Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: pJKhwruzVt+sBqu4gcbTmvqdPpyNeE6jr26zZSmIQTA=
Subject key identifier: F1:74:60:DC:40:DB:C5:A7:49:56:6D:89:FF:6A:1D:61:20:4C:93:3A
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 01A17BBB21A4403613ED941B57B3AF80EF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 05:00:23 +0000
Manifest this update: Tue 27 Oct 2026 05:00:23 +0000
Manifest next update: Wed 28 Oct 2026 05:00:23 +0000
Files and hashes: 1: ch32gMkwgIvhncaw2j6_w1rWqBM.roa (hash: 2zNuBXW5TRNjyq7/jYrllStnRO2aSpxPfwq4qZw6++Y=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: qHcY2AggwQwpSgcPy7jAAPmJNTIgyYbBqbdXOuKquzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:21:a4:40:36:13:ed:94:1b:57:b3:af:80:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Oct 27 05:00:23 2026 GMT
Not After : Oct 28 05:00:23 2026 GMT
Subject: CN=f17460dc40dbc5a749566d89ff6a1d61204c933a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:69:d7:68:8b:c5:51:5c:3e:11:84:e7:14:
dd:08:ed:72:2a:03:e7:b6:21:39:66:ff:2f:35:9d:
e7:cf:ef:0e:a2:a4:3a:83:7e:33:b0:e0:61:51:d5:
ed:95:a0:ef:7a:33:2c:5e:f8:3f:4a:99:09:a1:5f:
4f:86:38:b3:c7:dc:ff:ee:a9:89:36:4f:c4:97:68:
c4:92:a0:32:53:93:f5:bd:f4:49:df:b6:f5:3d:f9:
ff:72:48:6b:79:43:34:76:ae:3d:0c:6c:f0:70:f7:
11:d3:99:e9:6f:75:9e:a5:c3:f9:ce:42:f2:f1:8c:
f9:6e:04:35:19:04:c3:5b:0e:91:23:ba:f9:6d:94:
30:b6:20:1e:6a:0b:19:a0:5e:11:89:e4:84:36:1e:
6f:9f:6e:3b:56:6b:26:41:e2:c3:57:f9:de:a1:d1:
9d:93:8e:8c:25:fc:7a:b1:a2:a6:d9:75:a7:72:43:
72:86:ae:ae:ef:6a:4d:7f:1c:aa:2a:d4:ad:43:b6:
9f:9f:b4:64:8a:76:39:68:8c:46:aa:9f:40:37:96:
2c:bb:5f:5c:d3:e3:6c:32:c6:a0:f5:3e:00:fc:6f:
9e:2b:58:1e:02:09:19:cc:f1:e0:52:52:ee:66:d9:
6e:00:6c:05:fc:a7:0a:5f:99:b2:42:ea:fb:1b:b6:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:60:DC:40:DB:C5:A7:49:56:6D:89:FF:6A:1D:61:20:4C:93:3A
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:23:6e:e8:2e:ed:f9:e0:e8:57:c5:36:db:ac:f3:ba:55:a8:
5b:69:3c:22:31:04:9c:e1:bf:05:3f:38:c9:44:0d:dc:cf:67:
7a:b9:c3:b1:84:19:1b:b4:67:55:0a:6a:3a:45:57:64:cb:e9:
99:f7:50:71:f2:12:79:4d:0f:ac:96:5b:17:f0:4f:39:a3:7c:
27:e9:e8:0e:13:c0:87:4d:76:d4:01:60:7e:57:f7:05:40:70:
e9:11:78:94:f1:fb:52:4c:2c:b8:82:95:42:9a:db:a0:cc:7e:
62:7c:dc:ca:d0:6e:e0:90:cd:69:70:5b:de:75:d8:40:0f:dc:
8a:0b:e5:2c:75:e3:ab:76:24:20:2f:ba:8e:15:2c:d9:2e:ed:
62:93:c8:21:65:16:12:f2:fb:84:27:a1:60:da:18:b1:51:8a:
15:c8:64:1c:57:c5:4e:e8:df:45:06:d3:e0:56:f6:29:de:8f:
a1:a1:4b:46:d2:97:b2:df:2e:47:f1:d5:8a:1d:76:bb:57:0e:
65:e2:5d:70:77:41:68:2d:ce:17:34:26:5c:84:c6:e2:20:6e:
03:5a:9c:b9:33:a3:90:fd:14:85:ed:e6:15:03:1b:c5:95:27:
b6:ba:a5:10:4b:1d:41:06:a3:9f:69:a4:3e:1e:ac:15:6b:b1:
1c:ab:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:49:08 2026 by rpki-client