Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: uGWILiZAFJflBjR0uNTQOmJ0tDpt+bea5ZT0bEgr5FA=
Subject key identifier: 24:7F:0E:F4:6F:2A:D1:6F:C0:72:46:E0:36:7B:23:F4:0C:A5:A3:1A
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 01A17F9873C3CB197E28A9CBD04EDAFE87F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 23:00:59 +0000
Manifest this update: Tue 27 Oct 2026 23:00:59 +0000
Manifest next update: Wed 28 Oct 2026 23:00:59 +0000
Files and hashes: 1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: +ZNvM1NE5/UxbzJj37ehyAztFBRDaLppJcOXeQ9To3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:73:c3:cb:19:7e:28:a9:cb:d0:4e:da:fe:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Oct 27 23:00:59 2026 GMT
Not After : Oct 28 23:00:59 2026 GMT
Subject: CN=247f0ef46f2ad16fc07246e0367b23f40ca5a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:6a:58:15:94:65:6c:31:7b:4c:ae:27:0e:
bc:85:9d:80:be:04:aa:5e:21:07:cb:78:fb:49:55:
6c:68:2a:73:3e:a9:f5:31:0e:46:1a:6d:f0:1b:6f:
c0:07:49:c9:46:80:7c:94:71:f0:12:ad:cc:cc:6a:
1b:e4:b7:a4:21:88:a4:a4:41:79:36:cb:da:0f:91:
e1:9b:a2:ea:78:13:e5:b3:6e:44:f3:52:d4:f7:52:
eb:e0:b9:a0:aa:57:4f:30:ff:4b:ac:19:a5:c4:62:
74:a4:b9:df:c6:1e:d2:f8:2d:d1:84:94:91:da:02:
67:76:d4:42:c0:57:aa:7c:46:05:b0:ff:2a:e7:da:
f9:32:21:95:b9:f6:4e:bf:ed:73:f8:cd:0e:bb:8b:
a4:55:07:23:4b:64:ec:6f:48:cb:1f:f2:83:89:49:
22:65:60:ed:28:e6:4b:69:df:02:84:85:5f:3f:01:
96:01:d9:9d:01:cf:ca:1c:2e:e5:5e:65:d8:6d:0c:
a7:43:77:2f:6e:b4:ef:41:72:f8:77:12:23:00:7a:
a8:20:6b:27:ba:47:be:af:2e:4d:9b:19:0e:45:31:
6c:20:8c:fa:d6:cd:c0:1c:00:3b:35:40:ba:7b:b7:
03:8a:5b:dc:47:f3:d0:da:de:2c:63:35:6e:ed:3a:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:0E:F4:6F:2A:D1:6F:C0:72:46:E0:36:7B:23:F4:0C:A5:A3:1A
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bd:de:52:80:73:93:e5:be:a0:2d:07:2b:df:ce:b9:41:aa:
ea:18:7f:84:4e:c7:07:33:56:fc:83:ef:f7:77:be:ce:23:a4:
8f:1e:44:7f:fe:e6:bb:69:a1:39:6f:54:85:03:6f:35:c8:80:
4a:9c:a3:b8:d4:97:03:a2:9a:2f:a6:1a:5b:c9:57:0b:ec:48:
02:eb:b4:a1:5b:99:3a:05:3e:00:a7:7d:46:75:48:bc:71:06:
01:ba:5a:80:31:bf:36:f8:a9:d8:83:03:62:e5:44:fd:4a:65:
ca:25:f7:27:7d:70:9f:cd:d9:3a:8c:65:75:28:d3:a8:1b:2c:
7f:cb:4b:8c:d2:0d:3d:15:05:68:da:17:fc:5e:6b:a6:46:62:
ad:4e:01:97:17:11:8e:f6:5f:08:3c:37:13:c8:ff:af:90:e1:
75:d6:09:97:e3:e6:fd:bd:69:5a:5d:8c:7a:4e:30:77:9b:5e:
76:1f:35:37:7e:84:b8:94:95:70:f2:f1:a3:53:3f:17:10:b8:
47:c1:29:fe:de:97:a3:91:5c:e4:a5:5d:7c:f6:24:18:a5:a6:
7e:bc:a3:8b:08:54:1e:0b:7d:11:32:64:3c:be:79:9a:18:d9:
72:65:60:8b:59:f5:62:27:99:90:b7:d1:49:10:27:f6:bd:a8:
f4:75:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:46:27 2026 by rpki-client