Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
File: wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft (raw, json)
Hash identifier: uce/9X12IGHhXFrXHWpHDuqElsS+T+e8KQgJjTalzQM=
Subject key identifier: 6A:6D:F5:EB:89:33:AB:6A:DF:5A:94:DD:AD:FE:EB:52:81:86:42:C0
Authority key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Certificate issuer: /CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Certificate serial: 01A0E73F4824677083A4BCA0AFA511570FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:19 +0000
Manifest this update: Mon 28 Sep 2026 09:01:19 +0000
Manifest next update: Tue 29 Sep 2026 09:01:19 +0000
Files and hashes: 1: n-LkYEYl_BKToTd94568MGgE5jc.roa (hash: dbNcQZB+XqGNZ6CWLvpvwNF67hivn9OZiLltxklIlbE=)
2: wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl (hash: OZQcCijB1i9hnvLmLuq1wrOWW5ATgTMEb3zsoLLnI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:48:24:67:70:83:a4:bc:a0:af:a5:11:57:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Validity
Not Before: Sep 28 09:01:19 2026 GMT
Not After : Sep 29 09:01:19 2026 GMT
Subject: CN=6a6df5eb8933ab6adf5a94ddadfeeb52818642c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:53:4d:a2:9d:ca:4e:57:43:ae:24:68:2e:
01:20:02:3d:7d:0a:bc:74:e0:fd:47:73:2a:0b:b8:
7e:06:5b:25:a7:13:a0:1b:49:84:8f:90:2f:63:4f:
55:06:91:4d:1c:17:4e:a2:57:43:98:0d:76:89:ca:
5a:12:1e:f3:69:6e:38:93:57:cd:1d:d0:8f:d3:f9:
07:0a:f1:e4:07:33:ea:96:36:20:32:51:4b:7c:c8:
ab:59:30:53:40:b3:8c:d5:eb:b5:7f:2d:93:11:83:
48:04:ea:a0:f2:af:35:be:c4:46:fc:5b:5c:de:db:
a6:60:90:68:2e:77:eb:1a:32:8f:3b:58:f1:ee:b6:
ee:1c:ac:e1:c9:5d:ce:de:6c:61:2e:53:6a:3a:15:
01:c4:83:90:e3:7c:4f:42:66:7a:76:51:0e:c1:c0:
b1:83:2d:6c:db:7e:d1:2b:d0:d8:c6:d8:c9:32:6c:
c0:8b:d8:8c:4a:d2:9d:2a:d1:88:24:a5:4d:52:6a:
b4:e2:a9:24:c7:02:b8:ec:bb:38:1e:48:3a:14:89:
5f:e5:8a:4a:d3:ce:d1:4c:b5:1e:a4:4d:e9:76:7f:
1a:4f:a3:46:3b:d3:91:91:0c:4b:98:65:b9:f7:09:
a5:75:42:1f:29:b9:b3:7b:27:f4:fd:a2:1f:10:20:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:F5:EB:89:33:AB:6A:DF:5A:94:DD:AD:FE:EB:52:81:86:42:C0
X509v3 Authority Key Identifier:
keyid:C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:32:44:65:5c:2c:85:f8:c6:22:44:03:e8:c0:16:41:d2:41:
93:4b:61:f6:31:d9:66:ec:08:2e:45:99:13:41:cc:31:ac:2c:
3d:5b:fc:a9:64:65:ca:4f:36:7a:37:e3:e2:bc:30:73:6a:5e:
79:7e:26:f5:7f:cb:4e:51:44:8e:67:41:e9:7b:8a:13:23:93:
92:18:35:61:c5:bd:2c:c7:78:8c:c4:e4:00:7e:b7:93:0b:1f:
f9:2e:bc:c6:5c:5c:bd:64:a8:37:e1:05:0a:ab:eb:61:9f:d0:
9f:87:41:6f:b7:d6:79:b5:e2:44:aa:1d:85:e5:cb:b9:09:16:
d1:35:89:c1:a3:96:0c:37:69:6d:09:ab:36:22:bc:40:ce:d5:
9b:ce:c7:f7:ea:a4:9b:54:7f:42:37:4d:12:3c:87:72:36:6f:
0c:de:48:34:d6:22:e5:20:5a:83:3c:f0:fe:fe:b7:aa:5b:f2:
83:0b:43:01:ce:35:ea:bb:20:0e:e9:88:06:f3:1e:9c:31:6f:
1c:51:64:30:4d:b2:ab:34:8b:30:ee:c0:b0:41:85:33:99:a9:
b8:f8:7b:0c:55:75:c0:f8:77:b0:55:08:be:0b:9c:4d:f3:0c:
7e:47:c2:ec:e5:ac:9c:51:48:5a:85:ce:49:29:43:4f:10:13:
38:08:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:39:22 2026 by rpki-client