Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: LM+w/nh3DzmzAcE52e8zAPayH7Uyoj6N1QaDInEv17o=
Subject key identifier: 97:96:77:56:0A:9F:3C:E6:2A:86:64:4A:A3:15:E2:88:91:85:85:3F
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 01A17695AFD1D8F81C642D9EA5E9961D012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 0825
Signing time: Mon 26 Oct 2026 05:01:23 +0000
Manifest this update: Mon 26 Oct 2026 05:01:23 +0000
Manifest next update: Tue 27 Oct 2026 05:01:23 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: OwP1hf/mMSktbROhLud+KGLrW2OPDZYhPpMq6dUg014=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:af:d1:d8:f8:1c:64:2d:9e:a5:e9:96:1d:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Oct 26 05:01:23 2026 GMT
Not After : Oct 27 05:01:23 2026 GMT
Subject: CN=979677560a9f3ce62a86644aa315e2889185853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:16:3f:48:74:74:c5:d3:dc:d1:be:65:58:
39:e5:68:cf:77:63:12:26:3d:54:31:a0:54:7a:90:
1f:f1:04:67:9c:59:1e:77:75:81:b1:8b:5a:14:bb:
29:06:c1:04:d5:31:b7:a3:a2:c2:a9:c0:ad:53:f0:
bd:40:f0:e6:0c:d0:5e:73:32:41:79:ee:af:35:79:
09:a5:df:00:28:d5:2b:55:b3:14:88:36:2d:12:1f:
85:53:63:05:78:8b:b4:3d:ae:84:2c:55:2c:c9:05:
f1:94:33:ba:1f:1b:16:c3:67:63:77:bc:a9:18:00:
82:5e:3a:af:b4:2a:0b:13:c5:df:fb:a7:fd:4c:8c:
83:8c:5c:8e:da:7b:23:3e:bc:db:3c:d2:73:68:e4:
7f:d8:ba:97:ea:f3:4f:fc:71:3a:8b:ab:f3:e9:9f:
62:d4:f3:69:0d:86:8c:d5:25:f3:0d:f0:48:e1:2d:
b5:da:30:f8:58:ca:6f:24:d0:02:0b:9f:98:75:57:
6e:27:75:37:3d:2c:19:a5:c6:eb:c9:06:8c:79:b9:
30:b3:7a:6e:73:48:61:27:b9:68:55:7a:d1:fe:60:
61:26:cc:07:f7:fc:a2:18:63:9f:c1:a8:4b:91:02:
c2:2d:b0:70:fa:df:83:d5:50:85:de:fc:1f:7c:b4:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:77:56:0A:9F:3C:E6:2A:86:64:4A:A3:15:E2:88:91:85:85:3F
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0b:da:62:ef:21:ad:29:59:9e:89:de:fd:42:ac:7f:3e:87:
77:6a:ed:6b:c1:38:b3:b2:94:0f:31:3a:4d:d7:9e:94:47:d7:
31:20:95:20:38:b0:09:76:e7:1c:85:af:b5:5e:46:eb:51:11:
2f:82:c8:58:fe:04:2c:a4:5e:48:84:68:89:ef:5f:88:db:6c:
23:35:da:4e:98:6d:16:03:5c:94:a1:e5:ea:2a:a0:32:cf:1c:
e2:01:9e:00:79:b2:81:c1:ce:4a:7e:05:a9:3c:eb:06:43:de:
e0:39:3d:d9:16:22:fb:a3:80:89:14:05:a6:28:b9:c5:ad:dd:
80:41:c3:0d:94:c0:a8:a5:df:b7:73:58:bb:6f:c8:51:d5:8d:
58:32:77:e6:fa:58:ec:16:bd:3d:9f:5b:db:52:7f:35:6d:a8:
a4:ad:1e:48:04:55:df:35:9f:40:88:28:c8:a8:78:da:c6:62:
e7:82:db:c2:6a:c1:5e:93:2b:c5:f9:2a:72:ce:19:65:24:55:
b6:a3:1a:ca:b2:7a:be:f8:d9:0a:f1:b0:1b:94:75:ae:e8:4c:
4e:77:10:25:a1:ad:f6:4a:c5:e7:06:91:6d:a7:14:56:cc:7c:
70:2a:3a:ac:41:3d:3d:6e:77:09:d0:43:a8:52:4a:8b:27:c8:
9f:3f:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:53:18 2026 by rpki-client