f7252e97fcf900c040ff6eb1ff3848fe13e3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:0e:db:a4:74:fd:42:1e:3d:3d:33:00:15:
17:3f:41:62:83:c1:91:19:36:d6:32:07:3e:5b:66:
15:47:7d:7a:76:a5:15:7a:24:09:f2:dd:c0:2c:33:
33:8c:e0:29:9d:45:bb:55:a7:ca:9b:f4:bb:11:8a:
d0:89:9a:b7:9d:4a:89:9d:fe:f6:6d:e7:a7:9b:1d:
ee:02:0e:df:47:04:79:e6:da:bb:ab:d5:e9:b3:e3:
18:a4:b3:6d:40:62:95:e3:42:68:42:ba:b6:e3:3d:
42:90:0e:77:82:c0:a3:4c:01:17:0e:d9:fe:d8:ec:
87:55:94:91:09:91:8a:37:d4:ca:7c:ca:da:7b:9f:
0a:9a:b7:26:eb:b0:32:2e:13:92:b9:0e:7f:35:a7:
c1:88:47:fb:db:39:ef:2b:7c:cf:47:ef:04:0d:07:
fb:d6:85:ad:b8:ec:e4:8a:a0:a1:d7:be:c3:16:81:
95:a8:d2:d8:6b:d6:1a:ec:0f:4b:60:64:5b:4d:08:
78:fb:6c:63:d8:c4:3e:5f:2e:3c:1a:c9:37:ff:8f:
da:9f:99:28:22:1e:24:36:44:f6:75:a3:d5:b8:0f:
dd:d6:15:b5:33:fc:08:99:cd:b7:06:22:b5:75:9c:
03:db:88:56:ad:8d:96:1b:87:b4:d6:30:37:76:7f:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:25:2E:97:FC:F9:00:C0:40:FF:6E:B1:FF:38:48:FE:13:E3:BF
X509v3 Authority Key Identifier:
keyid:C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:19:e6:f8:ec:65:e3:bb:0c:f0:40:6a:e9:e8:60:0a:f3:03:
94:93:b0:12:9d:9c:04:c4:e5:b4:c7:df:75:09:e2:66:65:03:
3e:c1:40:04:da:59:51:48:52:6f:91:a2:63:96:28:4c:72:9c:
9e:e4:c5:58:c8:d5:14:51:c4:d7:3b:fc:df:d8:cb:fd:15:f1:
c0:fb:1d:43:da:ee:8e:62:13:55:4f:ef:12:b6:f1:9a:93:c1:
29:a1:78:f0:9e:fd:08:d7:64:38:79:9c:66:14:94:58:7c:ae:
c4:6e:9a:02:88:34:db:4c:f2:00:e5:a1:e7:4f:0f:d8:8f:df:
a1:46:c1:88:93:89:7c:25:c5:08:ef:11:6f:9e:da:2d:7b:9d:
f3:b3:fc:e9:e0:bb:7e:89:0f:69:09:b0:36:67:03:07:62:93:
04:46:17:8a:db:b2:8f:0d:8c:49:40:6a:af:94:41:a5:8b:d8:
89:5b:4a:65:10:28:56:18:2e:95:c9:2a:c1:f2:78:f1:85:1c:
60:63:d5:96:8b:81:65:85:e7:2a:46:ea:a2:b1:d7:6c:56:0a:
89:fe:54:a2:ba:c4:99:77:ce:50:50:a7:d2:1c:71:9d:03:b8:
fa:bd:7b:db:2b:c2:2d:57:3f:16:ef:10:0c:f9:67:58:3b:8b:
75:0d:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:55:06 2026 by rpki-client