Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
File: WDD39FE6MtJVLe9JEsYKZIjmmEk.mft (raw, json)
Hash identifier: 2CjeBC6iirD9Lj0PSlFgEmUXo3AkMJZtl0L8p7Mvdes=
Subject key identifier: A9:D4:3A:AC:F9:2C:10:8E:10:DD:A9:F4:04:71:83:8F:EB:6D:66:28
Authority key identifier: 58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
Certificate issuer: /CN=5830f7f4513a32d2552def4912c60a6488e69849
Certificate serial: 01A1A894847E2F9FFCB463E14D9DB24F36E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
Manifest number: 2F
Signing time: Wed 04 Nov 2026 22:01:07 +0000
Manifest this update: Wed 04 Nov 2026 22:01:07 +0000
Manifest next update: Thu 05 Nov 2026 22:01:07 +0000
Files and hashes: 1: EET35YPKig-aB_CKmem9UXR7L3U.asa (hash: KSs20rWP8bv4R9wraJ1iDlFwuW3OYe5Js7R3LMI+1nE=)
2: WDD39FE6MtJVLe9JEsYKZIjmmEk.crl (hash: kZb5b/Elju+f3VTYn3gSSGtQDU44GMymPtvmtnEn+8M=)
3: lXpHyRuU47BtSBJOejqQ3lZOiZc.roa (hash: GSdwI6UioXb7U3hysXEMkdF79E/2zxXeEnRJv4atxEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:94:84:7e:2f:9f:fc:b4:63:e1:4d:9d:b2:4f:36:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5830f7f4513a32d2552def4912c60a6488e69849
Validity
Not Before: Nov 4 22:01:07 2026 GMT
Not After : Nov 5 22:01:07 2026 GMT
Subject: CN=a9d43aacf92c108e10dda9f40471838feb6d6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:88:48:61:82:f3:6e:46:1d:f1:f6:bf:f3:
c1:3b:ee:5e:6f:5f:8f:f3:3e:5d:eb:89:4a:31:bf:
14:5e:fd:87:a0:70:cb:12:b0:dc:d8:b2:e8:99:d7:
60:bf:07:68:3b:28:c8:e5:72:aa:37:83:91:1d:81:
a1:2e:46:b3:d5:b2:7a:c2:09:12:7b:71:8a:01:31:
c7:c5:14:43:60:38:ef:10:ac:ff:3e:26:f3:1d:63:
41:13:50:c4:c8:c4:5e:ac:8c:4c:04:1b:59:d8:a2:
50:73:e8:bc:50:c2:3c:b2:69:be:68:91:13:b2:d0:
6c:ec:8b:b2:29:7b:88:19:58:39:48:ac:89:5b:f3:
26:1c:9b:52:12:8b:73:f6:a3:e1:dd:f2:33:b1:97:
f3:6d:0b:4b:27:7d:a3:46:f8:96:da:91:2d:ba:7d:
ed:26:47:3d:e7:1c:e5:3a:44:08:42:5c:12:54:48:
c2:4c:e4:ce:eb:5a:75:a3:d2:1d:ff:ac:04:73:5e:
4a:e3:cb:3a:bf:fb:be:68:f4:e0:e8:ad:30:97:1d:
b0:4d:1a:d5:aa:57:17:6b:41:95:c7:33:2e:39:8a:
ae:20:76:52:0b:68:8f:78:de:a6:d6:c0:66:f8:1c:
23:6d:f4:79:33:5c:bf:dc:b8:54:be:e3:4c:91:5a:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:3A:AC:F9:2C:10:8E:10:DD:A9:F4:04:71:83:8F:EB:6D:66:28
X509v3 Authority Key Identifier:
keyid:58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:a5:01:59:48:71:1e:21:26:a2:b9:29:02:c1:b8:ad:4d:
6e:99:2e:a3:0c:a4:2f:50:5c:9c:0a:d0:16:d3:97:2a:3a:6d:
af:6d:40:b7:37:a5:99:65:8a:a9:fc:d0:4b:60:94:26:b0:76:
96:64:e0:6e:b9:72:89:01:89:c2:0f:38:ce:3e:11:b3:ba:3f:
78:ec:ab:f9:43:85:9e:3f:49:ab:6c:f0:19:34:d6:af:46:2e:
3f:10:b2:e0:70:d9:7a:2d:f6:4a:01:bd:2b:31:4a:e7:ee:9c:
68:d7:27:99:f6:86:d4:b0:37:5a:8d:88:a4:c2:7a:20:91:af:
b9:3d:dd:48:cc:52:89:e8:22:48:c5:15:b4:19:9f:8f:7c:a6:
df:ce:a6:e9:aa:f5:0e:23:0c:78:48:5a:97:3a:5d:d0:92:66:
4b:4b:f0:ae:97:64:d9:66:6c:98:e6:39:4a:6d:ad:c9:b0:bd:
f4:88:4b:e8:07:de:6c:23:93:ee:d3:2f:99:4d:ab:1c:26:74:
8d:cd:b3:e4:b8:9d:08:5f:1f:fc:e2:5f:1c:ce:84:5e:97:ae:
f2:00:8d:a5:0b:8e:95:6f:b6:ec:bf:8d:ff:52:b8:31:27:5c:
53:f0:41:15:97:25:e3:7f:73:d2:a8:09:d5:87:75:51:eb:a7:
9f:1a:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:49:19 2026 by rpki-client