Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: V8/kD5SZ9e7XAxZPwMY7+YOwTlYkU6F+PnFESQ1ZCsM=
Subject key identifier: 5A:B2:9C:D9:2A:D4:7E:F6:12:A6:14:00:56:C1:9B:69:31:8F:AC:37
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 01A13E5CA73D8F0AB31A391035401963A7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 062B
Signing time: Thu 15 Oct 2026 07:00:21 +0000
Manifest this update: Thu 15 Oct 2026 07:00:21 +0000
Manifest next update: Fri 16 Oct 2026 07:00:21 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa (hash: pQwXSl0mgcHIVKIbRMPhoOPInhtMVGSj+x6QMvyXQK0=)
3: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: bNQMM7UEJlRJ7VupfgX0GGephOO1zHsDiqvSvwvmV0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:a7:3d:8f:0a:b3:1a:39:10:35:40:19:63:a7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Oct 15 07:00:21 2026 GMT
Not After : Oct 16 07:00:21 2026 GMT
Subject: CN=5ab29cd92ad47ef612a6140056c19b69318fac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:da:cd:7e:75:a4:fe:9e:e0:48:96:59:0a:
36:24:48:2f:81:21:8a:32:0a:67:0c:27:b9:c0:6c:
ac:81:56:6e:ec:dd:96:27:b5:75:8b:63:81:1a:da:
1a:c6:46:7b:ce:a3:d1:5b:26:6a:14:ca:47:b6:ee:
34:06:5f:ca:bc:4f:b5:28:91:d7:33:d1:82:76:79:
60:9c:37:92:bf:90:b2:ba:05:b8:9e:3b:24:6b:c8:
cc:1a:0b:78:be:0a:fb:69:61:2c:dd:38:36:a5:fa:
2a:bf:51:b2:90:72:70:3d:7e:34:04:de:d4:86:e8:
80:a5:68:11:07:f3:e7:e0:63:86:0f:1e:44:5a:42:
bd:13:48:f1:74:54:d5:f5:d4:1c:7f:92:1a:6d:35:
87:01:1c:57:49:fe:1b:3a:4c:84:b1:28:87:cf:4a:
3a:ea:55:11:95:15:b7:07:c4:2e:ab:47:f7:71:fb:
f5:45:eb:67:d9:85:28:0d:54:5b:d4:a2:14:0a:9b:
9f:99:11:71:a0:f5:26:9a:ce:a7:08:20:65:36:a1:
97:9e:51:2e:d2:6e:d4:e7:ff:4c:81:ee:a3:83:b5:
af:d2:d1:3f:5f:4b:88:81:f6:3b:d6:1e:ae:e0:90:
c0:4e:96:b4:48:7a:99:a6:49:0c:d2:fc:f9:67:1a:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:9C:D9:2A:D4:7E:F6:12:A6:14:00:56:C1:9B:69:31:8F:AC:37
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:9b:5a:f2:50:a2:f2:34:a6:bf:a3:83:bf:2e:cc:7b:eb:
83:0d:fb:70:16:60:11:d9:f3:68:c0:88:6a:fb:f3:72:f2:14:
65:11:23:b0:e3:b4:27:a9:df:69:45:35:c6:f2:d7:44:cc:60:
2c:97:ed:13:f3:d2:66:4d:50:d5:ac:72:5f:57:1c:a3:66:fd:
27:e2:0d:df:87:7a:b0:1d:7d:03:cc:e3:ce:a8:68:04:79:bf:
f6:c0:bf:84:06:26:b3:d7:d4:0e:a7:6e:f9:02:20:cb:ec:b2:
68:a1:81:a9:78:52:70:12:b2:fc:49:f9:13:b5:c0:b0:7d:e2:
62:ef:36:37:87:21:70:50:53:02:c4:19:3e:9c:8d:df:97:03:
48:3b:84:00:6d:f6:43:2b:ac:5c:34:54:91:5c:a9:60:f4:65:
2a:6b:81:cc:9a:ad:ab:8c:6c:10:03:cc:19:5e:5e:6d:e3:5f:
2f:a5:ad:a3:b3:91:b1:cb:2d:1e:f1:e1:77:81:9a:df:d6:ea:
15:b6:c9:da:b7:0b:0e:07:0e:df:22:eb:99:86:f8:b8:31:f7:
b1:be:11:76:0d:cc:61:d7:c3:68:58:b0:56:06:d6:4f:c5:bd:
4a:40:e8:aa:2d:15:b6:2a:c5:13:53:02:e8:d5:39:2a:63:66:
8e:31:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:08:08 2026 by rpki-client