Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: TgMSJnKjFpapjJszw5PoYC270vn1T8F1jRPuUW9BFys=
Subject key identifier: 2F:56:F5:AE:CC:E0:61:58:63:31:2D:70:E5:0E:A9:47:7A:FB:16:22
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 01A144CCCD0530310A2F3009FF031E6335AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 06F9
Signing time: Fri 16 Oct 2026 13:00:34 +0000
Manifest this update: Fri 16 Oct 2026 13:00:34 +0000
Manifest next update: Sat 17 Oct 2026 13:00:34 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: QkKojQDqSv+mXvjqLEIdPFx72Ftjqqh5GRqJNpGN10Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:cc:cd:05:30:31:0a:2f:30:09:ff:03:1e:63:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Oct 16 13:00:34 2026 GMT
Not After : Oct 17 13:00:34 2026 GMT
Subject: CN=2f56f5aecce0615863312d70e50ea9477afb1622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:2c:26:34:35:a0:c9:87:6a:67:4e:cb:9c:
f7:5f:f6:af:53:82:1f:a0:ac:13:5a:48:8a:bf:3f:
78:3a:3a:ff:b9:d8:0e:cb:69:41:9b:54:85:3d:2b:
9d:46:84:00:dc:bc:05:cf:4a:60:27:5a:ba:40:03:
72:62:b8:d0:43:fa:32:69:f5:8a:11:62:38:ac:f1:
10:f7:3d:75:33:dd:10:a5:b6:23:91:aa:e8:5b:d9:
ea:2b:34:22:f0:a2:e8:0e:eb:15:22:4f:cc:21:86:
42:cd:96:3c:df:23:79:5c:86:64:ea:a2:09:ab:6b:
27:e4:12:e2:5c:0a:0a:51:9a:f8:d5:32:de:d4:b0:
1e:21:ca:63:c9:51:af:d7:d6:01:88:77:d5:fd:39:
2a:e5:cb:9d:45:2b:5d:a9:87:f6:9d:34:bc:28:21:
1b:a0:0c:0d:f5:04:67:1a:3d:87:6b:82:33:b9:1e:
fb:49:dc:9a:75:57:0a:b2:87:00:58:6b:0e:09:70:
54:ee:57:6c:21:28:df:4c:32:37:0b:a5:91:c3:60:
de:7c:df:f0:01:21:ba:a3:ee:77:35:37:74:f2:27:
e1:5b:7f:f4:74:66:8f:50:f1:c9:64:ff:5b:13:42:
e2:03:2d:78:cd:4f:ff:44:11:73:b8:14:8e:99:37:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:F5:AE:CC:E0:61:58:63:31:2D:70:E5:0E:A9:47:7A:FB:16:22
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6b:cd:d8:a9:dd:e1:be:25:7d:96:4a:c3:e6:39:1c:c1:1f:
fd:c8:fd:e0:13:ef:4a:91:31:73:54:45:b2:a9:ee:e9:f2:52:
2a:b1:ec:32:e6:ea:ad:b1:da:2a:1e:82:4d:99:00:c8:f2:25:
2e:99:29:cd:ff:19:46:93:3c:e9:ee:38:1b:37:a1:a7:ff:e2:
0f:b3:38:83:e2:36:97:6c:8c:f6:52:86:8e:41:bb:48:37:b8:
3c:ef:08:70:55:82:0e:b1:65:bb:5e:b4:ef:98:a2:1e:48:5a:
ea:46:3a:05:5a:c4:20:ee:be:e2:13:85:ad:50:77:13:e8:7c:
1f:0f:90:7a:bf:bc:64:8f:38:e2:5b:af:0f:a4:f9:78:f2:2f:
d2:57:a9:7e:98:f9:1b:6b:49:98:a6:79:e3:6e:48:83:b5:ac:
9a:ef:2f:99:26:46:ed:e3:18:cf:c5:40:ac:92:7d:5b:54:9c:
23:fb:db:78:ab:89:67:d3:87:78:36:42:18:f5:e4:f8:8b:db:
4e:72:b5:04:d1:d1:cc:a5:e6:aa:8d:73:86:c0:5b:41:56:dd:
62:25:40:27:7c:85:0b:cd:39:14:b7:c1:e5:80:4a:55:9f:e6:
e2:18:b2:51:c4:59:e2:6d:c4:fc:b1:76:c0:a5:54:a4:e1:57:
d4:1f:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:02:25 2026 by rpki-client