Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: pD32hOo95N0gIPg9BZwWUAlzWU/baW0Sz03k+Bui6r0=
Subject key identifier: 11:9C:4D:89:B1:DF:88:26:DD:8C:05:A4:DF:AE:2F:7E:29:77:87:EF
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 01A175B98C1CFCB2829AF2E0C78AD2A66709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 12E1
Signing time: Mon 26 Oct 2026 01:00:56 +0000
Manifest this update: Mon 26 Oct 2026 01:00:56 +0000
Manifest next update: Tue 27 Oct 2026 01:00:56 +0000
Files and hashes: 1: Ka7alFqI87s4EdJtZyqE-NGPHhs.roa (hash: 3RMOWVJO1ZQcH4d2j0ueEWLJLM5MekEDToq5QKnUUrM=)
2: VQIQLar7HwcjhVGKE5MtajsCN6g.roa (hash: SY7ZBqxQfy17eB+jMKdcaxNzW/pWzNXUCVDqxS62ZG4=)
3: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: XbWkNrZX2/tVswdznY8qU3MmX3LDtvgJzZ83t3WSg4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:8c:1c:fc:b2:82:9a:f2:e0:c7:8a:d2:a6:67:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Oct 26 01:00:56 2026 GMT
Not After : Oct 27 01:00:56 2026 GMT
Subject: CN=119c4d89b1df8826dd8c05a4dfae2f7e297787ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:8a:bf:82:2e:d0:83:26:5b:91:d0:20:96:
1a:d7:d3:e9:40:f6:41:6c:73:9c:45:67:d4:ed:59:
82:6d:b7:1c:6e:97:5b:10:c0:10:dd:d2:9d:71:8f:
e5:49:cc:18:15:05:85:a8:48:12:cf:26:0c:a3:4f:
92:70:4a:c1:2f:d0:c2:db:a6:ac:c1:96:f7:ca:6b:
33:bb:26:d1:5c:98:0d:75:6e:8b:c1:a3:ec:7d:93:
ed:df:7e:2b:7a:83:e8:e4:66:7d:36:5b:33:d8:ca:
9e:ff:66:44:b5:b1:23:0e:42:3c:dd:ab:ae:c3:e2:
79:f7:62:9e:51:23:3c:4d:13:cd:88:05:75:5d:e5:
92:23:dd:2c:61:af:91:23:dc:e8:2d:f2:4b:c0:da:
93:66:43:50:db:6f:3d:c5:4a:5e:20:51:b2:87:a0:
45:9e:82:e5:ef:18:26:a5:ee:43:d7:f9:d2:02:33:
82:cf:bd:4c:79:0f:46:70:3c:c4:47:6b:31:f0:6f:
69:6e:25:42:af:ce:27:6d:a5:b8:86:bf:ba:f7:9e:
b3:ea:e3:be:95:eb:97:52:cd:ce:78:83:d3:bd:1e:
eb:06:31:9f:a6:af:75:1e:36:f8:b0:7f:6c:5b:95:
e8:14:e1:a8:27:0b:56:ba:22:7f:50:cf:c1:f3:a1:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:4D:89:B1:DF:88:26:DD:8C:05:A4:DF:AE:2F:7E:29:77:87:EF
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:2f:81:ec:a4:52:ef:2c:6f:28:cf:32:5b:8d:18:7a:9d:
4b:e6:8c:4a:30:43:5b:0d:a4:4b:36:81:ef:bf:d8:01:28:02:
65:b3:6c:ce:84:ab:09:b4:2b:5c:f2:7d:09:bd:69:e9:5a:6d:
2a:8e:24:fa:d8:a2:3b:2e:75:5b:9d:47:8b:ca:fe:99:86:80:
c1:fb:f6:54:50:64:f7:42:7f:53:f4:83:18:98:d3:a3:97:8f:
54:24:46:1d:a9:72:69:43:48:dc:59:ae:bd:fb:a6:37:a0:57:
96:bc:7e:d4:df:49:11:fa:36:5b:7d:d6:e9:0e:a6:fe:b8:8f:
ea:47:b4:57:c7:e0:db:12:f7:60:7e:a9:75:76:0b:be:23:dd:
09:22:0e:f1:f7:26:99:07:a7:34:8f:a1:a0:63:0f:b9:47:90:
8a:fa:4d:1e:ba:a9:c0:91:56:24:a7:f1:d6:f2:db:d1:ce:a2:
7e:b1:b2:8a:1b:3e:e6:e3:b0:76:ad:89:1b:b0:16:db:98:b0:
5e:45:34:d3:b4:e6:c0:98:c1:b5:86:68:16:76:db:b2:18:0f:
34:ea:a3:77:cd:72:c4:08:5d:39:c0:be:80:01:3a:71:87:15:
eb:99:31:ea:f2:ba:21:d2:9f:b1:ee:74:1a:ad:6b:94:30:86:
11:5f:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:38:43 2026 by rpki-client