Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: RlFd/y7ZQkqGieGj3TZlL/TefosgD14f+jHmSBHlpCc=
Subject key identifier: 9E:67:DF:8A:EC:74:57:88:BE:9A:7E:EF:01:1E:06:C0:83:9A:FA:0C
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01A0C96B66D4E0045C360552498504AE7A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1A83
Signing time: Tue 22 Sep 2026 14:00:54 +0000
Manifest this update: Tue 22 Sep 2026 14:00:54 +0000
Manifest next update: Wed 23 Sep 2026 14:00:54 +0000
Files and hashes: 1: KQegI9zFl4TTXrM0z9Yjv28lgns.roa (hash: Ej7A/eIErtk4SW4resekw38eVCxq6nz5fw0K4qp4xAQ=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: 3OVOFKfIW6jqaMIw5e140lB+DRafOoyRbS7KQzkKwJ4=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:66:d4:e0:04:5c:36:05:52:49:85:04:ae:7a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Sep 22 14:00:54 2026 GMT
Not After : Sep 23 14:00:54 2026 GMT
Subject: CN=9e67df8aec745788be9a7eef011e06c0839afa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:f7:a3:d4:71:15:45:c7:f7:12:6f:2c:f4:
d5:fa:98:68:a5:d4:3d:d1:0e:09:f4:cc:07:05:65:
67:57:f3:93:d4:fb:68:13:06:b3:e0:88:d4:22:eb:
54:80:1d:07:59:81:78:36:95:08:02:b9:71:cb:40:
29:ca:c0:4a:15:22:3d:83:d1:12:e8:81:c5:07:0d:
f6:9c:a9:2a:44:73:bf:f7:da:b8:c2:b7:8c:00:7d:
97:70:f8:86:29:50:f4:b3:26:81:b8:78:1e:8e:02:
68:20:7e:a2:89:2e:92:bd:47:0b:69:2b:8e:5d:42:
bc:b8:70:33:4f:c6:5c:e6:70:a9:0a:c3:da:23:fc:
df:03:b9:03:47:94:41:87:e8:8e:f4:77:0d:9d:f8:
8d:18:81:be:64:18:6d:32:9b:47:9e:9c:7a:26:5a:
34:0e:cd:c8:2b:20:c3:07:00:74:d9:89:4d:58:02:
65:48:f0:4a:11:3f:c5:9f:a5:5a:51:85:0e:da:cc:
5f:fc:2d:e3:31:b3:ba:80:4b:dd:cb:76:db:74:42:
68:46:1b:71:ba:aa:d5:d2:0a:1d:21:1b:56:f6:f4:
4c:7a:00:da:1f:9a:0d:4d:5e:e7:38:9b:ae:0b:e6:
57:c7:58:70:90:07:6f:d7:49:d6:9f:75:b4:ff:54:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:DF:8A:EC:74:57:88:BE:9A:7E:EF:01:1E:06:C0:83:9A:FA:0C
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:71:e7:c2:92:23:9f:71:12:95:c9:a3:24:25:bc:c9:08:f4:
91:84:4a:10:a8:90:e7:22:f2:ed:89:ca:8c:5d:3b:69:ec:da:
1f:e4:ca:7b:28:27:d2:22:b6:ac:07:5d:63:1e:4f:74:4b:02:
9d:d8:07:da:92:7a:1d:3a:13:16:84:88:71:60:5f:17:47:91:
ee:09:b5:4b:1c:b1:35:ad:54:6e:54:6a:a2:12:2a:1d:0d:16:
a1:a2:03:8a:1b:8c:0d:4e:73:e0:c1:e7:95:64:2c:1b:b1:0d:
ea:fb:cf:10:0f:e4:d4:90:d0:e5:0d:97:ea:aa:7b:d1:93:ad:
ab:3b:8d:81:34:aa:07:b9:15:7c:61:ed:2e:95:d6:45:f2:56:
33:e5:4b:7f:50:14:27:ef:30:dd:fc:c0:f3:ed:c3:f5:a4:06:
ed:54:20:e4:56:5c:ca:33:20:b4:01:1d:6a:7b:55:f5:4c:1d:
af:e6:9c:5b:16:da:72:13:1a:1c:69:2e:c0:d1:3c:33:b7:67:
de:a4:d2:f3:6f:f2:96:9a:02:cd:3a:97:d9:be:94:f1:15:aa:
ec:d6:a2:ce:de:d2:29:cd:73:da:24:09:5f:e9:56:b7:7c:24:
48:ad:e9:26:2d:d5:df:79:48:d1:ac:dc:3b:da:6b:62:bf:d3:
12:66:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:44:33 2026 by rpki-client