Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: xvGcuOhW0ZnfiRVLxkog7tBMT9+aLRLLI1uz3Jd0a3I=
Subject key identifier: 17:A3:94:9D:03:A1:7B:F3:D8:44:CB:5E:E7:5D:A8:8C:D5:B0:6D:23
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 01A0CEC82AEA471ECDB39B18016D46EFB7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 1827
Signing time: Wed 23 Sep 2026 15:00:19 +0000
Manifest this update: Wed 23 Sep 2026 15:00:19 +0000
Manifest next update: Thu 24 Sep 2026 15:00:19 +0000
Files and hashes: 1: 1upib3w4dNwpLOBhgbemzuWJEnk.roa (hash: GhXcTauSsjZxaizJzGN0VZhjaJZ3SZLeg6vkoxXN+YY=)
2: 5dCmEdDrjOnlZMp81Q2uR_wbzFI.roa (hash: lxe58PQH7VpXxHz7k/J8LJcmNsZLy0kcv52Otk3eQ+U=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: ERn7pFuoCZ6Y9l51mn8bccW7UPh5AKFV4dpGWrlQwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:2a:ea:47:1e:cd:b3:9b:18:01:6d:46:ef:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Sep 23 15:00:19 2026 GMT
Not After : Sep 24 15:00:19 2026 GMT
Subject: CN=17a3949d03a17bf3d844cb5ee75da88cd5b06d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:5f:ab:21:f0:0e:6d:5a:e3:c7:65:b7:73:
29:20:71:e6:4f:e8:35:a3:85:f9:49:a8:db:87:64:
9a:5a:49:5e:f5:1c:e2:c4:09:1d:af:24:c2:be:c4:
b4:17:37:2a:09:71:c3:32:1b:fa:80:71:e1:bc:27:
0a:88:3c:c7:af:74:77:3f:c6:68:62:71:56:04:19:
31:48:f5:59:5b:e2:39:fc:4b:6a:87:16:4c:9f:f3:
ac:d2:76:8f:e2:e2:2a:8c:53:8f:c2:df:3b:b8:c3:
99:16:94:4f:6f:8f:1b:5d:af:8e:ca:53:6e:eb:09:
d6:c4:e0:b9:24:cd:ae:d5:fd:83:68:2b:6b:c2:33:
34:3d:10:b0:9d:f6:b4:b4:aa:99:3d:84:95:f0:fa:
f7:44:4a:d1:ff:6c:56:37:5e:df:7e:21:5d:d8:46:
b6:f5:6a:0c:03:f6:12:5d:0f:74:af:66:34:47:3d:
b3:1d:e5:11:63:cd:47:a6:fb:d6:21:35:7b:a0:27:
e6:0b:0a:d2:22:39:f9:f8:5f:d0:06:42:03:6c:5e:
71:70:f3:ec:94:d9:00:08:4b:3d:2c:54:39:a1:cf:
23:4c:5e:cb:08:c3:59:d7:c3:b9:b8:71:04:d8:f0:
da:71:5c:91:e0:18:51:3f:a8:54:c0:a5:a9:e9:43:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:94:9D:03:A1:7B:F3:D8:44:CB:5E:E7:5D:A8:8C:D5:B0:6D:23
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7e:d0:90:85:e4:0c:a2:85:0a:90:77:67:ac:bc:98:f3:e2:
79:eb:20:c7:70:99:cd:ba:4a:64:ef:28:7b:e3:c7:a0:1d:13:
a5:f6:b2:d7:1c:c3:08:97:bb:0b:d1:4a:cf:46:aa:3f:b2:66:
ff:f6:5c:d0:6d:22:4c:88:3c:9f:f3:70:6d:33:a1:c7:e1:1c:
37:0e:5d:c0:3e:b7:9f:c0:e9:77:63:5c:9a:d2:e7:a1:6e:a5:
8d:a5:b7:24:db:e8:47:75:a3:d5:d2:27:9a:93:19:ea:fd:43:
cc:d7:25:eb:86:a8:b4:2a:9d:1c:f3:83:83:2e:24:b5:84:37:
da:65:91:de:3c:11:51:29:a9:49:bc:9e:41:ca:bb:8d:a8:db:
ba:e2:6e:84:d1:1e:4c:19:c0:52:08:97:b4:4b:25:37:58:46:
5e:d7:98:39:51:e6:6b:7c:66:80:59:eb:69:83:f8:ae:b6:2b:
e9:59:8d:35:32:37:f0:b0:b6:18:9a:94:75:ac:17:07:35:8f:
3a:dd:ba:82:b9:67:f6:31:6d:63:57:b3:de:5d:3f:0a:78:c8:
dc:1d:5e:b3:13:ab:6f:4f:4a:69:e4:2c:5a:db:07:0b:a5:93:
30:f6:20:21:f0:d3:0d:27:85:30:51:2f:7b:33:e9:dc:7e:95:
0a:70:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:37:03 2026 by rpki-client