Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: WvcOz3EbsuAYhodsQnmW2y6ey9RzJDurOIFGiLks/zc=
Subject key identifier: 38:1C:25:69:D1:8E:61:6B:6A:E4:83:B1:5A:21:53:9D:E3:DB:7C:93
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 01A130A287BAC78E2EF2ADAEAAD2AF428E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0A4D
Signing time: Mon 12 Oct 2026 15:02:00 +0000
Manifest this update: Mon 12 Oct 2026 15:02:00 +0000
Manifest next update: Tue 13 Oct 2026 15:02:00 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: J6ozCmlWyFWSAauz9ZxsiJa7TryUYdfAJY/xSexSAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:87:ba:c7:8e:2e:f2:ad:ae:aa:d2:af:42:8e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Oct 12 15:02:00 2026 GMT
Not After : Oct 13 15:02:00 2026 GMT
Subject: CN=381c2569d18e616b6ae483b15a21539de3db7c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:1f:c4:20:af:12:a5:98:e4:c6:a3:e8:fc:
97:31:94:40:8b:8c:a4:78:d9:bb:6f:46:0d:56:73:
79:47:da:7b:8e:4e:77:02:ff:6c:d8:72:0b:9c:5d:
09:58:fe:52:20:3a:44:43:aa:2e:3a:5e:9e:a2:f4:
9f:28:b4:ce:74:21:80:cc:48:49:b1:83:93:b6:49:
32:44:c5:26:2a:07:b2:62:e2:b3:10:d2:81:b3:9b:
a3:d1:37:07:a4:a2:69:90:a1:42:42:5c:61:8b:34:
f7:df:6d:60:a1:16:07:be:ac:5f:15:b8:4a:24:de:
c7:94:5c:45:54:ac:83:0a:1d:6c:d9:e5:54:b1:62:
4b:f7:56:2b:30:ba:1b:80:0a:6b:9c:ba:59:d8:b7:
81:7e:0a:81:13:bb:b5:ee:24:a6:29:c3:ba:27:80:
8a:ab:c5:34:68:73:98:54:fb:e0:ce:c6:06:b6:8e:
8a:ea:b5:f6:d4:28:2d:e3:52:f1:c0:8d:eb:33:9c:
82:4e:6e:84:21:af:1b:94:00:d1:bd:fb:f4:94:be:
f6:f4:c5:05:ee:b0:2b:48:2c:8f:34:9b:8e:98:0b:
31:13:0a:32:8a:de:77:1c:f8:34:28:61:52:c8:70:
75:42:5e:86:5e:8e:1c:19:20:00:31:41:1c:5a:46:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:25:69:D1:8E:61:6B:6A:E4:83:B1:5A:21:53:9D:E3:DB:7C:93
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:62:44:f3:7a:27:09:b7:63:01:05:4d:45:54:db:a4:7d:5d:
91:6a:58:bd:3b:b0:33:ab:93:54:fd:19:84:c7:50:37:b0:0c:
54:a6:e3:5e:be:5a:81:78:ea:d8:71:ae:d5:4a:6c:34:e9:12:
64:5f:c5:d1:46:6e:86:8e:b4:1e:5b:eb:8b:09:a1:41:f5:40:
ae:73:b5:fe:d3:38:30:f9:45:7d:a5:02:bc:d4:23:4c:00:24:
f1:c1:4a:06:8a:5b:a1:ab:20:74:9b:1e:1a:79:44:02:63:84:
3b:17:70:a6:fb:03:10:3f:22:53:03:82:3a:9e:f9:9b:13:05:
7a:dd:e8:27:dd:6c:9a:1f:ea:0b:3b:c8:37:14:f3:05:0e:26:
fe:ba:4b:bc:69:46:d6:e5:94:26:f2:7d:3d:1c:80:08:7b:09:
80:b6:1b:47:2a:12:10:c6:2a:2e:52:1e:a2:17:86:36:ee:f0:
23:b6:b3:b5:75:4d:f0:ed:3d:bd:f3:1f:cb:75:32:b1:3d:b6:
24:96:fd:ca:a3:e8:e3:a4:ee:38:1a:ca:23:d4:63:93:67:b6:
7b:ab:f3:ff:3f:80:8f:9b:aa:5c:75:10:b8:de:bb:d0:37:a8:
d0:01:f6:f2:c5:30:db:9a:c0:96:f2:9e:0e:4f:10:c1:f7:b1:
b4:8a:6e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:28:20 2026 by rpki-client