Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: QGvWEJ+VgtjEB7Z77sIsW2kjxqHsOEpaHIXpeGgR58M=
Subject key identifier: ED:39:26:37:F5:1E:32:C2:53:00:CE:F6:9A:18:5C:A6:A1:D9:B2:2D
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 01A125E6FA6CAC2D98E79D2381DC820AD416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0CC1
Signing time: Sat 10 Oct 2026 13:00:56 +0000
Manifest this update: Sat 10 Oct 2026 13:00:56 +0000
Manifest next update: Sun 11 Oct 2026 13:00:56 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: uQ0d/nJ8nmCSKtZQWJiMN0ASrjmh/LHr6DYtnHxwkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e6:fa:6c:ac:2d:98:e7:9d:23:81:dc:82:0a:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Oct 10 13:00:56 2026 GMT
Not After : Oct 11 13:00:56 2026 GMT
Subject: CN=ed392637f51e32c25300cef69a185ca6a1d9b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:1c:c0:d9:06:12:80:20:f8:a5:33:f7:e9:
d0:f0:80:3e:36:aa:84:f5:1b:23:9b:a3:9a:56:1a:
01:d8:ed:6e:4b:13:07:53:b5:ee:2c:dc:58:c6:cd:
40:a6:cd:d1:c4:12:74:11:aa:3c:70:1d:4c:f4:98:
44:8f:e1:07:53:94:ba:01:14:c3:a8:0e:dc:dd:2e:
a9:44:29:54:b9:94:6a:c5:e1:7a:57:b8:ee:c8:fb:
6c:b2:e7:de:81:71:27:ba:81:ef:76:77:23:13:e0:
75:07:d4:93:14:83:ce:6c:77:32:97:ba:a8:5c:36:
9d:9a:0d:85:b5:01:ad:b6:ed:a0:7d:26:69:51:82:
1e:81:32:09:3e:05:0f:b6:69:6a:50:f2:3e:2f:f3:
24:1c:72:bc:a5:b0:48:e7:94:dd:91:0a:3a:36:de:
ba:bf:3f:04:b8:d2:9c:59:57:06:25:78:48:c5:c0:
cd:c5:f6:83:85:54:c7:8a:ff:45:87:d3:9f:ac:84:
a4:fe:1b:9e:40:9a:c2:80:70:b8:6c:c1:e9:f0:27:
69:f6:07:3d:fd:55:f3:aa:ab:61:20:3e:31:ce:46:
43:69:62:f7:86:c3:dd:73:13:c7:c5:4e:93:79:db:
58:d7:c9:2c:64:6d:3f:02:bf:90:9a:00:f8:c2:6d:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:26:37:F5:1E:32:C2:53:00:CE:F6:9A:18:5C:A6:A1:D9:B2:2D
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:23:bb:24:3b:53:4e:3f:2b:31:67:59:ed:56:46:f7:bd:90:
c3:3d:75:38:7f:cc:4b:45:a7:0a:de:d4:8f:5c:3c:ee:ed:04:
21:c7:73:d5:4d:db:0f:c2:cb:c1:65:4a:39:e8:6a:a6:a9:c2:
e9:45:1b:d8:7b:e1:a3:7a:a7:fd:f0:bb:68:51:66:72:3c:eb:
27:e7:68:39:3c:ca:06:d7:c0:b0:7e:67:75:85:71:55:a0:62:
20:80:fe:be:93:35:ec:8d:03:8e:ad:6a:b6:da:e1:6e:d2:d0:
a5:42:46:ef:b5:27:0e:07:f2:d5:60:ae:e2:33:e0:4c:5c:e0:
b8:9c:22:39:bb:d3:40:09:c5:36:60:3f:aa:e3:e5:7c:a8:4d:
40:a3:af:f7:5c:d3:68:0b:4d:c3:3b:65:51:72:ab:e8:ea:19:
c4:22:c2:0e:b5:2f:c0:69:9e:fc:e1:ab:0c:8f:44:ba:30:6c:
e8:19:1e:4a:ed:c8:8a:fa:4e:4b:f7:fb:f8:65:04:7a:9d:1f:
54:42:0d:d7:85:de:11:fa:4d:f1:78:b0:50:24:55:c3:38:76:
10:b4:28:03:0c:ac:12:34:6a:c6:89:80:8f:27:83:34:00:bd:
dc:af:b6:1e:98:f6:73:bc:c4:ac:75:32:9d:66:8d:44:5a:3f:
33:9f:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:49:32 2026 by rpki-client