Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: fOnrQvUYqshyaGde0pVbyUuTvr4UqKy+snlk/mlsmTM=
Subject key identifier: AA:3D:9C:F7:7A:DD:6A:2D:37:73:25:8D:9E:C4:66:79:A8:D6:75:B9
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 01A17E85D181A7010833F870422D2961E904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0D3F
Signing time: Tue 27 Oct 2026 18:01:01 +0000
Manifest this update: Tue 27 Oct 2026 18:01:01 +0000
Manifest next update: Wed 28 Oct 2026 18:01:01 +0000
Files and hashes: 1: 3DSxcK9BYX9k5tvNNrwWZ7kYjz4.roa (hash: LlbtQ15mDycazVoOyoBxW8uz2UEgpVUqP+tEU+6Dy34=)
2: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: qpLhJe44bhHwShhjvFA1OZ65NzvrL3CytGW4znzqifo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:d1:81:a7:01:08:33:f8:70:42:2d:29:61:e9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Oct 27 18:01:01 2026 GMT
Not After : Oct 28 18:01:01 2026 GMT
Subject: CN=aa3d9cf77add6a2d3773258d9ec46679a8d675b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:c0:2b:ed:ad:3d:46:16:8f:06:9a:55:a7:
f9:db:b1:71:d2:3c:61:28:b8:02:1e:8a:71:04:e0:
87:a8:de:7e:4c:e9:ed:c2:54:af:0f:f5:25:4a:5b:
5c:b1:53:72:0f:f2:68:e3:18:8a:52:57:2f:7b:cc:
6a:a5:0d:f9:ce:5c:c0:18:4a:e5:84:1e:3f:54:c6:
be:bc:e6:98:b2:b3:b4:26:a3:c2:b8:c3:50:b4:00:
62:71:af:45:29:88:c4:2a:b1:81:4b:15:23:c6:62:
36:d1:ea:48:81:95:85:20:2f:64:2b:d4:1f:4e:ab:
fa:10:17:5b:ba:9e:b3:6d:96:eb:bc:d7:e3:b2:2c:
d8:39:b6:d8:a8:c6:cf:7f:4c:25:bb:8f:33:5d:a7:
89:93:4a:35:25:48:30:dd:a4:41:64:8e:73:9c:5e:
53:cc:48:e6:25:56:d8:a0:0e:d2:d6:03:7e:f2:1f:
f3:45:30:ac:56:98:05:3c:c7:64:39:0a:04:62:48:
be:95:00:db:92:15:59:c9:09:5b:ab:70:e2:1e:79:
4a:0f:f9:c0:0f:39:88:c3:50:4f:7a:72:64:d1:e2:
77:22:76:1b:07:ef:95:53:fa:dc:14:71:a9:9d:cd:
82:d4:fa:47:cf:3c:84:12:01:ff:65:8d:6c:cc:45:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:9C:F7:7A:DD:6A:2D:37:73:25:8D:9E:C4:66:79:A8:D6:75:B9
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d4:81:39:38:e5:ab:f7:29:84:e0:80:40:4a:03:bb:bc:71:
7d:62:10:f5:72:b7:09:d3:71:09:04:f5:43:62:96:06:26:e5:
1b:da:10:02:a1:0d:da:d6:aa:ec:5e:30:55:d7:e4:9a:f0:46:
fe:bd:d5:7d:be:26:cc:1b:93:2b:d2:f7:14:c6:42:96:3f:90:
98:3f:fd:a0:04:1e:af:b9:c6:a8:5d:7d:86:e9:9b:29:85:46:
29:c7:14:65:1d:33:e6:4b:46:1f:86:96:fb:ce:73:97:aa:37:
65:ab:16:df:bb:e9:2b:12:36:f9:e2:ed:03:c7:c2:62:c6:2a:
da:74:39:2c:03:31:3a:c3:f1:4a:2e:3f:cc:ac:f2:88:a5:9c:
21:1a:24:7a:d6:7a:cd:13:62:42:03:05:b4:81:02:f1:6f:ac:
80:02:4c:34:79:e2:69:ec:b0:2f:62:ce:e6:de:44:9d:6e:61:
bd:1c:8e:fd:be:fd:f6:a9:79:3d:e7:3d:cc:7f:00:5f:d5:40:
97:e7:ad:5d:f5:29:38:6f:c1:c0:83:e9:80:99:0d:25:78:b2:
0f:3c:db:e5:e6:34:15:85:c9:91:63:02:94:6c:3b:5b:96:05:
d4:5c:50:6d:39:b1:8d:6f:23:56:56:e5:d8:73:2d:ec:81:b8:
5a:fc:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:47:07 2026 by rpki-client