Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File: Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier: ctVoPfgrS8TReMZf2UYtjuA8YC1xWo+cCh0eELqPMyc=
Subject key identifier: AE:6A:5C:FB:B2:96:6E:19:C0:78:07:7C:B4:1C:BC:9B:B7:17:86:33
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 01A17B4D38E5A3ACA7F966DF4A59A10513C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number: 0A1F
Signing time: Tue 27 Oct 2026 03:00:20 +0000
Manifest this update: Tue 27 Oct 2026 03:00:20 +0000
Manifest next update: Wed 28 Oct 2026 03:00:20 +0000
Files and hashes: 1: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: xUPbfTJd9OR3vmYdpH6h2tbRDxmkBd2gqVZ21oCVr9M=)
2: d3VInPdLirBsLVvGRzvBNOU5GVY.roa (hash: 1H0FqCjUTy4udmz5J8jd2r4LaLaCADLPuji2yS6Osxs=)
3: vskKnMst18EVmBm6lBj0YzIpNuk.roa (hash: jTxDQ4a1vled+k24Z+iZwB1mJUNUMg7H5qSldRSueFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:38:e5:a3:ac:a7:f9:66:df:4a:59:a1:05:13:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Oct 27 03:00:20 2026 GMT
Not After : Oct 28 03:00:20 2026 GMT
Subject: CN=ae6a5cfbb2966e19c078077cb41cbc9bb7178633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:0d:70:5c:4e:7a:ed:93:16:9f:a7:f0:fd:
2e:d9:23:2e:78:3d:dc:c0:2c:3f:ad:ee:fc:55:b1:
62:98:3f:43:44:e0:44:bc:70:e0:55:a9:55:7f:70:
31:ee:bf:2d:a1:07:19:3c:ab:53:7c:9f:e0:c8:55:
dd:47:bd:aa:ae:be:da:64:e7:13:34:3a:2c:12:8d:
94:81:9e:94:98:2e:e6:83:64:b0:95:e5:06:ef:36:
3a:59:d2:1b:4b:69:c0:32:cf:fc:84:74:13:51:6b:
7f:ae:e2:77:2c:4a:12:1c:b3:f8:24:38:6f:6c:50:
65:62:1c:1f:79:ef:b8:66:a1:d5:e0:68:2a:76:0a:
4e:73:e2:f8:79:1b:ba:d6:7b:e8:53:71:10:45:b7:
75:a3:82:d8:f0:32:56:f3:f6:91:21:28:a3:85:fa:
13:4e:d9:b4:ec:30:e2:79:1c:c5:ec:66:15:69:14:
1c:7c:00:5d:1c:9d:02:9e:a6:03:cf:4d:54:0a:a5:
11:e6:64:f4:b0:7f:d4:9c:64:2b:44:6f:01:4c:71:
7b:88:3a:c0:95:27:6f:d4:67:d2:d0:d5:19:bd:d1:
2d:e5:be:6c:1a:49:06:54:dd:5d:9a:32:ea:85:3b:
5c:e0:cf:e3:dd:9b:81:f2:6c:74:10:99:de:a1:21:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:5C:FB:B2:96:6E:19:C0:78:07:7C:B4:1C:BC:9B:B7:17:86:33
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:57:3a:12:6b:00:42:65:f5:12:55:9a:9a:34:32:35:1c:ec:
aa:b5:8a:b6:42:d5:c4:aa:4a:cb:10:7a:df:a1:0d:c3:b0:7c:
53:36:dd:78:c9:8e:f4:16:c7:c5:be:b9:2c:80:00:27:6a:49:
ed:2c:68:2d:4a:ae:e2:9a:63:45:0d:a4:dd:1c:b8:9f:48:cd:
e4:a0:68:e2:90:d7:53:20:55:08:ad:02:8f:6c:bc:6e:51:ad:
f2:3d:e3:5a:33:a7:76:7f:70:dc:99:7b:1e:6e:80:59:8c:19:
ef:21:4a:e7:3c:98:0f:5c:de:fe:dc:35:ed:5f:12:c9:a7:26:
30:26:81:a7:fb:5b:b3:42:54:e1:42:49:4a:5b:3f:09:9d:bf:
cc:db:f4:1e:67:60:ae:14:98:d3:ad:95:25:7c:d2:8d:23:4b:
b3:8f:a2:05:62:36:9d:8b:83:c3:7c:2b:c6:59:06:c8:5c:3e:
8e:61:8e:11:6e:c4:50:d0:11:42:b0:9d:ba:5e:d4:ce:65:5b:
66:39:53:70:46:bb:1f:6b:8d:f5:42:b7:6b:4e:f1:74:ce:c0:
46:1f:fb:1b:81:f4:83:7e:59:f1:6a:18:5e:ea:a9:71:6d:e5:
c0:99:d5:1a:8d:84:40:dc:be:e2:d1:20:a4:18:cf:f6:17:00:
29:39:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:01:37 2026 by rpki-client