Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
File: wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json)
Hash identifier: 7QMJ44ICqwTMwlHOgiR8cahR/PtRf5eQ833ywKR91Vg=
Subject key identifier: 04:D5:9D:3D:C1:23:21:7E:4B:21:44:D8:59:F8:C1:79:A7:E1:33:1F
Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Certificate serial: 01A135235069E1777018F626E47D5F40D7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
Manifest number: 0325
Signing time: Tue 13 Oct 2026 12:01:09 +0000
Manifest this update: Tue 13 Oct 2026 12:01:09 +0000
Manifest next update: Wed 14 Oct 2026 12:01:09 +0000
Files and hashes: 1: pwR2uuhLQb704CaTl-JhUr6tQUw.roa (hash: WST6jplxdqOcMqOOJtSBgG40d9NpmMZJxxHB0hC7zBU=)
2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: mIFOffzyf6dWkXkVUYdIJX8sMAdeYnlbi9UbxJd5+AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:50:69:e1:77:70:18:f6:26:e4:7d:5f:40:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Validity
Not Before: Oct 13 12:01:09 2026 GMT
Not After : Oct 14 12:01:09 2026 GMT
Subject: CN=04d59d3dc123217e4b2144d859f8c179a7e1331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:aa:34:79:64:c8:55:11:01:13:f6:66:d1:
d8:3b:ef:f5:43:e3:07:7a:29:b6:0b:f1:25:ce:b6:
33:9c:96:d4:67:4d:02:46:0f:a1:7e:48:cc:12:00:
ab:72:99:b3:32:b3:bd:e2:20:62:98:ed:9a:ab:2f:
fa:f7:82:74:fc:0a:8c:92:5c:70:f8:a6:17:12:dd:
32:8c:e7:3a:35:a7:bf:a2:00:bf:f6:20:bc:df:99:
ac:cc:62:a1:d6:af:bc:48:ba:53:97:3e:ee:db:ed:
ae:73:94:a3:35:8a:00:df:43:fd:b9:d4:b9:cf:41:
97:96:ba:ba:aa:5c:7e:a0:6b:77:8b:83:04:51:f4:
45:a9:8a:4f:d0:09:48:e8:18:e5:1d:f3:ea:f6:44:
e8:28:76:69:cd:44:f8:50:b6:1c:0a:a7:19:60:a0:
c7:28:0b:63:58:2c:c9:aa:a1:ba:9f:c0:ff:36:c3:
1b:60:bf:08:2c:6e:5e:5d:1b:56:07:d4:9f:c4:4d:
c2:25:ca:b4:c3:89:f8:77:2c:08:84:cd:e2:77:44:
e9:7a:08:99:61:51:61:c3:32:56:4f:ba:00:ae:59:
59:6a:b0:14:40:13:f6:5d:d3:9d:45:9a:78:30:c8:
81:67:58:b7:5a:b8:eb:f0:9b:48:5c:9c:c7:26:a6:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D5:9D:3D:C1:23:21:7E:4B:21:44:D8:59:F8:C1:79:A7:E1:33:1F
X509v3 Authority Key Identifier:
keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:02:56:24:8d:9c:d9:10:e5:29:de:3c:a7:ec:2c:2c:88:
61:b7:b9:82:5e:30:5f:27:79:84:d7:06:77:f5:6b:8c:ea:10:
f8:ee:7e:20:fc:f6:2a:29:b9:81:58:52:92:7c:e4:74:1c:b8:
a9:b6:0b:c1:e6:87:ed:f5:41:d5:fc:ad:9a:a0:0e:ed:32:16:
5b:ea:64:6c:49:c3:9d:f8:84:b3:36:8d:c8:b2:1f:0c:21:2e:
dd:e3:d1:f5:8e:42:d5:b1:54:68:ae:63:12:9e:e8:24:cb:f1:
cc:f4:33:59:99:21:0f:df:b6:0c:5c:13:4f:a7:11:c8:dc:29:
c9:50:c6:b2:4c:ae:6f:b8:7a:20:9d:1c:e9:9a:59:0b:a0:e3:
98:df:7f:66:67:68:21:88:94:b1:d4:3b:c4:fa:e9:ab:f2:d7:
06:c3:93:2c:78:eb:69:f9:2c:55:b7:01:c3:2e:20:5e:68:1e:
78:6c:a6:1b:8c:ca:04:4b:9e:f9:9d:35:89:34:08:e6:05:e0:
18:e6:87:f3:4d:1c:7b:13:01:1a:3b:0b:9c:e2:1d:03:f2:64:
49:64:66:3e:7b:05:d4:6d:a0:a9:e0:f0:62:c2:c0:4b:c6:6d:
cc:00:17:4c:a7:13:d7:bf:e6:7f:24:b6:d5:35:4e:81:69:90:
77:34:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:42:54 2026 by rpki-client