Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: MsiUQj29h+mOk/4/3cxe9/a9rrp8tQn/9n8E6hSKgfw=
Subject key identifier: 67:3F:C8:65:45:27:3E:C6:47:DA:99:9A:2F:A9:2F:C4:46:7C:31:28
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 01A0C77CA9C1FFB84536E3D175EDC30EB849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 0AF5
Signing time: Tue 22 Sep 2026 05:00:30 +0000
Manifest this update: Tue 22 Sep 2026 05:00:30 +0000
Manifest next update: Wed 23 Sep 2026 05:00:30 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: RZf2RLGCjJ1sWWtKCTIrQMRxE9Ns/wnuLkL0t0BmqbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:a9:c1:ff:b8:45:36:e3:d1:75:ed:c3:0e:b8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Sep 22 05:00:30 2026 GMT
Not After : Sep 23 05:00:30 2026 GMT
Subject: CN=673fc86545273ec647da999a2fa92fc4467c3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:f6:6a:f2:63:57:39:07:7b:7e:3d:ac:06:
4c:05:91:cb:b0:a2:04:82:00:70:00:89:7d:89:b3:
de:d2:22:68:f8:f3:41:74:48:5c:d2:9c:0e:6b:40:
60:fb:f2:0d:36:70:a2:ba:8b:68:54:25:b8:1f:4f:
10:33:2f:d6:3b:e1:43:38:33:b4:e9:11:86:95:0b:
82:00:48:85:b2:9b:1b:58:d7:dd:f5:cb:91:35:61:
cb:b7:49:d3:a9:e3:7d:49:10:23:bb:8b:a4:3c:91:
b7:eb:2a:2c:99:d9:04:f6:8b:7b:cd:0f:b4:64:6e:
cf:0d:5c:69:ab:0c:54:a9:4e:2d:4d:d8:51:4f:be:
4e:e1:5d:a9:8c:de:d6:1f:ba:4c:e7:8c:5c:1c:2d:
18:9d:60:0f:7f:19:6c:b8:51:c1:97:f0:f3:5e:f7:
8f:f7:2f:26:b8:aa:89:cf:3e:e8:75:8c:33:a5:e5:
39:d2:45:cf:43:cf:2a:f7:cd:dc:43:f3:ab:77:30:
43:42:4e:43:28:1f:e5:3e:3e:8f:38:7d:c4:85:09:
8b:0d:c4:89:9c:f3:60:03:d5:62:93:af:af:75:a4:
20:25:27:0c:5a:82:b6:31:11:f2:e6:46:8a:7c:96:
a6:b8:e1:e6:b5:59:49:7e:9b:78:e3:5c:a7:c3:09:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3F:C8:65:45:27:3E:C6:47:DA:99:9A:2F:A9:2F:C4:46:7C:31:28
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:43:18:8c:04:b8:74:e2:fe:d4:68:0d:2a:90:64:3b:e9:69:
ed:c1:a2:f0:b9:59:16:1e:db:af:45:df:84:4c:46:28:7b:29:
9e:88:31:c8:75:a1:49:8f:31:3b:da:38:3b:d0:30:5c:66:fe:
bc:ce:ea:f1:42:e5:87:7b:fc:a0:1b:85:79:b8:88:52:2d:32:
01:df:2c:c5:eb:10:a6:20:54:5d:f4:80:24:c6:44:15:f4:3f:
92:4c:c4:65:86:e0:b1:32:fc:09:63:87:0a:e7:8a:f8:5b:bb:
95:94:e6:34:cf:3a:bd:cf:74:df:2b:c9:15:65:33:a5:ac:e2:
1f:3a:67:12:19:a2:35:be:a7:d2:a9:cb:17:3d:56:93:75:a8:
96:d5:25:2c:52:fc:4d:4b:e8:43:67:1a:8f:da:b0:95:05:e9:
c5:c9:6c:21:ac:5f:83:51:0e:0d:09:9a:ad:f6:5f:1c:86:12:
c9:5e:34:7b:8f:09:21:cc:ec:2d:fc:12:68:37:cf:2e:eb:98:
97:6d:5c:58:0f:cf:61:7d:e1:f4:5a:a5:54:e6:f3:0b:56:c9:
a6:20:7a:1d:73:2c:3d:e3:4c:72:51:9e:b3:4c:ac:1d:0b:ad:
e8:2d:7c:a2:95:11:59:c3:92:2c:fb:11:ae:20:45:e7:77:77:
63:99:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:43:25 2026 by rpki-client