Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier: CrSlMl92NrvW+7DWVJ6QcZKBzQVF+6J6OLctf0SLlQ0=
Subject key identifier: CA:96:8C:C1:61:B1:51:7D:C2:66:7A:BC:DC:42:E2:79:90:B6:E3:6B
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial: 01A1084AC40DD0E499414FCDFFEE4B17C09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 19:01:19 +0000
Manifest this update: Sun 04 Oct 2026 19:01:19 +0000
Manifest next update: Mon 05 Oct 2026 19:01:19 +0000
Files and hashes: 1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: nRHP/30UYvZYE7VXgibuEBJXkfGTP2opwL88OA70PCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:c4:0d:d0:e4:99:41:4f:cd:ff:ee:4b:17:c0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
Validity
Not Before: Oct 4 19:01:19 2026 GMT
Not After : Oct 5 19:01:19 2026 GMT
Subject: CN=ca968cc161b1517dc2667abcdc42e27990b6e36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:c4:74:bd:32:46:aa:0c:eb:cb:43:52:e8:
71:f0:be:5e:f5:b4:e1:d8:1a:d0:b2:6c:fd:72:bd:
3a:95:29:98:4d:e7:4b:49:a1:f8:44:98:1f:b4:49:
ed:6f:55:d1:e9:56:51:8d:70:2b:eb:90:07:6c:d7:
43:ea:d8:06:18:8c:26:c2:f8:53:c6:1c:a1:75:6a:
42:f0:56:b2:bb:69:a4:2e:45:be:fd:94:9c:01:98:
72:b6:61:50:93:f1:ab:77:f8:0c:90:12:62:10:a7:
21:b7:8f:7b:58:ff:52:6e:7b:9a:65:62:bb:ad:7d:
96:6a:01:60:82:0d:ca:b1:f6:09:09:ca:d5:c4:cd:
b9:bb:7e:30:37:ee:be:3e:8f:ad:e3:20:d8:d9:5f:
01:78:a1:4f:c9:ac:ad:30:b6:83:40:db:d0:09:83:
bc:16:79:50:50:40:a0:19:92:d5:69:64:9b:b8:46:
93:6e:77:d1:0b:33:02:9e:99:1e:43:86:e4:51:c1:
03:21:70:d5:46:59:95:19:94:91:4e:22:01:54:f5:
1c:7a:34:76:a2:d9:96:99:05:62:14:86:cf:19:c5:
70:3d:e5:1a:58:1d:f6:c6:da:38:79:b2:50:be:27:
a3:94:97:b6:13:f1:fc:88:03:74:82:8e:93:16:5b:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:8C:C1:61:B1:51:7D:C2:66:7A:BC:DC:42:E2:79:90:B6:E3:6B
X509v3 Authority Key Identifier:
keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:18:a0:bd:ea:63:00:6d:8e:a2:94:3d:89:36:aa:cb:bd:24:
a3:47:68:2c:50:9a:79:fb:bc:1b:3e:7a:f3:8c:40:85:5a:44:
ed:5a:c6:ba:4f:1a:21:77:07:23:2f:e6:29:33:98:7a:33:8c:
4c:88:63:48:39:ac:8c:38:35:99:7b:db:c0:ad:1a:9b:35:7b:
9d:b8:62:2d:3d:77:ee:ad:d8:ca:e1:f9:7f:78:0b:e1:35:4a:
ea:0e:03:31:ff:05:2a:2d:8d:bd:3d:09:05:04:2d:bc:02:52:
a6:4b:f6:fb:39:be:1b:a7:b0:3c:c9:23:da:7c:10:31:a6:94:
f1:e9:7f:ec:93:87:f3:11:43:9c:4d:ad:44:bc:73:0b:66:73:
07:15:b9:1e:0a:87:bb:0e:48:3d:5d:5d:0e:07:04:a4:2a:b9:
6e:8b:1f:18:b0:c6:d1:9c:91:30:a2:05:c8:aa:f6:8a:dc:64:
bc:49:a5:c8:00:19:24:ed:15:c3:d1:66:a7:8e:7b:09:48:04:
d1:ea:1f:b0:65:94:6f:6e:da:48:77:6e:f7:67:73:67:69:6e:
37:3e:24:89:4e:df:5d:07:54:81:90:86:59:54:57:a6:81:11:
04:8f:5c:1c:e7:b3:02:98:2b:4f:fa:2f:f6:b9:98:35:3c:aa:
c9:b7:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:43:19 2026 by rpki-client