
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: DA8e/H888bOGv2UfEhXQfOVovXPEPw+bqt2fzbJxSuU=
Subject key identifier: 7B:43:8A:C9:42:FB:BC:84:34:0E:37:B9:65:3C:54:AF:53:12:41:F8
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 01A0E92E16CF92C8EFFCE9BE88146227A1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 07E4
Signing time: Mon 28 Sep 2026 18:01:46 +0000
Manifest this update: Mon 28 Sep 2026 18:01:46 +0000
Manifest next update: Tue 29 Sep 2026 18:01:46 +0000
Files and hashes: 1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: smh9yd4lc5UStH1Ovy+Z0jpMs5l200Qr4jbWVDXYcdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:16:cf:92:c8:ef:fc:e9:be:88:14:62:27:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: Sep 28 18:01:46 2026 GMT
Not After : Sep 29 18:01:46 2026 GMT
Subject: CN=7b438ac942fbbc84340e37b9653c54af531241f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:67:49:f8:be:67:e3:78:d6:86:09:fc:f7:
c3:74:49:66:54:b9:c1:86:1c:23:fe:95:32:4e:c8:
30:69:1b:fb:0a:07:8f:57:f2:9a:b7:ff:13:49:e7:
37:54:fa:37:3b:d5:bd:52:df:1a:66:30:9c:5e:92:
a3:e1:35:d2:97:62:0d:56:84:cc:5e:eb:17:21:ee:
1d:3e:17:c9:20:9b:07:d0:34:af:00:37:9f:e7:f8:
bb:e7:c6:d1:8b:24:80:4a:e4:0d:ef:51:f1:80:a3:
a4:ce:47:af:88:a4:07:f1:53:a3:22:79:57:d0:d8:
da:a9:39:08:9f:54:20:06:b8:c5:ae:3f:eb:a6:39:
e8:e1:6a:71:c3:c7:80:97:e5:92:ad:e5:bb:1b:2c:
0c:02:41:49:a8:7f:df:16:1f:25:af:a9:91:48:56:
03:aa:46:d2:08:ab:cf:54:e7:fe:01:e6:33:77:bb:
85:e8:1d:f4:9d:04:f5:e1:9d:0d:63:a3:09:29:30:
f1:d3:1c:08:8e:ae:7b:ef:6e:68:0d:0c:02:f2:ec:
7c:2a:1b:19:0d:af:dd:2c:36:df:a6:ea:9a:84:fa:
dd:fa:46:90:40:fe:20:4c:54:4a:10:54:e3:b5:cf:
04:0b:3c:87:9c:c7:ab:39:7c:5d:10:19:8c:5c:ea:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:8A:C9:42:FB:BC:84:34:0E:37:B9:65:3C:54:AF:53:12:41:F8
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:37:a7:61:7d:ea:6d:2d:d4:ca:c3:f9:b4:cd:f8:39:86:
03:13:74:88:ac:84:eb:8f:30:d4:92:d0:c8:45:fb:23:c9:66:
b9:93:41:8e:69:d1:26:c5:23:59:4e:e3:b4:ce:29:40:bb:85:
f2:17:c2:84:e6:5b:20:d3:77:39:9d:f7:18:da:5c:6f:47:75:
3a:ec:41:e4:89:db:3c:69:fc:cd:b2:25:97:79:45:86:9b:e9:
95:ac:7a:e3:86:e8:fd:87:d9:a1:4c:5a:40:4b:d0:37:9a:40:
f1:d7:79:76:ca:89:67:72:98:57:47:6f:db:dd:83:fe:3c:2b:
78:6a:9e:ca:a3:ed:15:f6:e0:61:7b:3c:47:9b:f8:8a:c4:95:
38:5b:07:52:7b:e8:bc:a7:03:9b:6d:b4:a1:99:ae:d9:89:21:
76:46:d2:33:4d:f3:30:2b:74:d2:99:1a:fd:d8:94:ce:52:98:
8d:49:76:52:a8:ef:f8:20:6a:6c:b0:89:5f:15:1c:d7:c5:8c:
27:25:20:51:34:f5:50:2a:8b:36:d4:86:5d:07:78:cc:2b:02:
88:e5:63:b7:0f:88:27:38:45:e8:b7:cb:96:80:fd:fd:9a:0a:
20:a0:83:07:85:e3:56:d7:a8:61:e3:e1:e4:de:64:ce:dc:0b:
59:eb:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:13:38 2026 by rpki-client