Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
File: wvQTfZw_qGHggQT02hKJ2un9XrA.mft (raw, json)
Hash identifier: MGpirinsLTnfJQZisEnxsjSl1f4/VWxA7eQlmomGh8c=
Subject key identifier: 52:65:91:0D:B8:26:2A:FB:28:66:ED:FA:4B:C9:A0:C8:E6:86:65:73
Authority key identifier: C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
Certificate issuer: /CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Certificate serial: 01A0F0B0D3FDBC7100D7D824806FC6C51925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
Manifest number: 24
Signing time: Wed 30 Sep 2026 05:01:55 +0000
Manifest this update: Wed 30 Sep 2026 05:01:55 +0000
Manifest next update: Thu 01 Oct 2026 05:01:55 +0000
Files and hashes: 1: AzooWuklm-3P7PJRiw22avIbtzA.roa (hash: kgzWAt/cYY+uCetaCudrArQVeL4ScGnH/K5j6IEA5fI=)
2: wvQTfZw_qGHggQT02hKJ2un9XrA.crl (hash: 39ARTbTPTdvR3UlmEtfr4GUQcST8MohyjG9IckIGDyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:d3:fd:bc:71:00:d7:d8:24:80:6f:c6:c5:19:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Validity
Not Before: Sep 30 05:01:55 2026 GMT
Not After : Oct 1 05:01:55 2026 GMT
Subject: CN=5265910db8262afb2866edfa4bc9a0c8e6866573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:b4:5b:b6:4b:14:2e:3b:7a:53:24:56:a8:
2e:33:f9:7e:d7:b3:e0:ac:51:03:94:6f:e7:9d:94:
54:d6:d6:ce:94:07:6a:f9:4e:22:eb:aa:0c:ba:19:
4c:d1:40:50:11:06:54:c4:16:23:65:ef:13:80:bc:
59:11:a3:cf:f7:15:1d:43:8d:5b:1d:00:ad:c0:5f:
0e:f8:31:b2:19:e0:a3:3a:75:a7:76:f1:e1:a7:c6:
bf:6d:e3:dd:eb:10:a9:5a:ae:ba:6c:d8:91:61:04:
99:0f:e4:6e:35:b4:84:2e:e1:29:a7:1e:a9:e8:dc:
1b:98:1e:70:d0:c5:a1:b2:b6:ca:01:49:e5:ad:c9:
e8:5d:49:f5:e4:63:70:a5:d5:df:91:d0:44:72:cc:
de:13:f4:03:9c:9a:cb:12:c7:a7:63:7d:4b:d1:27:
7f:a6:71:55:9d:d4:24:0f:be:4e:48:a3:b1:01:48:
d3:a8:f2:e3:a2:72:97:13:94:ed:ff:97:68:f1:ce:
9f:68:74:93:4d:9e:15:9b:25:e4:8d:b2:23:aa:4b:
81:f9:36:7b:ea:88:56:a1:72:eb:51:6b:68:79:6d:
4f:3d:ef:fb:62:a6:5a:4a:de:00:ef:21:19:e5:cf:
45:71:32:bc:f4:25:3b:46:98:c8:3c:25:8a:a7:12:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:91:0D:B8:26:2A:FB:28:66:ED:FA:4B:C9:A0:C8:E6:86:65:73
X509v3 Authority Key Identifier:
keyid:C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:b8:20:56:ad:21:ce:eb:5d:d6:3b:50:94:24:f6:82:8c:9c:
ac:93:04:5f:56:4b:e8:7d:5a:38:28:fe:7e:9f:7d:73:70:e1:
83:be:c1:23:08:31:df:5d:17:20:db:bb:de:74:f4:db:36:70:
f4:dd:9f:52:29:55:19:90:86:47:2d:80:5e:31:97:34:90:71:
02:59:a2:b4:e7:88:ec:0d:0e:89:ce:01:ce:54:0b:7b:ce:b4:
0a:0c:d0:ac:95:95:b0:98:c5:94:10:4e:85:0e:22:9c:5b:e7:
65:fa:eb:97:37:ab:d8:68:9e:1d:80:13:48:39:9a:ba:3b:48:
43:ac:35:92:a3:8b:66:e3:64:d0:9c:51:2b:4e:7a:e1:18:e4:
eb:4b:a3:58:83:ce:88:10:3b:ec:57:75:70:18:4d:48:93:24:
de:47:55:08:9a:d6:49:db:c2:f6:4a:16:7a:75:58:68:96:c9:
47:e7:40:a1:e1:3c:6d:29:52:e7:02:a3:aa:92:0d:0f:c7:28:
a9:e2:ab:c4:85:e6:44:e9:f8:c6:f3:c4:b3:eb:23:94:2c:ac:
95:f1:4d:db:33:5b:4d:a5:e2:9d:9d:5c:b8:44:8e:0f:b2:fc:
f5:1d:49:e0:8f:b7:cc:3e:a0:6f:13:f9:e2:45:82:c4:34:43:
f6:4d:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:53:44 2026 by rpki-client