Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: YREClWJd5sz5+d7kStOEzmSY1qsA9tpdDf8JcPYZAhE=
Subject key identifier: 5C:0A:7F:38:44:E0:86:1E:E3:74:1C:34:9E:4B:C8:43:F3:AD:83:62
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 01A0C858D81F6681FC9D38FBAB8E151BFA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 0598
Signing time: Tue 22 Sep 2026 09:01:00 +0000
Manifest this update: Tue 22 Sep 2026 09:01:00 +0000
Manifest next update: Wed 23 Sep 2026 09:01:00 +0000
Files and hashes: 1: k0b9VtGawXwWdQgfJzcdEYCCg_o.roa (hash: dIXVCTmcfL3HOBzfVAxTvQR3ANPXcc/eVpPbv90sMfE=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: 2hl2iYndCrxW+tVuuz9x8+myE9/AHC2OoUUjyWYLj1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:d8:1f:66:81:fc:9d:38:fb:ab:8e:15:1b:fa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Sep 22 09:01:00 2026 GMT
Not After : Sep 23 09:01:00 2026 GMT
Subject: CN=5c0a7f3844e0861ee3741c349e4bc843f3ad8362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:58:b1:a2:c2:44:1d:80:bc:7b:a8:9a:e6:
81:60:51:46:b0:16:4b:78:47:30:79:d0:7f:15:5a:
6b:2b:ff:df:3d:fb:81:20:74:2b:fe:bc:49:89:13:
09:36:18:69:79:e3:9d:46:cc:a0:ed:9a:dd:e4:ff:
8f:1f:e6:0c:d0:d3:0d:66:af:1d:55:ac:04:f1:ee:
65:32:1d:e2:15:ff:43:8d:94:cb:f0:e5:7f:d1:21:
c9:3e:f6:f8:a9:ea:25:f6:7a:de:ea:28:b7:d1:ee:
f2:95:dd:db:b1:e3:5e:47:bf:d2:85:3b:59:2c:08:
2c:9a:47:a0:65:9d:1a:8d:6e:01:11:fc:48:bc:4a:
4e:ab:7e:ca:39:dd:09:4d:ce:be:87:c1:b5:74:b4:
b6:f8:2e:66:fd:ea:22:e1:12:c6:29:6f:13:25:a3:
47:33:08:4e:3c:45:c3:78:a9:f4:0e:80:d8:56:b8:
a1:ff:7c:f4:4d:77:9b:20:e7:c4:eb:92:3d:e3:2c:
f5:b3:f7:52:32:55:80:94:fd:51:02:75:a1:8b:08:
95:06:f5:86:77:9a:02:97:83:49:4b:7f:bf:48:d3:
95:32:61:6d:e0:07:fa:05:6e:73:e1:a9:a0:a0:52:
6e:67:29:ec:81:81:e0:bf:31:f8:f1:46:6c:c7:70:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:7F:38:44:E0:86:1E:E3:74:1C:34:9E:4B:C8:43:F3:AD:83:62
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4b:88:62:a5:fd:90:d6:33:cb:c3:d4:5c:fa:f8:cc:c8:1a:
90:0e:54:05:83:0b:7e:62:a6:9d:04:7d:ac:41:1e:d3:af:6b:
7f:04:2f:a1:a0:46:50:a2:6b:f9:b0:97:1e:25:2b:c8:3c:0b:
f8:9b:4d:c9:ba:13:63:16:cd:65:82:6e:2b:c2:d8:6f:4f:96:
c3:81:90:a6:56:7a:1f:4e:53:b9:24:f4:72:86:53:a4:41:dc:
61:ef:54:8f:bf:0b:86:53:44:c6:4f:ac:da:46:f7:22:99:ae:
89:82:27:e1:9c:af:b8:2d:fa:17:de:5b:73:26:51:a5:37:34:
cb:e7:0a:59:ad:3f:b6:20:b2:45:0c:5a:fb:82:7d:1c:ae:7e:
f5:2f:3d:0b:8d:8a:79:e3:2a:35:b3:91:4a:c1:7d:c5:38:7e:
73:c3:be:64:af:68:2f:3a:a1:32:12:af:71:f0:c5:81:98:10:
f9:86:82:b6:c9:a0:ad:f8:8f:2a:2f:51:b1:0e:5c:d6:ba:28:
6b:fc:98:25:b5:6c:94:11:ae:32:c7:b5:ce:3f:9e:05:d4:91:
63:12:75:a8:ee:98:a5:f2:41:5b:94:1e:72:22:a7:5b:74:22:
5d:87:43:5a:92:54:14:d0:59:ed:24:c2:56:13:18:4a:c0:22:
e4:a7:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:19 2026 by rpki-client