Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: t3z8R6xDp2wTEWepad8jfzYyoFoTkgGmQHitFqeKVFE=
Subject key identifier: 89:4D:FB:D9:6E:4A:E8:1D:4F:1C:2F:91:C2:9F:80:5B:18:D5:7E:18
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 01A0CDECE94605140C913BA4AF13A4E76228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 11:00:50 +0000
Manifest this update: Wed 23 Sep 2026 11:00:50 +0000
Manifest next update: Thu 24 Sep 2026 11:00:50 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: uUXxtlPXivbzujvA6pgAYCqadFaNBgGhSzqu/MeBXVE=)
2: hjtitcU8d-FLJ62seFiGxMChEI0.roa (hash: zPnqOgCOOliYSlkJeU3JzTfIehQxkqyATNcPPm5JpBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:e9:46:05:14:0c:91:3b:a4:af:13:a4:e7:62:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Sep 23 11:00:50 2026 GMT
Not After : Sep 24 11:00:50 2026 GMT
Subject: CN=894dfbd96e4ae81d4f1c2f91c29f805b18d57e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:8c:eb:84:da:45:b1:86:cf:96:aa:f4:c2:
53:43:75:55:a5:43:3e:d8:ae:e4:52:05:d3:03:4a:
d5:c2:e6:ca:70:c9:fc:c8:71:d9:4d:4e:43:8a:3e:
a4:d7:0e:df:c6:42:d3:33:1a:5c:6d:82:a2:ed:6d:
33:af:20:52:34:8c:1f:63:c4:9b:1d:2d:de:79:f9:
48:1f:95:14:0f:c2:6f:aa:13:a6:47:a8:ee:e3:25:
35:db:fa:05:c9:8b:59:85:10:6a:f6:f2:33:24:28:
35:2f:48:f2:aa:1e:a1:62:71:c6:55:a1:3d:c4:ba:
f1:27:35:aa:da:29:91:fa:8c:90:6c:11:90:a8:c1:
e1:f3:06:45:72:cb:39:30:6a:5a:70:31:f4:93:25:
28:c4:95:84:6b:86:e5:dc:4a:0c:43:fd:61:c2:ef:
b9:7a:6b:4a:1d:5c:93:df:fb:cb:a6:ee:34:13:12:
0a:8c:96:be:1d:a8:63:8e:9e:9a:1b:50:de:80:6f:
f0:73:e3:25:c0:95:9e:20:f2:04:b4:fb:11:78:ee:
3a:01:8e:68:f1:13:f4:95:62:95:27:b0:63:48:71:
cc:6e:cf:2d:3c:ea:47:2f:2a:7f:af:a7:a3:7f:17:
2c:8a:3d:65:1b:14:1e:5d:d7:88:87:79:3a:2a:9c:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:FB:D9:6E:4A:E8:1D:4F:1C:2F:91:C2:9F:80:5B:18:D5:7E:18
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:94:c7:60:b4:ac:53:cc:23:66:05:4f:66:0b:b1:6c:fd:70:
e3:c4:17:98:9b:fa:46:ab:b3:11:ad:45:e2:ba:cc:03:36:1c:
bc:63:53:28:fb:66:3f:9d:57:25:01:60:c1:14:09:dc:e6:f9:
cc:b0:89:f4:d4:a3:68:4b:34:20:3d:32:7a:fa:83:fd:e3:69:
6e:12:70:b6:6a:a9:c4:c2:7b:be:90:72:78:33:12:a5:3d:5a:
60:d2:f4:ab:c4:cf:df:38:b4:38:ce:26:f2:99:c9:1f:36:11:
1c:33:49:9d:10:e5:a9:70:cb:ac:a9:10:8c:3c:23:68:c8:29:
e3:0e:06:c3:85:ea:31:64:d2:67:93:73:46:3b:35:4a:a7:c3:
02:5f:8a:36:d1:f7:20:8e:84:a7:79:40:69:86:40:d6:00:82:
fb:20:74:00:bf:80:3e:b7:5d:6b:92:b4:a7:2c:58:9e:4c:81:
fc:72:09:e2:1e:4f:01:79:8c:83:76:ca:cc:1b:28:91:bd:52:
ca:65:c6:8f:eb:63:26:49:86:07:29:f7:2e:e4:87:bd:47:08:
0c:4b:47:c7:9a:9f:f8:7c:6f:26:a5:3f:e0:a7:13:0a:96:cb:
11:28:50:4d:27:91:9d:5b:a9:23:af:07:b2:79:52:5a:80:d6:
82:f5:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:04:44 2026 by rpki-client