
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: InErhl5U7cpLmVTu3OuWM6lo3yVbet9tPqSXdAxmozU=
Subject key identifier: DC:F4:BF:66:D2:67:4B:A5:93:13:04:B9:53:82:0B:89:D6:C5:36:42
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 01A17B4D3DA485E96A0CA0F3F3101A384FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 07A8
Signing time: Tue 27 Oct 2026 03:00:21 +0000
Manifest this update: Tue 27 Oct 2026 03:00:21 +0000
Manifest next update: Wed 28 Oct 2026 03:00:21 +0000
Files and hashes: 1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: yXPpGQeGc/X57/4/0jvwy6YTGEdZwUkvtTwthfAt38s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:3d:a4:85:e9:6a:0c:a0:f3:f3:10:1a:38:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Oct 27 03:00:21 2026 GMT
Not After : Oct 28 03:00:21 2026 GMT
Subject: CN=dcf4bf66d2674ba5931304b953820b89d6c53642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:ee:c1:3e:70:ee:4d:55:1b:1d:f4:73:e4:
f4:b4:94:94:85:2b:a4:09:fe:be:b5:d2:0c:58:6f:
25:ea:c3:88:c5:c8:3d:a4:86:c0:32:42:14:16:2c:
da:d7:b7:c1:2e:ea:69:bf:4f:f5:5d:1c:2a:3b:28:
18:bb:90:d3:84:d4:60:16:60:b3:5e:ea:c9:83:aa:
63:39:5b:28:27:df:a2:3e:47:19:96:56:3b:3e:ed:
13:ac:d2:17:5f:db:ca:80:ff:66:7e:04:8a:55:18:
f0:af:f1:cf:78:4d:81:52:4a:58:ce:6f:02:71:23:
68:9c:9c:1a:12:31:78:4a:df:7c:df:75:17:02:79:
ce:7b:75:e5:ce:31:1a:fb:d1:4a:13:76:10:ab:6c:
96:8b:f0:b2:0e:48:f6:4d:17:15:3b:76:e0:a9:d7:
66:5f:ae:0b:3b:d9:bb:5c:41:ec:22:b2:2e:83:04:
17:1d:2c:be:b9:fc:ff:36:4d:ff:cf:bb:43:bb:32:
54:6d:6e:e2:6b:c4:bf:51:3d:7a:f4:61:ae:a4:35:
ae:d7:a3:38:6a:44:16:9a:13:9e:33:77:9d:d0:a7:
89:be:13:5b:d6:8f:e7:66:f5:4d:f9:53:e0:2a:78:
d2:98:ad:a5:ef:7d:71:57:81:4b:81:79:15:b1:2f:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:BF:66:D2:67:4B:A5:93:13:04:B9:53:82:0B:89:D6:C5:36:42
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:37:d3:58:f9:28:18:99:e2:78:6b:2f:d0:99:ea:72:14:
7e:fc:01:26:5c:cb:3e:72:cf:ec:e2:1b:e5:b0:fb:02:c1:67:
56:70:fe:25:ac:31:34:ad:c1:bd:d5:f2:ef:cb:a8:0d:9f:b5:
d0:a6:8d:39:71:1a:6d:3b:a0:f1:56:66:89:41:4d:59:c1:8f:
11:a6:ad:ec:8d:a7:7f:bc:81:e9:c5:c6:9e:0e:18:e8:66:60:
f1:7e:0b:7f:c7:df:0f:66:81:64:d6:b1:ca:e5:20:1b:a5:19:
c5:cc:f9:54:38:32:55:29:f3:b5:e8:83:10:24:df:bb:19:1e:
54:3e:dc:78:17:48:02:f7:11:65:c2:1b:fe:4f:1c:f1:34:1c:
ba:95:61:ce:e4:d4:8d:6f:73:16:13:45:ee:28:82:07:6e:cf:
89:66:e3:0a:84:22:be:5e:70:fc:e4:1b:77:5c:6e:1b:8a:ae:
0e:ef:bf:e1:8b:cf:25:08:71:e6:9d:50:64:c1:27:2f:88:6c:
eb:c5:46:ff:20:b7:f5:bf:cd:79:88:35:0a:93:65:80:f6:19:
04:e1:fe:56:9e:fd:fa:25:ef:23:8f:7f:8e:d1:f6:62:4c:c8:
1c:15:b4:6e:51:44:67:63:4c:82:d7:a8:e5:1d:af:20:4f:f9:
c8:dd:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:26 2026 by rpki-client