Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier: 6IzKG08XMfY7FKDYOi+pQS4zy4mwj3ocAlsxUVDZfdM=
Subject key identifier: CD:0A:0E:9A:CA:82:D7:C4:7A:EB:B6:DD:E6:54:4E:A7:1B:8A:CC:C4
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 01A1C4796D30F595A692280797938FB5C586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number: 10D4
Signing time: Tue 10 Nov 2026 08:00:54 +0000
Manifest this update: Tue 10 Nov 2026 08:00:54 +0000
Manifest next update: Wed 11 Nov 2026 08:00:54 +0000
Files and hashes: 1: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (hash: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk=)
2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: 7kbG2NABz4S+BBRD7zbTsDxMWTJJXVRKC16m4nFD/fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:79:6d:30:f5:95:a6:92:28:07:97:93:8f:b5:c5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Nov 10 08:00:54 2026 GMT
Not After : Nov 11 08:00:54 2026 GMT
Subject: CN=cd0a0e9aca82d7c47aebb6dde6544ea71b8accc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:3d:90:80:2e:5b:5e:5f:56:5c:8b:a5:66:
1f:ec:4c:84:68:60:ae:fe:c0:1e:21:c7:73:a5:62:
34:fa:41:17:4e:8b:a0:fe:6f:a2:40:91:6c:af:17:
08:f7:80:40:d3:dd:b6:7d:6e:93:a2:ea:7d:80:7c:
85:8c:71:7a:b1:3a:ee:c0:ed:05:b0:60:5b:07:e6:
dd:9a:24:32:f8:32:e3:d4:3e:9e:20:f7:e7:57:21:
35:e5:de:0d:2f:5f:9a:10:be:c4:d5:8d:87:d6:75:
8c:bf:20:00:f6:99:6c:c7:41:91:b1:50:8b:92:31:
d6:61:39:32:c5:e0:6c:4f:d5:a0:75:1f:10:63:91:
60:b3:1a:b4:35:20:85:be:39:73:10:40:40:94:27:
ca:04:05:0e:72:2b:0d:d9:2e:b1:ba:92:59:cf:b7:
25:0b:eb:25:e2:6d:54:ff:c1:ff:ac:c9:a4:0a:26:
84:d2:46:2b:e1:c2:a7:c0:a8:e3:a9:71:d7:47:61:
13:73:7c:c8:a2:3e:01:54:f9:d5:a4:7b:26:50:bd:
ba:37:ea:dc:f7:c3:f8:6d:82:59:1f:76:15:d0:98:
df:e6:b6:0f:13:2a:e7:31:79:c6:89:a0:d7:07:99:
71:9e:fb:03:bc:1d:2e:fd:ed:c8:c3:48:00:01:65:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:0E:9A:CA:82:D7:C4:7A:EB:B6:DD:E6:54:4E:A7:1B:8A:CC:C4
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:6c:03:f7:54:60:9d:8c:71:cf:e3:91:b0:9d:9f:b7:ac:
ba:5e:ed:83:b3:e4:a0:cd:ba:88:b9:6e:c1:a3:bc:d8:2c:ff:
93:be:58:9e:fa:c9:41:42:c9:e1:39:bd:cb:ad:48:52:93:0c:
bf:0e:f2:da:cb:3c:eb:8a:b8:5c:4e:80:0a:74:c2:d5:67:7a:
69:59:e6:57:1e:59:05:6f:99:b5:bc:b6:25:48:f8:1e:c5:0f:
91:5b:01:fb:d3:70:a0:06:e1:9a:a8:ae:9b:f0:b2:ee:f5:6e:
1c:ba:d4:71:c6:64:ca:0c:af:3f:0d:1a:05:e1:2a:88:fc:3d:
3a:2c:ea:dc:88:10:a0:c6:3a:88:85:7d:3f:b7:1f:b8:e1:2f:
d8:0a:fb:2a:bf:c0:85:7a:b7:c7:d1:46:c0:4b:44:46:9d:4c:
e2:a0:d9:76:96:e7:9d:f3:18:fa:25:c2:bc:af:3b:12:c6:8a:
d2:90:4a:30:62:33:ea:4d:de:44:93:89:2f:ec:6c:72:8c:68:
58:4e:69:68:04:08:7d:d5:67:9a:d1:f1:57:7b:1f:2b:53:15:
81:40:a9:6b:4f:89:c0:fd:5c:f6:30:f3:dc:cb:9d:bd:0f:cf:
6b:41:a9:7f:40:20:00:3f:1a:77:b8:15:35:03:33:72:e3:49:
74:e6:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:34:02 2026 by rpki-client