Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: viHYlpa5NjyB86zi+7ORKKDdmUxuZXQuBzFGn6GHY5k=
Subject key identifier: FC:FC:C5:C1:B8:52:09:2D:BC:B5:16:F5:3A:23:07:D1:65:FD:C3:31
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 01A1250BA1863B050D67B72BF19845B8B9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 18C9
Signing time: Sat 10 Oct 2026 09:01:21 +0000
Manifest this update: Sat 10 Oct 2026 09:01:21 +0000
Manifest next update: Sun 11 Oct 2026 09:01:21 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: 7+YCruFlAm4HIoDpyMjHO+dJ4slFtRiX4TBLvVWRF+g=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:a1:86:3b:05:0d:67:b7:2b:f1:98:45:b8:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Oct 10 09:01:21 2026 GMT
Not After : Oct 11 09:01:21 2026 GMT
Subject: CN=fcfcc5c1b852092dbcb516f53a2307d165fdc331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:15:a4:b6:ed:24:40:82:34:ee:9f:ba:1b:
dc:5e:42:9a:b3:0a:4e:a5:4c:ee:d1:fe:b6:48:cf:
d2:4f:86:14:6b:a3:1b:80:34:7d:3f:39:31:4e:c0:
d0:a2:a4:dc:96:bd:ba:fc:b6:57:0d:2c:7b:9b:8e:
ed:28:a4:27:88:ed:a8:33:ae:92:5a:89:f7:9a:d9:
45:86:db:f3:b0:17:8e:13:ca:3c:40:a2:e3:5a:36:
ba:5a:b4:eb:0c:e4:95:c0:9d:1f:5a:81:d6:29:9d:
5d:c1:76:ac:44:07:49:2e:59:60:fd:c0:5d:71:71:
3a:0d:33:ef:4b:c6:7d:36:15:b8:2e:c1:6f:5f:92:
12:6b:90:f1:ae:0d:a7:12:78:a8:93:59:41:e9:01:
dd:33:87:b5:d2:18:0b:7e:f0:0b:89:6f:26:38:d4:
7b:3c:a2:fe:03:97:23:a4:90:b3:da:d3:6c:fc:39:
be:f8:26:a2:b2:08:52:68:43:bf:ce:28:0c:2b:a9:
b0:b3:21:6b:db:e3:1f:98:4d:5a:88:3d:ce:4d:0f:
a4:71:cb:ff:20:77:35:27:10:e2:f8:88:27:26:0a:
39:42:b4:46:39:0a:89:8a:e7:94:09:4d:05:4b:10:
ec:f1:27:8c:d6:99:79:06:82:08:c1:59:87:11:04:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:C5:C1:B8:52:09:2D:BC:B5:16:F5:3A:23:07:D1:65:FD:C3:31
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:0d:a6:eb:00:52:03:a6:7d:63:8f:ff:71:75:22:67:b2:
d0:b8:ff:57:ff:57:ae:1a:2f:57:77:42:26:54:8f:da:14:f6:
73:96:63:c8:c6:a0:37:5a:25:94:2f:3d:c6:1c:be:fb:2b:b2:
97:1b:4f:50:a1:3f:8d:29:53:5d:75:70:68:ed:a9:49:f7:ef:
27:fd:83:8e:fc:5c:a1:17:db:1b:0d:4a:ea:4c:8c:25:40:49:
26:d7:0a:a2:48:0f:49:48:98:87:33:cc:d8:0e:b9:e1:e4:38:
5c:d4:3a:e4:f0:07:84:35:2a:09:4d:e7:e5:1f:1f:b5:b2:d2:
f0:cd:02:43:d1:89:f6:b2:51:48:6f:04:22:00:f0:f0:a5:86:
29:e0:fd:cc:ed:e6:38:5a:f1:76:b2:a6:83:f6:2c:0f:8a:c0:
e8:87:d6:70:1a:e5:9a:3e:80:97:57:be:ee:32:b1:c8:55:41:
d7:e6:05:1f:88:dd:5b:c6:ce:62:95:b1:18:9c:97:45:1a:f0:
99:46:90:fb:46:99:9d:44:e1:30:9e:e7:dd:78:92:02:56:81:
92:df:69:cb:07:ae:a9:0c:38:5b:43:47:59:a9:77:89:33:fa:
52:0f:98:f6:b0:54:c4:c3:54:14:b7:a7:44:f8:03:d5:ac:2f:
3a:95:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:55:45 2026 by rpki-client