Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: /Wp2cC77Q4tlbVZEZm4L0EB5Yq23UA/ZUevPWMvVlyE=
Subject key identifier: 27:1F:A5:6D:DF:06:94:D1:7E:3D:06:6E:8F:23:72:AB:44:18:EF:E0
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01A110E082AC5182A5A1EF87C261B038BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1AA8
Signing time: Tue 06 Oct 2026 11:01:51 +0000
Manifest this update: Tue 06 Oct 2026 11:01:51 +0000
Manifest next update: Wed 07 Oct 2026 11:01:51 +0000
Files and hashes: 1: KQegI9zFl4TTXrM0z9Yjv28lgns.roa (hash: Ej7A/eIErtk4SW4resekw38eVCxq6nz5fw0K4qp4xAQ=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: +xKDbVDqh7daX//CJ0OpzsluAf7ijJNYRN0Gh1TeSTs=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:82:ac:51:82:a5:a1:ef:87:c2:61:b0:38:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Oct 6 11:01:51 2026 GMT
Not After : Oct 7 11:01:51 2026 GMT
Subject: CN=271fa56ddf0694d17e3d066e8f2372ab4418efe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:c6:48:b7:84:92:a9:11:2c:e8:2a:bb:ee:
ac:57:ae:43:a1:58:02:6e:16:f5:d9:60:8d:9b:ec:
b4:5e:c3:a2:88:bf:d6:13:71:c4:23:e8:d5:9b:0e:
f9:33:02:ab:49:2f:92:9d:55:ee:3d:8f:37:b8:d5:
8b:ba:1b:17:ca:59:5e:fe:d6:42:d5:f3:e2:d8:4f:
64:03:9c:e7:7e:94:a2:d4:b4:dc:8e:51:9d:b3:9b:
b7:9d:0f:00:ff:76:3c:5f:97:7f:69:38:5b:70:e2:
36:94:5d:fb:55:45:d7:0d:5e:02:20:c1:5d:8e:76:
34:52:7f:ce:4e:2f:f6:6b:cb:83:8f:ae:6f:71:cb:
e9:19:82:0e:9a:26:86:34:f7:cc:7d:1d:c2:b1:46:
3d:f0:89:85:ef:e4:92:ec:e8:58:42:26:5e:9a:af:
5f:4e:8d:f3:81:6e:93:14:45:b5:2e:98:09:26:ae:
2d:9e:1a:be:95:fd:18:5c:9b:ae:94:16:1b:6f:1b:
11:4e:43:4b:a3:1d:76:0f:fc:09:06:ac:6b:07:9c:
16:f4:16:2e:3d:22:2e:6c:6c:c7:23:36:5e:18:27:
66:8f:5f:a8:6a:fc:e5:8c:a5:49:17:f0:68:0c:ee:
4b:56:ff:82:ba:2a:b3:e1:04:b0:a3:3f:c2:17:21:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:A5:6D:DF:06:94:D1:7E:3D:06:6E:8F:23:72:AB:44:18:EF:E0
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:a3:45:94:87:c1:84:9f:8f:46:38:bc:ff:30:6c:b1:03:
83:9b:ec:d4:b9:db:f1:2f:9b:91:ed:73:6a:ea:5f:b9:5e:c2:
19:c3:d9:7c:06:d3:62:95:75:b1:9d:38:df:df:66:f6:ff:bb:
84:68:b3:44:6e:25:cb:fe:ae:26:97:a5:73:c5:5f:d7:44:60:
95:34:d3:dd:56:24:84:3c:05:db:6b:f0:fe:c5:3a:b8:41:e8:
8c:25:12:12:e6:01:24:88:1d:75:1b:5d:0c:b6:10:e4:b9:a9:
5f:53:4a:78:50:20:4f:9c:ba:3f:c2:90:94:09:17:6f:00:1e:
e8:c5:7c:71:84:ec:60:dc:45:7c:b9:b8:39:4c:b4:26:76:6a:
57:10:82:01:84:61:6e:5e:a9:68:71:6c:7f:1d:7f:b2:ca:f7:
89:e3:29:57:0b:f7:b1:84:d9:01:fa:bc:d6:f1:3d:a3:1f:ec:
97:21:a2:1d:d9:eb:ae:22:8e:8d:80:92:e2:4c:55:2d:c6:0a:
ef:6d:49:e9:11:6c:79:f3:41:1c:c5:48:51:ee:1c:63:6a:ec:
b8:3d:40:18:2e:81:84:e0:f8:7e:11:b4:55:a5:90:b8:3a:51:
73:52:b6:60:9e:b6:7d:06:2e:e0:5f:33:2e:7b:b8:44:ac:8c:
93:72:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:14:56 2026 by rpki-client