Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: 4oH3qYaDCI5fHBKRWG7yKru/NpYJ7bNAP4RDXGel730=
Subject key identifier: D1:BB:5A:FE:B5:63:18:38:62:07:01:F4:DA:D9:3B:7B:F6:79:4E:04
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01A17D3CC4F9F2575E7071A0D2029A47A3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 12:01:36 +0000
Manifest this update: Tue 27 Oct 2026 12:01:36 +0000
Manifest next update: Wed 28 Oct 2026 12:01:36 +0000
Files and hashes: 1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: RNAjoe20KkZfyQpNlcWPSMYV49HBps1L6NyBnjkUAOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:c4:f9:f2:57:5e:70:71:a0:d2:02:9a:47:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Oct 27 12:01:36 2026 GMT
Not After : Oct 28 12:01:36 2026 GMT
Subject: CN=d1bb5afeb5631838620701f4dad93b7bf6794e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d7:e0:4c:7e:85:aa:8b:35:ed:49:04:6e:15:
d4:e5:67:47:4e:1d:af:a5:c1:d0:c6:57:9b:bc:43:
2a:2f:87:91:48:dd:ff:a1:c7:57:79:b4:aa:65:d2:
6a:89:0b:d2:0b:9f:c7:91:e1:d5:cd:29:4e:ec:ae:
8c:af:68:4b:d2:37:fa:30:d8:f4:d0:fd:f2:e9:b8:
46:c0:75:f0:34:e2:92:c6:63:b6:f4:9d:a2:4e:99:
be:b0:02:f9:60:2e:5b:c6:35:1f:d2:4b:34:37:ac:
5a:5e:ba:e3:75:22:4d:25:bc:cd:b0:02:f9:51:5f:
d2:6b:18:da:ed:eb:d9:10:dc:da:7f:2e:62:3b:c4:
4a:0c:2a:bf:66:81:52:64:86:df:8c:c2:2f:c5:aa:
c8:30:ca:5e:06:11:ab:1d:eb:bf:28:99:2f:9b:32:
51:73:6e:cc:c8:ef:a4:ab:80:40:f6:66:bb:66:86:
b5:b3:2a:f6:92:25:fb:37:ce:2f:5c:78:7e:80:9f:
66:45:66:68:46:af:8f:72:f9:ed:38:87:19:cc:80:
c5:8a:57:f2:54:bf:73:62:e9:86:d6:54:bc:8b:2a:
cb:77:7b:3e:f0:d7:0a:e2:3f:4c:b8:94:2d:11:ae:
d9:d7:6a:21:cd:33:65:c7:02:43:45:09:d2:21:c4:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:5A:FE:B5:63:18:38:62:07:01:F4:DA:D9:3B:7B:F6:79:4E:04
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:7b:7d:36:a8:8e:5b:2f:89:50:ef:91:c5:83:ad:81:19:34:
72:97:fd:32:43:a2:cc:03:a6:2e:41:66:ac:ca:ba:de:e1:b5:
b2:03:a4:d5:b1:22:80:9f:e4:52:69:8f:8a:6b:81:d5:aa:b4:
9f:62:b1:37:35:54:f4:dc:e7:d8:5c:d8:b5:4e:7b:2b:5e:ee:
da:06:c7:0e:e4:dd:0f:e5:a7:00:c3:24:70:95:c6:1e:d0:6f:
fb:c7:f7:dd:b5:04:61:c6:a0:82:00:25:84:b9:85:27:5e:0c:
f6:bf:78:30:d6:e1:0b:30:3e:a9:ab:55:ef:05:84:f4:81:bd:
93:2c:23:d5:12:63:3f:47:f9:55:44:97:96:74:e1:3a:ab:f8:
31:b4:63:b9:89:50:16:d0:41:8a:b8:a1:56:39:7e:3a:48:0a:
19:98:30:69:fa:02:48:b3:de:e0:4f:f4:ec:f4:0f:7f:2a:5c:
96:6e:01:0f:fb:ab:a6:23:81:ef:b1:45:da:f4:1b:dc:eb:a1:
2a:31:56:72:c0:df:e3:5b:80:0d:5c:78:69:e8:ea:f1:00:af:
e5:92:7a:06:dc:15:5e:13:64:f4:19:92:cd:3c:0d:0f:83:fd:
67:7c:45:03:6a:90:61:25:e3:97:24:bb:48:de:3e:b1:05:bf:
31:7b:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:28:43 2026 by rpki-client