Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json)
Hash identifier: 5AdPyNbiQC5RmQKInB3zFiYzaY+MAIopeD+8ZRlSR9o=
Subject key identifier: D8:4D:4F:54:57:9D:89:39:FE:81:0B:98:7A:97:AD:53:D2:95:BD:54
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial: 01A1AAF0709760138F0344C986A45F7BE437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
Manifest number: 1ADF
Signing time: Thu 05 Nov 2026 09:00:46 +0000
Manifest this update: Thu 05 Nov 2026 09:00:46 +0000
Manifest next update: Fri 06 Nov 2026 09:00:46 +0000
Files and hashes: 1: 7eLRqfQBEA8deAFpD-5TqzV1b_A.roa (hash: hharO3KHrL6T47EFBvglBhYILhHBiBCy/4h0AKuaamg=)
2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: l2A6NFjOu0ovNjRIUrKUxtw3QoHrzTUOGTumfxkLAY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:70:97:60:13:8f:03:44:c9:86:a4:5f:7b:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Validity
Not Before: Nov 5 09:00:46 2026 GMT
Not After : Nov 6 09:00:46 2026 GMT
Subject: CN=d84d4f54579d8939fe810b987a97ad53d295bd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:dd:fc:76:a8:e5:3e:40:f5:5f:d8:0e:4f:
cb:a5:ec:d7:18:72:22:11:f9:3b:ee:91:c8:0e:2a:
0d:c2:5b:c6:76:c9:d3:67:83:40:fd:85:b3:d5:7d:
ff:c9:30:67:e0:1e:de:cf:98:7d:cd:18:9a:c9:fc:
f1:2a:ee:4f:3d:87:a6:6a:46:fa:c6:f5:54:01:ee:
09:21:a4:f7:9a:c0:91:8a:df:10:b4:3a:54:0a:17:
af:72:a3:59:64:6a:26:3a:6b:fc:07:51:8c:fe:ce:
c5:fc:e5:76:d2:22:f0:36:73:7e:ab:f0:f2:78:9a:
ce:77:99:7b:d0:ee:fa:49:fa:ee:74:44:a5:82:9f:
d7:b4:7a:01:25:db:25:9f:5c:7e:9b:03:cb:b6:7f:
96:e5:45:6a:33:61:9d:b9:08:20:a0:bf:00:3c:93:
b2:b2:f7:44:b2:d3:b8:64:61:f3:30:88:5c:55:56:
11:47:85:59:bc:43:89:1c:03:85:54:e4:1a:21:9f:
00:a0:60:1e:bd:07:d1:33:28:85:19:4b:bb:a4:db:
90:81:db:17:bf:83:3f:e7:ae:b6:4d:d5:89:46:b9:
b7:76:d6:80:f9:23:9d:29:21:4b:dc:4c:f5:a8:1c:
dc:b4:7d:9c:d3:8b:9d:91:83:0f:49:25:81:eb:1c:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:4F:54:57:9D:89:39:FE:81:0B:98:7A:97:AD:53:D2:95:BD:54
X509v3 Authority Key Identifier:
keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:90:d7:af:df:d2:6a:9c:5d:15:39:9a:a4:6e:b4:01:8a:ae:
c0:4b:5f:83:f1:54:73:29:24:f6:e1:c4:ff:00:f9:cc:8b:51:
6c:cd:f5:9d:a5:3d:0e:0c:b6:ea:a1:13:b8:6e:b0:65:38:1a:
83:65:54:e2:6a:bc:0f:48:51:7e:c6:fe:81:21:00:c1:ed:c2:
c2:ef:b6:6b:a7:66:77:a8:c7:35:66:87:4e:34:db:a3:13:72:
b8:18:87:41:f9:eb:54:96:d3:89:6d:84:de:4e:0c:00:27:62:
30:e7:7e:19:b8:07:76:17:ce:d5:8b:63:69:a5:57:5f:b3:7d:
1c:4f:e6:0e:3d:67:e0:e2:db:fe:a2:69:49:7f:76:ae:41:50:
fc:83:9a:92:41:e7:9c:c8:26:1a:29:3d:7f:d0:9c:84:32:28:
3a:f5:86:37:c9:24:44:b0:57:5d:ad:4e:54:8f:8d:5d:d7:91:
2c:76:44:95:ca:cb:c3:dd:cb:f7:b9:82:a4:81:01:6d:2c:b0:
fc:8b:e1:f9:8c:1e:e1:05:fe:65:ba:4b:7b:ad:fd:28:ab:ef:
9e:d0:fa:6e:e8:08:92:0a:b1:c7:5c:a1:9a:a1:c4:a1:56:88:
2f:bd:ac:e6:ee:e9:e3:fd:bf:d9:7f:6b:42:29:a1:ca:7c:45:
d5:3a:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:02:25 2026 by rpki-client