Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
File: wvQTfZw_qGHggQT02hKJ2un9XrA.mft (raw, json)
Hash identifier: u8KmjLtJAKTdeNRE87LZyA58UlFnlOvm5vSGMDN/vgE=
Subject key identifier: 7E:A7:CD:3D:02:48:13:4D:14:E2:B8:14:0E:7F:EB:B5:14:28:04:2C
Authority key identifier: C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
Certificate issuer: /CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Certificate serial: 01A16C4877F43FCB0E93597B3E17C98AB64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
Manifest number: 64
Signing time: Sat 24 Oct 2026 05:00:50 +0000
Manifest this update: Sat 24 Oct 2026 05:00:50 +0000
Manifest next update: Sun 25 Oct 2026 05:00:50 +0000
Files and hashes: 1: AzooWuklm-3P7PJRiw22avIbtzA.roa (hash: kgzWAt/cYY+uCetaCudrArQVeL4ScGnH/K5j6IEA5fI=)
2: wvQTfZw_qGHggQT02hKJ2un9XrA.crl (hash: PDtFxAhkk/mkBR+wCII8TWWL3tEQowDEggAuA9UpnYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:77:f4:3f:cb:0e:93:59:7b:3e:17:c9:8a:b6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Validity
Not Before: Oct 24 05:00:50 2026 GMT
Not After : Oct 25 05:00:50 2026 GMT
Subject: CN=7ea7cd3d0248134d14e2b8140e7febb51428042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:20:20:e5:d7:6e:5f:f0:31:8b:91:98:40:
1f:d2:44:b4:00:13:b6:3f:c1:e3:62:2b:3f:df:86:
44:7d:fb:ad:72:52:00:09:5f:2a:15:99:be:74:ed:
49:8c:5c:fc:4c:26:cb:28:ca:95:1f:a2:70:9f:72:
92:5c:5c:33:f3:81:4a:8c:ca:cc:d8:7c:1d:97:cc:
e7:5e:ff:5c:35:1a:6a:f6:65:18:28:13:79:9e:86:
7a:69:ba:be:b8:22:27:67:30:13:9a:ea:78:c0:8c:
94:7d:35:30:8e:ea:8f:ad:e5:9b:3c:ed:c2:29:db:
39:65:c9:2f:e0:99:5d:3a:05:12:68:6e:21:88:a4:
07:64:07:21:d2:de:9a:85:4b:1c:89:ad:40:d3:b6:
39:55:45:34:e7:33:77:05:45:ea:b3:6d:3e:7c:c5:
5a:4f:9c:57:39:cb:05:77:a3:98:f2:2e:b8:8b:d9:
15:2a:23:e0:5d:a3:13:d0:f3:e1:b2:45:ab:01:10:
26:ba:a0:da:6e:d5:c1:af:86:27:d9:74:3f:3b:0d:
04:b2:1b:f6:d5:1b:cd:b4:ae:38:b0:12:93:84:6b:
df:90:74:d9:74:3e:99:bd:43:34:ec:d9:2a:4c:0b:
fb:c9:b7:03:bb:f7:07:49:54:1c:8f:5c:84:ea:cc:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:CD:3D:02:48:13:4D:14:E2:B8:14:0E:7F:EB:B5:14:28:04:2C
X509v3 Authority Key Identifier:
keyid:C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6c:c4:d0:1a:f0:12:4b:b4:aa:0f:c9:99:79:75:8c:32:08:
6c:3d:4e:f7:0d:80:bf:51:26:ef:8c:eb:2a:e4:0e:b4:f7:88:
26:c7:12:5a:11:74:c8:f0:8a:80:6d:15:fc:6a:52:2c:a7:1b:
23:50:bb:8d:d9:d4:1b:f9:77:e1:06:2d:48:a5:79:4a:ff:73:
99:d9:a6:b9:7e:5e:28:dc:41:05:53:57:93:d1:1c:06:2c:b5:
ca:d0:26:51:ed:03:90:ae:ee:bc:1e:01:55:a0:86:26:a2:2e:
2a:9d:7e:6c:0f:e7:4d:df:d4:1f:9c:8f:cf:43:45:b0:4e:e4:
fc:2f:15:62:89:5e:40:6c:28:fa:c2:74:42:1f:83:21:23:4a:
51:5a:c8:d5:22:3c:e0:e6:d7:32:ae:ab:f4:1b:1b:b8:df:4e:
11:ec:e1:5d:ef:ad:3b:cb:6f:75:d6:42:3c:ab:db:85:66:89:
6a:f5:3c:cc:ab:fc:25:99:41:7e:76:c8:14:9a:d8:92:b4:e8:
96:0c:7b:aa:bb:fc:59:4e:1a:83:36:c6:83:0f:d8:be:ed:be:
4a:7a:86:2b:cc:ea:59:98:91:38:0a:25:5f:c9:8c:5f:d4:ae:
4e:99:78:05:d9:84:8c:06:42:f7:19:61:f0:b2:eb:77:90:e2:
2f:88:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:39:25 2026 by rpki-client