Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: 8k+uap/I/KO+6uyHbhjXz47kRvA+nP/u3uuwCARxv9Q=
Subject key identifier: 5E:10:24:A8:9E:F5:39:AC:A2:07:5A:A4:15:B9:9A:33:DD:50:86:89
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 01A0DA2877E1CFA877529221280D0FDB758A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0854
Signing time: Fri 25 Sep 2026 20:01:20 +0000
Manifest this update: Fri 25 Sep 2026 20:01:20 +0000
Manifest next update: Sat 26 Sep 2026 20:01:20 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: zKNo4NmNx+Atk6Ri8Quq/XgCWSf1lokGuyxBS33P9hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:77:e1:cf:a8:77:52:92:21:28:0d:0f:db:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Sep 25 20:01:20 2026 GMT
Not After : Sep 26 20:01:20 2026 GMT
Subject: CN=5e1024a89ef539aca2075aa415b99a33dd508689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:6b:9f:ce:4a:ea:27:3c:a7:03:9a:0f:47:
80:ec:98:aa:82:ad:8e:b9:c5:1a:52:a3:0e:4f:05:
ac:ec:aa:95:6c:e7:38:6f:1c:2c:b5:7a:99:59:85:
c6:23:2c:a6:7e:6a:a6:cd:82:49:b5:05:93:09:22:
47:c9:71:84:f1:4f:f0:86:63:5f:d8:70:0d:e8:5e:
d4:f7:43:a1:c4:9a:68:1b:40:96:78:b9:ff:fb:d3:
36:5b:82:89:87:43:a8:0f:d2:38:dd:0f:88:c4:5b:
48:dd:ac:7e:81:08:cf:f3:9a:72:f9:ff:3a:37:75:
52:ab:14:6d:54:4b:90:74:b2:9e:80:17:29:e3:ad:
48:7a:cf:82:96:0c:7a:95:48:16:c6:06:79:3c:17:
91:95:17:85:d5:7b:25:ac:7d:5f:bc:4b:74:6b:35:
b4:ae:df:2c:f2:1b:67:78:2d:bd:b9:98:30:42:7c:
88:19:51:34:ce:42:a9:82:c3:74:e7:ba:33:82:41:
3c:13:cc:de:ff:82:fd:b2:b3:fe:4f:bb:34:da:a8:
e5:4d:02:c2:38:2a:08:9a:4d:14:8c:2d:6b:28:bb:
cd:f1:88:a7:e2:fd:e8:ab:cc:9c:b8:ba:69:fa:be:
1e:14:13:c3:4e:61:e9:18:87:73:52:76:5a:ee:3e:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:24:A8:9E:F5:39:AC:A2:07:5A:A4:15:B9:9A:33:DD:50:86:89
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f0:21:ec:e8:80:23:50:65:5a:aa:b4:7a:fa:45:e7:9b:73:
42:85:97:ff:c5:4d:81:e6:c2:d1:ee:5b:0c:16:3e:6f:3a:2c:
73:5c:48:4f:89:07:29:0d:af:d0:5f:41:9a:f7:e7:5b:f4:a8:
4f:cb:38:3d:4e:4f:d4:2c:38:69:b6:a7:b8:80:45:4e:ca:b7:
83:bd:32:0f:08:52:4f:c5:ae:26:94:18:72:aa:81:c6:1f:d6:
eb:99:70:b3:fe:17:16:1e:74:13:72:99:56:63:4e:07:ae:9f:
49:9b:9c:33:cd:52:00:66:15:bd:85:3b:bb:a9:44:1b:7f:b9:
4f:31:3d:ee:57:ad:c0:15:e9:05:31:ed:81:6d:a9:f5:60:b5:
3e:d5:ac:58:68:48:1e:cc:ba:9d:14:a2:36:c6:9c:d8:1f:87:
09:a3:5f:a8:ae:4f:c6:b0:1d:e1:1c:2e:3c:f6:51:fa:9a:97:
c2:21:89:f3:7f:ca:75:98:96:ee:62:64:25:84:bf:7c:ff:ca:
fb:60:97:bf:e3:6e:20:d2:b5:92:bb:de:80:1f:94:cd:82:e6:
1b:ec:91:60:9d:3a:11:ed:dd:71:0f:fc:6a:8b:f6:88:7f:fd:
cb:06:c8:d1:97:ff:cb:77:84:ba:76:a7:8f:27:ce:51:de:27:
13:24:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:24:54 2026 by rpki-client