Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: RInyuPRNBHt2wLvJNpE9bCFp+tkMpN3ArKTup2PsTrs=
Subject key identifier: CD:D8:A0:0A:DB:97:AD:DE:C6:37:C8:3C:52:A2:3F:16:94:38:63:BE
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 01A128B184FCC23DCED2682E81FD058D9D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 02:01:24 +0000
Manifest this update: Sun 11 Oct 2026 02:01:24 +0000
Manifest next update: Mon 12 Oct 2026 02:01:24 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: MxSPsq8xr+AMCe+iQNVSESiFrKRY/yuEkBfnhWz6sBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:84:fc:c2:3d:ce:d2:68:2e:81:fd:05:8d:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Oct 11 02:01:24 2026 GMT
Not After : Oct 12 02:01:24 2026 GMT
Subject: CN=cdd8a00adb97addec637c83c52a23f16943863be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:85:16:7d:0e:93:49:6a:6f:96:04:41:e5:
46:7f:94:5d:ae:a3:83:f7:a5:8c:3a:b9:a7:d4:d5:
b0:77:a6:c1:25:aa:36:f8:d5:7c:8f:28:30:0d:bd:
31:02:0f:54:89:3d:16:b7:64:37:bf:1e:80:af:18:
ca:fd:d1:fb:14:1c:3b:b9:92:9a:c5:f1:ce:88:85:
d7:d1:99:82:e9:91:d0:9f:33:fb:cb:6e:4a:7e:d4:
a9:9e:7c:b7:10:50:a5:5f:93:d9:f4:66:8a:ff:42:
19:28:94:37:a9:71:ea:74:d9:5f:88:f4:1a:c1:bf:
be:4c:35:b0:f9:30:96:1e:5a:31:9a:3d:14:28:01:
e2:7d:0c:6a:7e:d4:01:af:76:1c:fd:61:cb:e6:66:
19:09:73:ca:92:ea:03:23:1c:56:2c:aa:c7:e2:a3:
d1:e1:7e:2a:a8:65:09:91:1d:7e:46:ab:6c:e8:16:
f0:25:58:60:40:27:7e:ed:e2:83:e6:be:f2:02:79:
ce:04:56:d5:52:76:42:3b:62:e2:cf:1b:df:4b:9d:
1e:e7:e2:d3:07:ad:c6:09:ce:9d:5d:5d:de:f3:24:
e1:dc:5b:df:53:69:eb:7c:8f:dc:36:a0:4a:3c:9a:
9e:1e:57:26:13:03:40:80:c1:d1:1d:7a:6d:2e:85:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:A0:0A:DB:97:AD:DE:C6:37:C8:3C:52:A2:3F:16:94:38:63:BE
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:ff:d7:df:2b:84:47:2e:b6:8f:96:36:52:5c:6e:44:51:
f4:f3:10:8c:84:92:9a:3f:00:cd:3e:54:c7:ee:b2:c6:5c:38:
f0:1e:fe:de:93:1e:0e:d7:6f:3c:88:74:3d:06:d2:24:38:27:
26:d2:de:b8:23:bd:3f:44:a6:90:8b:2b:c2:ab:a5:b0:89:fc:
71:7d:e7:88:05:c1:16:b0:0c:82:f2:b7:8c:5d:4a:9b:ac:19:
d9:c9:b0:4c:c5:d0:55:18:f8:5a:cf:fc:95:b6:07:d5:b5:91:
76:53:10:0c:c0:b4:f2:44:f6:07:3b:ca:82:4f:b5:5e:ad:33:
a5:29:fe:06:86:a5:74:a0:40:4b:b4:1f:66:e5:48:63:7c:01:
4c:e0:f7:31:85:f4:e1:45:23:f0:33:54:52:08:64:1d:25:af:
52:fd:1a:02:7f:47:59:82:7d:4a:98:ea:b5:cc:ce:bf:ae:58:
2e:d3:65:34:f8:be:df:f8:a5:d3:79:6e:43:9b:d5:f2:03:10:
5d:2e:5b:e9:17:3d:49:4d:39:9c:ff:d3:b9:d8:19:7f:30:ec:
90:97:4f:0e:d0:59:84:50:b7:b3:f6:ae:cf:73:f2:ba:56:ec:
76:18:a4:2c:2e:4d:b2:a5:af:21:11:62:6b:6d:00:a9:91:db:
28:8f:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:25:50 2026 by rpki-client