Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: 3CT4ZxCU6VQl87bpRtNoparUXn6ZGLAic9ZPuXivG3w=
Subject key identifier: 62:34:56:3A:CF:EB:C9:2E:89:82:64:36:10:AE:55:0E:BA:95:B8:75
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01A0CB59B935D4D62BA44BA6395D653C82E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1A84
Signing time: Tue 22 Sep 2026 23:00:49 +0000
Manifest this update: Tue 22 Sep 2026 23:00:49 +0000
Manifest next update: Wed 23 Sep 2026 23:00:49 +0000
Files and hashes: 1: KQegI9zFl4TTXrM0z9Yjv28lgns.roa (hash: Ej7A/eIErtk4SW4resekw38eVCxq6nz5fw0K4qp4xAQ=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: MfgtXeITzs5qCBmVxZtNDtNRXn2j5qQ+vMg0k5Fp/ko=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:b9:35:d4:d6:2b:a4:4b:a6:39:5d:65:3c:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Sep 22 23:00:49 2026 GMT
Not After : Sep 23 23:00:49 2026 GMT
Subject: CN=6234563acfebc92e8982643610ae550eba95b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:da:3a:b8:aa:19:6f:bf:35:93:c5:ec:bd:
9d:91:b0:6f:38:2a:22:86:fa:03:1b:f6:9e:38:ad:
03:a3:9f:e7:a5:79:a3:38:18:20:0f:25:31:56:fa:
19:bd:92:4e:a7:35:1c:fe:c2:b8:7e:35:d6:c4:10:
a5:c0:8f:a2:6d:ab:fb:1c:cb:b8:18:ac:87:e1:d2:
8a:7e:5e:ad:0f:55:f1:c3:f4:b8:ec:e2:b2:56:31:
f4:81:2e:78:bb:0c:1e:36:c5:40:6d:60:e0:7f:1c:
42:02:93:da:99:90:5f:b2:23:84:10:aa:40:ce:1a:
0c:de:12:a8:85:1c:8c:5b:7b:28:31:69:c8:67:39:
22:24:0a:31:2b:3b:c8:56:af:31:27:a5:89:1c:3c:
d9:f2:77:d3:24:71:74:4b:e4:d0:96:5c:6c:35:79:
b5:a6:a3:01:23:1a:06:40:0c:cd:a1:de:f8:4c:2d:
ac:d2:69:be:b6:2d:28:07:a4:59:3c:3d:80:37:0a:
63:08:37:17:90:5e:75:bc:07:bd:d3:7f:66:30:da:
f4:dc:34:0b:36:e8:9e:5b:69:dd:df:68:26:54:ef:
e0:c9:ea:c8:a4:68:22:10:f9:e2:99:8f:7c:6c:e3:
b1:12:9e:e0:a2:93:11:da:bd:8c:0e:7d:35:87:bb:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:56:3A:CF:EB:C9:2E:89:82:64:36:10:AE:55:0E:BA:95:B8:75
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:62:27:52:43:bb:dc:f5:f3:b5:ef:04:32:88:a4:25:a3:14:
61:4e:1f:cf:9c:3a:5e:0a:f5:2b:74:68:c1:e4:0c:0b:6b:b7:
ec:0b:e9:00:c6:ee:60:8e:9a:43:3d:96:77:fb:e6:ea:51:b4:
b4:f5:30:69:00:c8:fb:ae:b7:a0:01:7f:74:7f:6a:bb:13:67:
bb:36:8d:04:41:90:ba:d9:c7:98:ee:5e:3e:69:d9:bd:43:52:
1d:3e:5f:63:f7:14:31:71:70:10:f3:e5:f8:51:4a:b2:31:3b:
75:b1:22:0d:5d:f9:43:15:f4:61:ce:98:e2:64:5b:32:94:08:
d9:fe:ff:d7:54:dd:9a:fe:9f:ec:53:92:14:e3:e7:73:12:5a:
27:18:28:cb:2b:a9:f3:ab:d0:a4:7b:e0:0f:59:a1:fd:22:cd:
16:e2:d8:84:a4:ba:81:3d:60:5c:c6:ac:d7:65:a0:c2:9c:f9:
bb:57:dd:e9:9d:d4:49:0f:53:6c:ca:c5:88:b4:a4:ad:e0:77:
26:32:59:7f:f4:34:bd:0c:07:b5:dd:a6:9d:42:96:b4:db:71:
49:b9:1d:b5:25:6a:01:43:ab:6c:0b:07:6a:f0:b4:45:21:62:
c7:c6:e5:f0:59:72:20:75:a6:55:60:cf:46:2e:0b:8b:42:f8:
8c:43:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:14:28 2026 by rpki-client