Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: WR/5KXNRU3mPoeP+ExO3YeB8ZeWSBnORYuTTYzXsHNY=
Subject key identifier: 38:5F:B7:63:7F:3B:2C:9A:E6:C7:B3:36:EE:77:E2:0D:2E:1B:22:C1
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01A14FF6094214EFE50A85113EAFC10F92FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 1AB5
Signing time: Sun 18 Oct 2026 17:01:26 +0000
Manifest this update: Sun 18 Oct 2026 17:01:26 +0000
Manifest next update: Mon 19 Oct 2026 17:01:26 +0000
Files and hashes: 1: eU3WvqTQZ2fre7Ec2nVr3mIM1X0.roa (hash: XN1QJeT9QeabS5s3vpkRCuosS5N47BOATxEJo4iAxOk=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: iD8oLKtyqpJxk499hzt6NLBKDIaX/4ZLimzs6SVE5ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:f6:09:42:14:ef:e5:0a:85:11:3e:af:c1:0f:92:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Oct 18 17:01:26 2026 GMT
Not After : Oct 19 17:01:26 2026 GMT
Subject: CN=385fb7637f3b2c9ae6c7b336ee77e20d2e1b22c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:d0:0a:ae:14:b3:be:4b:31:9e:7c:ca:e4:
85:0e:39:e5:cf:fa:14:63:4d:f7:bc:75:79:bd:6b:
f2:1a:77:86:3c:a7:f5:97:b4:1a:c2:ad:a4:eb:e0:
e5:65:64:3d:e0:81:58:e8:5f:bb:49:10:85:55:ab:
ce:b8:04:f0:ed:28:09:03:41:ed:39:4a:07:9b:c4:
cb:09:ec:6b:49:d6:66:04:4c:97:1f:aa:f9:a1:94:
1d:c6:b3:63:bd:9b:21:38:40:71:d9:e1:38:a1:f9:
5b:2d:38:33:6f:00:67:fb:e7:68:d1:2e:bc:b1:82:
74:1b:0b:27:58:cb:96:dc:f7:c7:1d:29:e9:98:ff:
e2:54:61:d7:cf:24:27:33:33:84:e0:94:9e:a4:25:
6d:0d:12:61:79:46:79:72:d3:ef:4c:5c:84:65:0d:
45:d1:ca:69:ae:47:6c:14:7d:85:0d:7a:b2:f1:3e:
12:84:b7:49:7b:e4:c6:5d:1e:e1:e0:bb:ac:f9:5c:
1c:64:45:93:77:02:16:6a:64:4e:54:c1:3e:e8:12:
9c:44:04:54:35:b5:ff:63:28:a3:f8:94:74:de:94:
5f:85:64:4d:6c:79:a7:04:b5:3a:65:ac:c9:de:a4:
5e:37:2a:20:ef:56:f4:11:1e:78:14:f2:31:8a:ea:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:B7:63:7F:3B:2C:9A:E6:C7:B3:36:EE:77:E2:0D:2E:1B:22:C1
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:e5:aa:0c:2c:26:44:8a:a3:50:4a:2f:16:3b:64:60:b8:29:
2d:8f:35:b4:4e:a6:b0:f1:80:6c:32:e4:24:89:8e:d8:c4:dd:
aa:ea:5f:ed:8f:a4:75:3e:d3:fb:bd:5b:12:c9:ed:5a:28:b8:
07:cd:da:41:fb:57:82:57:e9:32:2b:ab:13:aa:4e:b7:0d:d1:
56:61:0f:e5:8a:a9:b3:42:70:f7:13:8a:da:16:dd:69:ca:98:
e7:f9:8b:bd:28:81:e7:bb:f4:29:ac:05:fb:6b:57:f3:6c:74:
03:63:47:9f:d0:ac:58:e4:7e:d0:9c:15:e3:04:5d:b8:43:d0:
02:92:be:de:ac:24:ea:fe:cb:f5:81:1c:9f:cc:d3:0d:ba:e0:
11:3a:7a:54:5b:9a:77:e6:de:e0:95:cc:b2:d3:34:64:01:50:
d8:7a:ce:37:bc:4e:bb:16:b1:a7:26:d0:08:67:82:19:6a:fe:
89:a1:ef:d2:89:d6:7d:ad:ea:6c:cf:53:6a:05:39:ed:82:c2:
05:7e:e1:61:da:33:cf:c0:9e:40:c8:eb:d7:4e:a0:47:b2:29:
14:66:2c:d1:8f:91:a4:5e:80:73:f5:af:6f:3c:83:76:10:ab:
dc:c2:b7:5a:5c:6a:34:df:99:30:f4:d2:20:94:96:06:6f:0e:
e8:2e:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:50:54 2026 by rpki-client