
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: cjtkRpXH9av0fqzZORxR7VOpQJRNmWX7EAGGnzNVSAY=
Subject key identifier: 2F:69:F3:3F:28:D3:47:01:61:8B:D5:C2:1F:CA:FC:55:6B:3F:2E:CB
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 01A16232F65F857374A468924C094ACD540C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0DD3
Signing time: Thu 22 Oct 2026 06:01:09 +0000
Manifest this update: Thu 22 Oct 2026 06:01:09 +0000
Manifest next update: Fri 23 Oct 2026 06:01:09 +0000
Files and hashes: 1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: INCqv4hqav1IbLvR1o9AWn29N1WxW060wvr5SaUR5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:32:f6:5f:85:73:74:a4:68:92:4c:09:4a:cd:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Oct 22 06:01:09 2026 GMT
Not After : Oct 23 06:01:09 2026 GMT
Subject: CN=2f69f33f28d34701618bd5c21fcafc556b3f2ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:cb:75:0b:eb:20:f0:d5:47:ab:27:26:54:
09:a7:18:bd:b2:b6:ba:fa:41:90:3c:ac:3d:bd:23:
b2:11:7a:34:5b:2e:2a:0f:2c:fa:b9:c5:5b:08:01:
95:9a:99:9c:92:36:aa:ad:e8:33:22:e6:c5:cf:18:
d2:c3:1b:dc:7a:ea:f3:6f:af:7f:07:3a:51:a9:e5:
0b:ce:79:ca:28:ff:d7:5a:38:87:ac:d8:b4:58:3f:
90:8f:c5:41:0d:08:b8:ef:b4:13:ca:5a:54:a0:1a:
d2:3a:33:15:d1:e2:84:82:f2:8c:bd:ba:ea:4a:d8:
4d:5a:ed:e7:29:a7:fe:86:a8:67:ea:2f:34:23:58:
3a:34:15:d9:6d:7a:c5:05:e3:50:96:80:a6:96:08:
36:cf:91:48:20:5c:d9:2c:80:df:20:f9:6e:09:4a:
de:b0:68:f5:db:b0:c3:02:a2:63:3d:e2:6f:bf:30:
e6:7c:86:20:df:30:7b:4d:d7:a1:43:82:9a:ef:8a:
8f:7e:87:c8:ab:c2:88:f4:a2:bf:ea:3b:5d:74:47:
25:78:fd:87:1e:96:8b:2a:10:fa:64:dc:fa:4e:0a:
45:95:e4:80:6f:8e:a6:50:66:7a:4b:a8:17:a9:c4:
d6:dc:56:43:16:e2:45:94:fb:6e:db:f8:12:1e:02:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:F3:3F:28:D3:47:01:61:8B:D5:C2:1F:CA:FC:55:6B:3F:2E:CB
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:36:3d:7c:a1:da:1d:8d:df:bb:6d:56:f6:6d:4c:57:0b:1e:
7f:a7:ed:ea:af:de:8c:47:12:3e:40:a8:82:7d:20:b2:f6:cf:
e2:bd:46:9d:83:2a:93:72:81:21:ab:a5:19:a1:e1:4a:f2:b1:
ed:2c:ee:d8:d3:c3:aa:40:cf:36:fc:9c:2e:97:5b:d7:d7:b7:
66:4b:9a:4e:82:ca:3d:fb:42:83:3f:1c:24:e2:ba:d2:93:b9:
0b:93:35:fe:56:98:a8:70:ae:6e:8b:36:36:a1:d2:e7:8a:d6:
08:de:e5:32:a4:18:53:78:9d:55:6d:c8:58:40:f4:4e:d0:84:
1e:59:ba:39:30:f8:e7:b9:49:5b:b1:35:74:3d:29:00:16:4c:
b7:f6:a7:71:99:66:84:13:4f:2c:54:c2:58:8e:30:06:62:c1:
72:7e:13:44:72:20:af:36:a1:f2:fd:73:3b:bd:64:ed:2c:27:
a0:03:d6:37:34:97:d7:a4:0d:80:ca:84:df:be:29:88:05:e6:
8a:2c:46:b7:8c:d1:c2:af:34:59:a1:ce:ca:40:47:f9:a7:8f:
d4:0e:96:96:41:b2:93:d7:7f:f1:49:11:24:f4:80:8f:f3:f2:
76:ff:d4:fc:13:17:08:c6:2a:2a:ec:ce:92:ad:c8:59:b2:a1:
bc:e6:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:43:03 2026 by rpki-client