Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File: wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier: Li5S3mkXTdHZLYXe0dY0MzW3++s/IpVutk4TMj70DRg=
Subject key identifier: 4B:A3:BF:D0:B5:1B:68:9E:CD:5C:8F:1D:04:5E:DF:27:AB:C2:EC:BB
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 01A0EB1CF0FC12EF2050717DE3BE923A5BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 03:02:17 +0000
Manifest this update: Tue 29 Sep 2026 03:02:17 +0000
Manifest next update: Wed 30 Sep 2026 03:02:17 +0000
Files and hashes: 1: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (hash: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY=)
2: gWGcdmx046UezH3VAk6Wb2AQd9k.roa (hash: hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=)
3: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (hash: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=)
4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: Z0Zow3bJUTe8Vly64VihkXB8F7putmRlEGZ+8TX34JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:f0:fc:12:ef:20:50:71:7d:e3:be:92:3a:5b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Sep 29 03:02:17 2026 GMT
Not After : Sep 30 03:02:17 2026 GMT
Subject: CN=4ba3bfd0b51b689ecd5c8f1d045edf27abc2ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:e2:f2:b7:50:10:34:bf:c8:1b:3b:22:f7:
0d:71:ab:63:7e:5c:8f:6f:34:2c:92:b6:61:e5:86:
1c:bb:ba:4f:e5:b9:94:ac:5a:45:0e:c7:bb:73:ef:
67:10:92:fd:a9:f6:c6:63:d4:2c:76:57:9f:4b:ba:
03:43:a0:58:80:c6:27:01:43:ad:90:e9:5d:ae:5c:
a5:d2:a9:a6:82:e6:93:0a:7c:17:bb:35:df:ce:0c:
9c:0d:fb:24:d3:1f:8b:14:61:9c:a2:79:ae:f6:d6:
fe:63:24:f1:31:ca:53:c8:bc:3a:76:2a:36:ef:08:
d2:41:5a:aa:04:f5:38:1d:35:a5:0b:8b:e3:4c:e0:
84:59:11:38:c2:d8:08:99:b9:dd:32:f4:32:d8:d1:
79:b6:57:51:61:0c:5b:ba:d5:e7:f7:b7:ee:19:93:
30:a9:0e:c1:88:f9:e4:ab:b5:7e:20:e9:73:4f:ae:
19:b0:e1:98:43:be:39:9a:ce:c4:66:ea:2c:f5:6a:
88:ac:97:b6:e0:a3:04:6c:35:39:1e:6c:b9:c2:b2:
0b:37:c5:78:ca:be:41:b8:00:57:a3:e2:5a:73:85:
7a:1a:20:18:f1:fc:a3:7c:63:0a:ef:1b:92:78:b3:
56:8c:01:06:12:fa:f5:dd:1e:9a:98:04:6b:e0:2d:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:BF:D0:B5:1B:68:9E:CD:5C:8F:1D:04:5E:DF:27:AB:C2:EC:BB
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:38:93:ef:66:ef:e4:6c:4c:4d:e9:98:26:1c:51:d0:84:a0:
e1:83:78:19:54:48:a9:1a:54:12:14:fd:f3:5e:a3:f9:e6:53:
f3:47:a3:81:f9:6d:74:df:7d:cf:30:b8:19:6d:8b:f8:e7:83:
2e:bd:c6:78:eb:c6:13:a3:c5:e8:1a:ab:23:e4:2e:03:4d:af:
2f:3b:41:34:99:9c:26:18:ab:ab:ad:f9:b6:00:6f:38:57:ce:
d1:1f:eb:0d:4f:84:77:58:7b:eb:a9:70:42:8a:88:dd:de:9d:
d7:c5:30:78:e7:44:d8:7e:86:fd:f6:b1:07:c9:89:59:bf:a1:
1b:de:58:13:5e:74:09:43:f1:f4:11:e8:d7:88:f7:b5:47:ca:
af:85:b9:d9:3e:da:5b:c3:c4:3c:b2:84:15:08:eb:f6:6d:e5:
b7:e7:df:31:ae:bd:5a:05:36:9e:ad:a0:20:c8:cc:1c:5a:f2:
79:5e:81:d6:27:2f:e1:86:17:11:21:00:18:f7:a8:f5:05:eb:
d9:81:89:9f:17:a0:a3:fb:ca:4d:4e:ab:92:5c:20:02:38:ab:
64:b1:22:96:cc:eb:a8:41:1c:52:42:b0:6f:e2:92:0a:b7:00:
86:b3:ed:60:ac:33:f9:aa:3e:9c:f9:bd:21:f6:cf:fb:9d:5d:
d5:9f:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:45:31 2026 by rpki-client