Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: 494/X8nFgqZa+Cv97KfmETAzzarOk2aHANmtU1czB50=
Subject key identifier: 6E:B9:CB:09:F2:54:50:03:50:C4:94:E4:BB:CE:3F:71:78:16:C9:F3
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 01A0DCFA6DC20CC669138E6BCAA4F92B6047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 13B1
Signing time: Sat 26 Sep 2026 09:09:54 +0000
Manifest this update: Sat 26 Sep 2026 09:09:54 +0000
Manifest next update: Sun 27 Sep 2026 09:09:54 +0000
Files and hashes: 1: 8s5mYxT0FSRplUfX2pjGSu5Ka04.roa (hash: oOY6cZI+YmdFuCyChAP/z3GyHQKcVcfCKBCkx+0GXYY=)
2: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (hash: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A=)
3: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (hash: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: 953uUU8e6RgwmH2Bg4K9Hr7F6A8cvL59F+pDTUxW0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:fa:6d:c2:0c:c6:69:13:8e:6b:ca:a4:f9:2b:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Sep 26 09:09:54 2026 GMT
Not After : Sep 27 09:09:54 2026 GMT
Subject: CN=6eb9cb09f254500350c494e4bbce3f717816c9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:13:1b:73:5c:75:d2:99:26:f8:c5:05:ae:
25:3e:27:18:59:66:f9:9b:59:b3:31:16:bf:73:b1:
37:72:ea:ce:77:e3:f4:24:e5:53:ed:21:e6:6c:82:
d6:c1:af:f3:8a:a7:56:19:03:d8:42:6d:f4:de:91:
c0:b5:b8:4d:be:42:fc:a7:5c:5b:04:8e:fe:d2:63:
35:fe:bd:e9:09:70:b3:a5:d2:17:0a:7c:a4:cf:36:
25:3a:aa:af:d7:8d:46:74:6f:18:94:3b:d1:da:50:
fa:7a:08:80:6b:14:7d:a9:56:f7:ac:f9:06:09:26:
08:7a:5f:df:90:ae:40:13:64:08:44:c0:9d:96:59:
29:94:22:15:f5:c0:b8:97:03:d1:f9:73:a8:e5:6a:
d2:2d:f9:ee:3b:b2:15:c6:55:92:88:a3:b7:38:17:
6e:76:a9:40:00:cd:2d:26:d8:72:3c:68:68:02:0d:
07:21:35:ad:5c:7c:ae:5a:8e:70:f2:25:11:0c:a7:
18:63:3c:58:28:a6:1d:47:18:31:06:1d:e6:4d:f3:
81:00:7b:58:f8:50:fe:bb:c7:9e:88:3b:e8:57:8a:
eb:f8:6c:49:de:49:33:e9:b9:f2:3b:92:f3:23:8f:
c6:45:df:ac:df:a3:c4:88:a8:04:ae:03:17:7d:7e:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B9:CB:09:F2:54:50:03:50:C4:94:E4:BB:CE:3F:71:78:16:C9:F3
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e5:f6:5d:79:18:84:8a:7b:ab:12:b8:85:40:36:fb:a3:5b:
68:01:1a:92:2d:30:31:78:eb:d9:14:79:89:c0:05:8d:9e:f8:
48:6f:dd:bf:11:05:ca:eb:f0:de:7a:c8:2f:51:e3:4b:43:e7:
68:8b:3e:5d:e9:17:7e:5d:98:d1:98:d7:79:7b:9f:fa:7f:1b:
b3:9c:42:0a:c5:ab:f3:0c:d1:28:27:af:bf:fe:95:ae:bc:8b:
2f:c8:98:c7:03:1d:03:fc:92:e5:50:44:b7:8d:6f:ec:b6:ad:
dd:51:3e:1b:fe:9c:24:d6:4f:a7:bd:06:36:22:e3:da:a0:d8:
10:ad:17:06:f7:f2:02:d6:94:32:04:39:ff:50:7f:b5:02:e8:
e9:f1:01:de:9e:2c:37:16:fb:ab:51:90:5c:ed:d1:3b:5c:d0:
a3:a0:8e:86:20:f9:e9:fe:d2:0f:99:eb:04:d8:db:b1:f1:39:
dd:bd:6c:b5:78:2e:92:ec:65:af:9c:c3:90:4b:7b:9d:69:c6:
90:f3:f6:91:35:53:d4:3c:44:ac:56:b8:7b:26:f1:44:67:e5:
dc:00:1f:20:6f:c6:08:c4:57:dc:f6:4b:e9:0a:0b:0a:9a:1c:
67:c9:57:e2:fc:69:53:b2:bd:ca:3c:ea:38:a3:4b:41:6f:36:
f4:e9:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:03:23 2026 by rpki-client