Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: 3gQ+dZbqkzpieBF7yhEzxMBolJ/gpskO9gjQeWHoPpk=
Subject key identifier: BD:FB:7B:1E:AC:F0:83:BD:B3:7D:56:C3:21:D7:16:F3:6B:6D:CC:B1
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01A12BB1DF39C212C14D662BD7CD2BEF01FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1AA1
Signing time: Sun 11 Oct 2026 16:00:39 +0000
Manifest this update: Sun 11 Oct 2026 16:00:39 +0000
Manifest next update: Mon 12 Oct 2026 16:00:39 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: yUbKOwdcX9x7u5E8nTr5mhlCgYnqpG5p03YukcEC4kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:df:39:c2:12:c1:4d:66:2b:d7:cd:2b:ef:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Oct 11 16:00:39 2026 GMT
Not After : Oct 12 16:00:39 2026 GMT
Subject: CN=bdfb7b1eacf083bdb37d56c321d716f36b6dccb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:6f:6e:a1:fc:6f:7a:49:5c:3b:fd:dd:3d:
f4:27:e4:87:44:f2:0d:75:f5:e5:e8:29:c1:81:bb:
20:5f:99:ea:e3:4c:5b:02:07:82:24:60:08:59:5b:
40:5c:a7:7c:2c:51:d5:23:79:f1:26:28:a3:95:2f:
ee:12:ca:a1:ca:c2:99:3d:97:da:81:65:3b:ae:9b:
cf:28:e0:b9:0c:a9:c2:ad:ba:db:48:9d:d4:cd:bb:
32:5a:20:a9:37:18:d8:3d:7e:ba:ca:de:46:1f:da:
6b:21:dc:bf:2c:f4:2d:e0:41:c6:2b:2c:56:17:f2:
a9:e0:01:b2:dd:18:f7:c6:f9:4b:31:cd:55:0e:9a:
fd:0f:7a:13:af:24:2a:6b:0a:44:83:dd:eb:89:b8:
6c:42:54:31:40:62:50:b0:b8:a5:f9:3f:11:28:5a:
8a:86:ef:e9:c6:7c:b9:ad:80:b8:98:1c:d2:3c:86:
96:0d:c1:1c:d6:1d:45:10:04:4c:0c:0a:0b:0c:ba:
38:76:c2:47:7c:b8:12:97:eb:84:92:2f:f3:d8:66:
64:33:10:37:8c:f6:27:c9:0f:9b:ab:b1:25:3f:56:
cb:a8:89:90:e3:3f:19:1b:06:3b:c6:fb:6b:6a:48:
9a:02:19:d6:a3:0c:b9:fc:d5:45:37:a6:d5:cf:48:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:7B:1E:AC:F0:83:BD:B3:7D:56:C3:21:D7:16:F3:6B:6D:CC:B1
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cc:e7:e3:d0:cb:ea:74:2d:ac:96:ab:10:a4:ad:e1:42:02:
8f:55:d0:ae:41:aa:c2:2d:e4:2e:d4:eb:6e:ad:e7:85:70:65:
e0:23:37:1c:cb:3c:ca:59:38:f9:d8:95:d6:fc:ee:ad:af:49:
41:41:18:48:6f:a1:10:2e:67:e3:2c:b6:68:e7:3a:a5:a1:1a:
50:3d:59:56:49:65:d3:8f:fb:11:45:ce:35:f9:78:2d:03:10:
dd:ae:93:08:ac:11:62:fd:b9:0b:ff:8c:9d:0a:ff:d3:a0:46:
38:e4:b8:08:ce:13:98:c9:8d:a7:2a:e3:59:68:84:09:6f:a8:
2c:58:9c:d3:fc:22:59:f2:55:47:a9:22:55:00:03:0f:79:2f:
49:05:6f:3e:9f:87:de:19:14:60:92:91:5b:7a:b2:da:80:6b:
6f:cc:ec:9c:6b:ca:77:fc:f3:a2:9e:fc:05:b3:9e:1e:2f:3d:
fb:7b:3d:1d:5e:2e:cc:bb:76:d2:68:a0:ff:72:6f:e8:a0:06:
76:6c:c5:c2:8e:61:bc:34:fb:29:5f:f4:b9:6c:8c:94:2d:c5:
4a:59:0b:6f:99:ac:d4:38:91:e1:35:14:5e:60:9e:11:49:af:
4e:1e:b3:70:a4:00:bf:d5:65:31:6a:1f:ca:f5:9f:58:2e:be:
aa:46:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:58:35 2026 by rpki-client