Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: 03YoS/eLU2cSTIRndipyHUClUb2vedMSMFBWTTyJRy8=
Subject key identifier: 4B:62:2F:73:FD:36:0D:D9:58:8F:F9:56:45:EF:EB:23:90:7D:D8:A5
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 01A179CC97C03960EAB6A71F0C2C34DF82F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 1A33
Signing time: Mon 26 Oct 2026 20:00:13 +0000
Manifest this update: Mon 26 Oct 2026 20:00:13 +0000
Manifest next update: Tue 27 Oct 2026 20:00:13 +0000
Files and hashes: 1: HHKPepyJHyyJmRpg5BdW85bx7Rg.roa (hash: leRatzJU0XPm4R4WH9CK8QwowVlDLVOizoSP6t+BnUo=)
2: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
3: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: 5/BLXlXJcjNSraRsVKkYx8u+7v4iApH4P9ktge0bCNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:97:c0:39:60:ea:b6:a7:1f:0c:2c:34:df:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Oct 26 20:00:13 2026 GMT
Not After : Oct 27 20:00:13 2026 GMT
Subject: CN=4b622f73fd360dd9588ff95645efeb23907dd8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:0b:63:5c:62:b5:0b:c7:58:25:7b:bd:e2:
21:c5:20:3f:37:41:85:2b:25:79:cc:ec:b8:6f:66:
4e:64:e2:8c:bb:11:43:38:fe:a8:73:c0:ed:33:91:
ac:b5:8c:0c:80:dd:11:9c:a9:93:15:4d:b3:ba:fe:
5e:10:d9:5a:10:3d:a6:03:06:dd:0e:66:58:29:74:
9d:43:07:6c:eb:96:01:42:57:d7:d1:cd:de:68:af:
2a:82:a3:5a:00:36:69:0a:c5:75:50:9d:01:ab:20:
48:54:47:fe:10:da:2a:43:b8:04:28:94:5e:ed:bc:
e9:70:24:ea:b6:f1:48:6f:f1:e1:55:63:24:25:b8:
9e:b5:45:d9:00:e3:a8:d4:5f:9f:cc:96:13:33:47:
54:fe:9c:b1:28:56:b5:2e:bd:03:7c:0e:01:0d:aa:
56:57:22:1c:5a:7e:65:bf:ac:ab:c5:f1:92:48:22:
42:7a:30:54:85:e7:a4:93:f1:2c:13:1c:a1:2f:00:
ef:4b:ef:0d:46:db:4d:18:d8:f7:75:a4:95:f3:d1:
b0:89:73:45:6b:df:c5:49:f9:7d:cf:2c:78:e1:dc:
fa:54:21:66:8c:26:8b:c2:23:fc:53:4f:e6:77:92:
5c:2e:05:26:68:0b:5d:7b:29:ed:12:61:ce:5a:23:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:2F:73:FD:36:0D:D9:58:8F:F9:56:45:EF:EB:23:90:7D:D8:A5
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:27:b7:e4:15:f3:68:31:09:61:55:22:fc:5a:f1:eb:40:a2:
e0:56:96:3c:af:1d:ad:45:b1:26:35:73:0b:08:11:35:bc:23:
1e:5e:7d:34:dc:2f:c7:4e:cb:68:b8:6e:ec:13:b6:95:b4:4d:
ed:77:82:66:6e:52:80:36:ab:b3:38:fc:c2:ae:61:01:b9:0f:
24:e3:88:bb:d0:85:5b:21:30:b7:a2:c0:d4:0f:da:3d:05:9f:
8d:63:cb:2a:78:02:99:ff:ba:53:3a:4b:f2:53:f9:4e:65:d4:
d4:b9:cd:1c:13:72:ca:58:22:e6:96:4d:e7:22:6e:8e:b6:be:
9b:f9:79:9e:ce:5f:a9:33:bc:33:89:40:05:5b:42:b7:81:3d:
58:ea:cd:28:46:af:ce:6a:41:27:01:12:98:9e:27:e7:c8:44:
f4:1b:df:f8:24:36:20:15:0e:23:3b:24:49:1d:e5:aa:d9:ae:
f3:78:3b:ea:ec:21:d7:49:24:8b:21:a0:6c:79:9b:b6:a7:ec:
e7:f0:6e:98:c7:e5:48:95:d2:3f:56:7a:fd:2d:2d:ea:26:d0:
98:c1:f7:22:9b:60:38:5a:ef:3b:1f:10:7a:46:40:f3:94:5f:
97:80:b2:99:84:3f:7f:29:52:06:d2:52:65:8a:f7:9c:fb:d4:
f9:c2:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:00:37 2026 by rpki-client