Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File: Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier: qlSJLAZHOVZ/emCNXggiW7s8w3+CGK/q+abXQI05Duc=
Subject key identifier: 3E:C8:4A:BB:3D:E1:CB:36:40:82:F9:9D:76:20:2E:39:4B:7F:79:62
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 01A08BD611EB4A6E967A3F1424657D284F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number: 09A3
Signing time: Thu 10 Sep 2026 15:00:57 +0000
Manifest this update: Thu 10 Sep 2026 15:00:57 +0000
Manifest next update: Fri 11 Sep 2026 15:00:57 +0000
Files and hashes: 1: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: +clFz/6LgD2RQxZuJjZ+soR41xiLTWRNyLgUukseC38=)
2: d3VInPdLirBsLVvGRzvBNOU5GVY.roa (hash: 1H0FqCjUTy4udmz5J8jd2r4LaLaCADLPuji2yS6Osxs=)
3: vskKnMst18EVmBm6lBj0YzIpNuk.roa (hash: jTxDQ4a1vled+k24Z+iZwB1mJUNUMg7H5qSldRSueFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:11:eb:4a:6e:96:7a:3f:14:24:65:7d:28:4f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Sep 10 15:00:57 2026 GMT
Not After : Sep 11 15:00:57 2026 GMT
Subject: CN=3ec84abb3de1cb364082f99d76202e394b7f7962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d6:93:c0:06:4c:1f:aa:0f:6d:6e:2c:ef:26:
81:74:86:a1:b9:5d:d3:71:08:64:7d:b8:f9:a3:8e:
04:75:78:13:53:ef:d3:4f:c1:94:6e:28:20:62:65:
6c:09:d4:08:77:d4:0a:62:e9:d5:06:84:11:7d:61:
28:6c:1a:e5:cb:8a:73:df:3c:b6:91:17:66:c3:25:
4c:d8:59:1d:06:d7:88:fd:7a:a4:86:75:63:44:0c:
d8:35:b0:f1:03:5d:03:b0:70:cf:be:66:ae:0a:30:
09:5b:2c:07:b8:32:30:12:f4:78:c7:2b:26:70:2e:
c7:0b:15:90:a7:8e:c2:1e:fc:af:08:3a:0c:de:c8:
1b:06:e9:2f:8d:1f:5d:78:07:68:07:df:b1:3c:8e:
e3:25:cf:ac:fc:82:ae:32:15:41:a7:e0:0b:51:aa:
5e:fd:4a:c9:74:2a:42:e7:3f:57:d3:44:a6:21:1f:
4d:d6:84:79:19:ed:ba:5c:2e:38:34:ec:6f:31:b9:
f8:7d:ec:20:81:e3:e9:56:b0:d1:3d:13:a4:8f:23:
e1:5c:15:d7:26:c8:c8:b4:84:44:fa:ce:09:df:b4:
bc:21:ed:63:ee:d4:9d:b1:7c:15:53:ae:59:26:d5:
5b:f5:28:24:22:c7:e9:c9:89:be:0a:90:cd:f8:9d:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:4A:BB:3D:E1:CB:36:40:82:F9:9D:76:20:2E:39:4B:7F:79:62
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c3:18:63:d7:d4:53:75:89:4e:6d:a1:64:30:9a:28:7d:41:
b4:ce:1e:38:d5:6d:1c:a7:2b:c9:ab:4c:49:be:f8:2e:e9:92:
e1:60:8a:a1:fd:e6:de:1e:2a:54:05:30:f7:e8:3b:55:0a:5c:
84:fe:83:fe:a4:0d:96:50:d0:47:11:f0:ca:95:90:c7:ce:f9:
b4:ed:af:50:3b:77:6b:e4:36:74:5a:5f:01:b5:49:bd:38:da:
ee:b1:14:bb:0a:af:8c:6d:c8:6e:91:eb:02:50:e3:ca:c6:c2:
44:b7:2f:5b:42:9e:73:b6:80:c6:b5:ea:77:30:e4:e0:ab:2f:
74:e6:75:72:21:7f:0e:8e:d5:b0:d4:57:ce:e6:88:0e:29:05:
35:f9:6b:ce:84:70:44:55:c8:d1:ed:47:8a:68:31:db:85:a3:
e3:75:33:d3:b2:ad:e4:5b:34:ea:fe:52:b9:0a:29:45:bb:6b:
f4:02:e4:68:32:24:72:6c:97:4b:63:cf:39:27:57:c8:de:cc:
b7:3c:86:79:58:73:4b:83:6c:c7:f9:a9:dc:ed:3c:99:a3:0f:
b9:6a:46:ca:d0:8d:50:bb:aa:11:bf:d8:7f:0c:0c:52:f0:6b:
48:f9:b9:9d:13:98:03:7a:3b:56:4d:7e:af:b7:03:17:bc:b2:
ed:0e:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:27 2026 by rpki-client