Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: V1J3X8w6lE6pDhNOZ20oYFC+xMsXYSNqCZnHa7onJes=
Subject key identifier: 82:6D:BA:B8:95:73:33:F9:0D:DB:33:19:13:B9:BC:5B:FB:75:94:4D
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 01A0F8A9CD5963E36A9DF38C3D85F6270C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0A30
Signing time: Thu 01 Oct 2026 18:11:12 +0000
Manifest this update: Thu 01 Oct 2026 18:11:12 +0000
Manifest next update: Fri 02 Oct 2026 18:11:12 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: xYYd6CAuScqRRfHv+vHhv4GISmU966A2Au0FFduTm6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:a9:cd:59:63:e3:6a:9d:f3:8c:3d:85:f6:27:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Oct 1 18:11:12 2026 GMT
Not After : Oct 2 18:11:12 2026 GMT
Subject: CN=826dbab8957333f90ddb331913b9bc5bfb75944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:56:e1:77:74:a3:d8:67:c8:00:7e:c9:d8:
c1:69:8f:30:57:e0:f5:ad:50:21:ac:d4:c5:45:8a:
a2:9c:23:d0:77:0b:9c:6e:4d:24:fe:ab:11:3f:dc:
a2:73:8f:71:c3:c7:77:4c:5b:a9:1e:f5:bb:78:f3:
c2:9d:c1:92:b7:fb:a9:0a:9f:a6:07:b1:39:c2:8c:
2a:af:23:ee:11:1f:ca:95:94:f1:82:99:ac:c8:ab:
45:7f:a5:9e:ec:af:2c:c0:0e:ef:9d:31:00:67:90:
33:88:a9:42:d5:f6:aa:b1:f1:9b:1e:6c:b4:53:d0:
5c:4b:6b:fd:ce:9e:62:4c:b1:97:9d:c9:10:ff:b9:
01:0c:75:5f:5d:ed:5c:ad:7b:8d:81:6b:d7:ef:26:
43:7a:88:29:f1:c9:99:5b:cb:38:22:76:de:5a:e0:
35:63:e8:72:65:e9:f6:ed:e0:24:40:89:fe:21:cd:
59:92:d1:53:ff:e5:e3:98:2b:e7:a7:3e:f8:d7:70:
04:66:7d:eb:fe:a1:40:12:54:66:66:15:eb:15:cd:
fb:ef:c6:e7:d9:87:e2:ec:95:38:22:be:58:64:a5:
dd:56:fc:02:df:c5:e4:c6:f5:14:51:1e:2f:cd:73:
df:62:38:df:3f:21:9b:55:8f:8b:dc:04:cf:1f:98:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:BA:B8:95:73:33:F9:0D:DB:33:19:13:B9:BC:5B:FB:75:94:4D
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4f:d6:e6:4b:02:16:a2:49:89:b4:31:57:78:e8:24:dc:eb:
e6:63:23:8b:40:db:d3:7c:05:96:e1:6b:65:46:d8:cc:58:9e:
a5:79:b2:03:07:38:10:21:9a:a0:40:df:aa:97:4f:95:0a:55:
c5:e3:fb:a7:69:fe:cd:0e:31:5a:d0:4e:4c:ea:d6:e9:f8:e2:
24:54:ad:68:77:27:6a:d7:8b:b4:e5:ba:91:71:bf:68:95:dd:
f4:d5:ce:9c:22:d1:20:5c:ba:e7:6d:53:1e:04:6c:32:84:b5:
95:67:f7:ab:ec:5c:ea:f1:a1:1a:22:69:f5:3c:d0:5c:ae:13:
e2:ef:56:98:5e:2c:a6:b4:a1:12:f0:6c:f0:e1:cd:b8:d3:8b:
a8:0b:e1:45:9c:56:01:4e:c6:99:73:8d:25:43:94:94:72:0d:
72:ad:37:b8:d4:b6:2a:99:75:42:87:f7:97:ab:a7:6b:8c:f3:
ee:cc:64:3c:a1:ef:8d:8a:0f:8b:81:4e:f7:44:79:51:ec:23:
38:e6:d5:cb:f1:5c:47:84:6f:e8:5a:1f:d2:9a:07:76:65:6f:
c2:dd:8a:cc:7a:a0:0e:77:ad:b6:f6:f6:60:20:8b:a8:5f:b3:
52:08:fb:38:e5:a2:e4:ac:d9:83:0c:a7:93:3d:a4:72:55:e1:
0a:c4:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:34:52 2026 by rpki-client