Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: FgQkRdHTDUrFD4Ub7A4o0fT5dKu5yY5hl4jyc+Jk/bQ=
Subject key identifier: 95:3D:AB:0B:CD:A8:6E:CC:05:9B:75:08:2F:8E:2B:8E:49:C6:32:0E
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 01A17D3C4EB3CD6D7B3E8805330CE626644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 07A9
Signing time: Tue 27 Oct 2026 12:01:06 +0000
Manifest this update: Tue 27 Oct 2026 12:01:06 +0000
Manifest next update: Wed 28 Oct 2026 12:01:06 +0000
Files and hashes: 1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: e0HqOmnRY8a/t+79J5Lx4EpBbQEq2NtiWznF/l7Qe7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:4e:b3:cd:6d:7b:3e:88:05:33:0c:e6:26:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Oct 27 12:01:06 2026 GMT
Not After : Oct 28 12:01:06 2026 GMT
Subject: CN=953dab0bcda86ecc059b75082f8e2b8e49c6320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:d6:d9:e9:b0:e6:f6:6a:b3:cc:9d:1b:d7:
f9:54:ad:0f:4b:e2:1e:d9:f8:b0:0b:7a:7b:bf:c1:
25:43:a9:9e:f3:2c:7b:8e:56:ba:71:f3:73:67:fb:
f4:9a:2b:5b:9f:d7:af:73:c6:78:79:29:28:3e:d6:
88:3c:9c:72:68:71:ef:96:ae:8c:50:e4:32:5a:4e:
92:45:db:f8:0e:22:5d:54:3b:ce:c2:70:76:12:28:
32:a0:db:a3:de:22:a9:0f:df:0c:fe:44:e6:ea:4a:
be:5c:70:d8:05:43:9d:8e:42:2c:c6:e7:00:17:16:
44:20:4e:9d:a4:1d:ce:d1:99:fc:83:99:61:1b:28:
1b:36:99:1e:bc:2d:5d:5d:e6:8e:9a:d2:93:43:6f:
0b:ed:92:3e:f5:c1:57:de:ba:7d:b0:81:d2:a8:07:
26:41:a4:19:4f:36:55:31:33:d0:ed:f5:97:69:c6:
dc:c5:9d:9d:c0:29:dd:1e:1d:ed:a7:73:9a:ab:b0:
49:d1:86:0c:f5:50:a7:46:9b:e3:71:43:8a:df:be:
89:92:eb:bf:95:8d:09:e8:66:bb:a0:26:7b:4b:c5:
0a:22:c5:65:ff:6b:82:c9:26:4a:18:b3:bb:08:6c:
3f:e9:4d:4f:02:1f:aa:3c:4a:de:fb:2b:a6:27:e4:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:AB:0B:CD:A8:6E:CC:05:9B:75:08:2F:8E:2B:8E:49:C6:32:0E
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:43:c6:5c:21:a5:24:a5:54:97:53:a5:cb:13:eb:70:b5:11:
c2:da:d4:80:12:24:67:11:14:ab:d4:2f:57:0d:58:e0:36:21:
f1:17:1e:94:bb:96:fb:61:14:78:22:67:e6:61:0c:51:60:7a:
16:24:49:8d:7f:4e:ec:e7:2e:49:bb:3a:4f:f6:b6:85:26:cf:
d4:5a:c0:cb:02:2a:da:0f:3c:c2:56:89:ca:0c:56:3f:50:8f:
e9:31:a7:19:53:b6:e5:a4:65:15:bc:3c:13:99:66:a7:ca:dc:
6e:0b:cd:3c:04:17:f5:46:88:51:93:8d:04:ec:82:cd:b8:41:
53:c7:a6:06:b6:39:dd:f5:4e:33:d2:42:f2:01:2a:ac:18:85:
0e:c2:3c:e4:ab:e5:a5:0d:23:0b:01:ac:7e:04:2f:8a:04:e7:
51:16:2b:d9:f6:87:66:30:f6:dd:ed:ce:6f:6e:16:b1:ae:1c:
66:ee:27:80:57:d7:88:b2:d8:fa:85:a1:f8:1f:ac:9d:f8:b7:
cd:56:73:11:18:a4:28:24:be:0e:fa:68:2c:8d:a5:bb:19:8f:
68:f7:38:75:2a:6d:a1:c5:d6:76:35:aa:d7:f0:66:5d:b2:d1:
fb:44:a4:08:3c:9e:68:ef:29:dc:88:7e:b1:d9:5d:dd:cd:52:
02:1e:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:19 2026 by rpki-client