Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: vqjnba2sPbsjOiw495sgVExCHbIwLj9XHhFTI7AEC+c=
Subject key identifier: 5A:FA:DD:82:7F:05:5F:5A:78:BE:2A:35:22:8B:12:C0:6A:89:B5:70
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 01A1E05F7EFA2F5B166E18282C458C791342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 18:01:57 +0000
Manifest this update: Sun 15 Nov 2026 18:01:57 +0000
Manifest next update: Mon 16 Nov 2026 18:01:57 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: mKiKaQiTGPgN1sie32zhDke0l9vXE6KYsSh/jIKz7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:7e:fa:2f:5b:16:6e:18:28:2c:45:8c:79:13:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Nov 15 18:01:57 2026 GMT
Not After : Nov 16 18:01:57 2026 GMT
Subject: CN=5afadd827f055f5a78be2a35228b12c06a89b570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:ea:fe:50:3e:0e:7f:c7:be:a3:63:31:9a:
de:bb:7e:25:17:9f:da:97:6e:36:09:af:ed:85:8e:
32:6b:27:78:cc:51:ba:75:57:dc:2b:b3:cd:c8:a2:
59:34:b4:a0:61:04:d3:8c:92:b8:15:d7:b0:65:af:
cb:7b:e2:8c:74:76:6f:b9:0a:d3:26:54:5f:de:f2:
b8:de:73:53:97:5c:9c:9c:f9:b2:74:fb:ab:1d:3d:
bb:a0:36:72:72:e3:f2:c8:47:93:1c:0d:c8:65:b3:
b4:3f:d6:31:bf:80:eb:fa:a6:dd:f4:b5:9c:6a:0f:
50:4e:e4:c6:16:35:09:a7:9a:7e:0f:49:d2:89:1e:
73:08:9b:e9:54:d9:91:5c:2f:a5:1c:24:38:fd:2e:
c4:1f:24:d6:76:cf:a6:b5:86:05:4c:9d:a0:57:23:
f2:22:a0:3b:14:71:45:94:55:37:b9:bb:c2:94:7d:
49:0b:69:a7:84:98:98:a9:1e:93:c7:c3:d1:93:9c:
35:3c:ad:78:bd:63:ad:50:4e:9f:c4:34:42:43:45:
32:b1:cd:44:8d:9e:ea:4d:3e:98:ef:e5:d3:58:09:
bf:9e:b7:cd:bd:8c:d5:6b:14:49:30:68:18:5d:20:
a0:ea:77:ed:9b:11:dc:88:cb:ee:bf:de:b3:4a:68:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:DD:82:7F:05:5F:5A:78:BE:2A:35:22:8B:12:C0:6A:89:B5:70
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b1:73:f0:17:21:01:0c:f1:81:08:13:ec:8d:a6:e8:2c:61:
00:6a:a8:9a:e5:2a:86:ad:35:11:32:02:2c:bd:c3:4e:03:bd:
c9:b6:46:82:f6:9b:c2:74:2a:42:15:3f:89:a3:63:e9:2c:94:
19:a6:21:af:5a:f9:47:67:d2:4f:6e:37:5f:c0:f4:48:e2:82:
63:1b:ce:82:a8:61:75:42:87:b3:11:94:fe:b6:09:a2:c8:dc:
da:ad:3a:ab:b8:1d:25:5d:75:5f:29:ed:5d:54:5c:4f:cb:e7:
9d:ea:6c:1b:8b:da:8a:8d:d7:5e:95:f6:43:ff:39:48:22:13:
06:88:78:dc:be:49:16:8c:9e:74:8a:27:3c:2e:d4:65:8c:2e:
c7:0c:cb:13:18:90:69:80:75:a9:7a:f8:d4:84:3b:21:d5:51:
b5:f6:2a:d2:c0:52:12:dc:4c:46:88:a1:ed:bf:e0:b3:86:a8:
33:cb:87:70:ad:db:d2:8e:67:5a:52:06:aa:9f:7c:aa:b6:3b:
03:be:16:bd:09:a0:32:55:54:0e:51:c7:bb:7e:2a:4c:ff:cb:
20:36:03:1f:69:85:2d:be:8c:24:4c:40:b1:88:e9:ed:ee:0a:
aa:c9:ab:62:0a:f5:0f:72:84:23:08:f1:df:54:82:18:ec:50:
a0:04:eb:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgX376L1sWbhgoLEWMeRNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi
MGEwYjcwHhcNMjYxMTE1MTgwMTU3WhcNMjYxMTE2MTgwMTU3WjAzMTEwLwYDVQQD
Eyg1YWZhZGQ4MjdmMDU1ZjVhNzhiZTJhMzUyMjhiMTJjMDZhODliNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpvq/lA+Dn/HvqNjMZreu34lF5/a
l242Ca/thY4yayd4zFG6dVfcK7PNyKJZNLSgYQTTjJK4FdewZa/Le+KMdHZvuQrT
JlRf3vK43nNTl1ycnPmydPurHT27oDZycuPyyEeTHA3IZbO0P9Yxv4Dr+qbd9LWc
ag9QTuTGFjUJp5p+D0nSiR5zCJvpVNmRXC+lHCQ4/S7EHyTWds+mtYYFTJ2gVyPy
IqA7FHFFlFU3ubvClH1JC2mnhJiYqR6Tx8PRk5w1PK14vWOtUE6fxDRCQ0Uysc1E
jZ7qTT6Y7+XTWAm/nrfNvYzVaxRJMGgYXSCg6nftmxHciMvuv96zSmg1BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr63YJ/BV9aeL4qNSKLEsBqibVwMB8GA1UdIwQY
MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt
ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx
LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULFz8Bch
AQzxgQgT7I2m6CxhAGqomuUqhq01ETICLL3DTgO9ybZGgvabwnQqQhU/iaNj6SyU
GaYhr1r5R2fST243X8D0SOKCYxvOgqhhdUKHsxGU/rYJosjc2q06q7gdJV11Xynt
XVRcT8vnnepsG4vaio3XXpX2Q/85SCITBoh43L5JFoyedIonPC7UZYwuxwzLExiQ
aYB1qXr41IQ7IdVRtfYq0sBSEtxMRoih7b/gs4aoM8uHcK3b0o5nWlIGqp98qrY7
A74WvQmgMlVUDlHHu34qTP/LIDYDH2mFLb6MJExAsYjp7e4KqsmrYgr1D3KEIwjx
31SCGOxQoATr9g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:50:51 2026 by rpki-client