Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
File: wBntHgH8BRbh56sRjcGEebLbEwo.mft (raw, json)
Hash identifier: kxZTykpdAl3U54arZR01utCHspvEqqptqM2HwwA0SR0=
Subject key identifier: FE:8B:3F:7E:97:37:ED:5A:73:D0:6E:7D:F6:10:1B:87:8E:10:6E:89
Authority key identifier: C0:19:ED:1E:01:FC:05:16:E1:E7:AB:11:8D:C1:84:79:B2:DB:13:0A
Certificate issuer: /CN=c019ed1e01fc0516e1e7ab118dc18479b2db130a
Certificate serial: 01A173CB69BDEE60ADDB6A34737DFA794BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
Manifest number: 2A
Signing time: Sun 25 Oct 2026 16:01:13 +0000
Manifest this update: Sun 25 Oct 2026 16:01:13 +0000
Manifest next update: Mon 26 Oct 2026 16:01:13 +0000
Files and hashes: 1: 3BeUx8PCMNhHeanHvkAM0W-p2Xk.asa (hash: FAtZ3OFvDnkB+SIrUS7nfShabEffRtV9pq700sDO71A=)
2: wBntHgH8BRbh56sRjcGEebLbEwo.crl (hash: Prj+nDmV+D87806j4Sp28S8ivSRb8NBwARh3dUjR8Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:cb:69:bd:ee:60:ad:db:6a:34:73:7d:fa:79:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c019ed1e01fc0516e1e7ab118dc18479b2db130a
Validity
Not Before: Oct 25 16:01:13 2026 GMT
Not After : Oct 26 16:01:13 2026 GMT
Subject: CN=fe8b3f7e9737ed5a73d06e7df6101b878e106e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:1b:69:bb:ab:b8:99:0f:1b:92:5c:64:eb:
ba:96:38:e7:d2:2f:80:82:0e:57:1b:f5:bf:91:ad:
73:ea:10:95:5e:78:21:98:ec:f7:fc:2a:d2:93:76:
58:1f:94:3c:62:5e:88:96:fd:06:5a:54:a0:c4:7a:
ac:fd:ed:ed:cf:01:a7:b3:10:c7:ea:18:6c:e5:cf:
ed:6b:e4:f8:23:f8:a5:22:be:aa:06:c2:c5:1d:0e:
b8:d3:f7:b4:9d:42:34:f4:28:b4:c4:78:02:a0:5d:
2c:1b:78:19:c6:86:1c:d2:b7:23:ad:c5:da:5a:7f:
18:49:1d:5c:73:5b:48:ad:4c:a3:ea:4e:5a:64:99:
c1:3a:0a:b4:c2:92:f1:d1:5e:f0:e7:4b:63:f9:d6:
38:73:d1:18:da:98:37:27:4a:34:49:67:15:0c:b0:
d2:c0:a6:2a:d1:4e:1b:57:fe:7d:e7:dd:aa:4c:4d:
61:50:b8:3d:b6:6c:0c:80:72:5a:22:f0:f0:2b:2b:
8b:7e:d8:59:ef:f9:bb:38:19:5b:57:86:a5:99:bf:
d4:2e:37:d3:b6:35:56:dd:0d:4e:ae:70:c5:e8:49:
cb:f1:f2:c4:56:2c:f4:d9:9a:a5:f0:4b:ad:34:fb:
11:3b:91:98:11:d2:3e:35:4c:5c:40:4d:d6:8c:f9:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:3F:7E:97:37:ED:5A:73:D0:6E:7D:F6:10:1B:87:8E:10:6E:89
X509v3 Authority Key Identifier:
keyid:C0:19:ED:1E:01:FC:05:16:E1:E7:AB:11:8D:C1:84:79:B2:DB:13:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bf:73:da:70:42:cb:af:d8:2e:65:ee:fc:e3:6a:b2:9d:09:
7b:7c:df:7b:82:ad:66:9c:cf:85:f7:fc:8e:f2:58:02:28:cb:
85:35:6f:ce:68:91:06:c7:d6:38:6f:98:25:c5:da:82:86:47:
e6:52:21:3b:5e:9a:89:d6:2a:f5:81:75:29:35:80:83:16:8b:
9e:a9:dd:cc:38:ef:bb:ff:51:00:e8:27:8a:a9:6d:66:5a:8a:
e6:0a:06:d7:b4:16:19:de:35:36:94:ce:3d:c8:e2:8e:4a:93:
ab:03:27:d2:97:be:fd:b8:f5:81:b2:8b:b7:54:09:73:ed:d8:
40:1d:66:df:f7:6e:70:ea:ca:aa:ab:6c:05:6d:4c:43:32:b6:
5f:5e:d2:93:96:c6:1a:0b:96:03:4f:63:d1:8d:8b:ad:33:57:
84:65:df:98:15:bf:be:d8:13:46:01:f8:0d:4d:ed:6c:a1:e1:
9e:87:dc:21:ed:6a:55:07:eb:9a:14:dd:bc:5c:ee:25:d4:1a:
f0:34:65:90:b8:77:c1:45:85:ff:6e:2a:7a:bd:e4:05:7a:16:
4e:ca:46:cc:38:c1:18:bb:c4:c3:16:9a:01:f6:ae:78:57:e2:
d8:e6:c3:af:16:27:62:4c:82:83:79:be:8c:9d:46:d5:69:ef:
a8:42:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:51:15 2026 by rpki-client