Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File: Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier: eRk/6AplNJmXKqh9j4GaCMjtT7vI+NaO8dZmxrzOIig=
Subject key identifier: 7B:B8:F0:8B:ED:63:7B:3D:AF:38:15:1C:13:E1:1A:B0:67:FF:D9:88
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 01A0C5C53D88A388CBC07148CA082459AEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number: 09C1
Signing time: Mon 21 Sep 2026 21:00:32 +0000
Manifest this update: Mon 21 Sep 2026 21:00:32 +0000
Manifest next update: Tue 22 Sep 2026 21:00:32 +0000
Files and hashes: 1: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: qYLH3AuX916WCAfvBAfskysZHn0H5mzxqMXR85jPjQY=)
2: d3VInPdLirBsLVvGRzvBNOU5GVY.roa (hash: 1H0FqCjUTy4udmz5J8jd2r4LaLaCADLPuji2yS6Osxs=)
3: vskKnMst18EVmBm6lBj0YzIpNuk.roa (hash: jTxDQ4a1vled+k24Z+iZwB1mJUNUMg7H5qSldRSueFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:3d:88:a3:88:cb:c0:71:48:ca:08:24:59:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Sep 21 21:00:32 2026 GMT
Not After : Sep 22 21:00:32 2026 GMT
Subject: CN=7bb8f08bed637b3daf38151c13e11ab067ffd988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:c8:28:54:b0:75:3b:29:c3:dd:f5:24:d2:
e5:3a:7b:82:79:c5:1e:e7:aa:9c:b3:65:2e:e1:c9:
65:9d:ac:af:18:9a:f0:bf:c4:32:8b:21:5e:37:7c:
c9:b4:01:d0:26:99:20:d8:16:bd:09:8b:09:ad:ee:
45:bb:f4:f6:69:43:e7:5e:51:e9:a5:15:dd:77:a4:
c5:06:03:be:ae:65:dd:70:f2:6c:67:5e:cf:bb:d4:
8d:4e:81:bb:25:06:d0:e7:32:45:ab:c4:3d:43:a1:
01:25:c7:59:7e:60:d8:a6:71:1d:b8:f4:c7:d0:bc:
ad:67:31:4c:76:29:d7:bd:0e:bf:93:91:b5:d4:5a:
12:f5:31:6b:96:d2:c3:ac:31:d9:4e:75:2b:2b:3f:
89:9f:84:33:50:a3:07:cc:c5:53:00:5f:0f:65:a0:
16:49:51:7f:99:f8:7c:6b:1d:75:81:0d:72:ed:ca:
85:c1:4f:74:3a:be:60:7d:06:bd:30:ce:c3:3c:15:
0c:21:2a:c8:7c:5c:c5:c6:5b:25:1b:1c:e1:53:03:
56:65:36:85:ae:a9:f6:bf:dd:e7:9b:17:ae:3b:df:
e9:5b:42:9f:30:4a:44:e2:31:61:a3:08:d7:4e:30:
7c:58:8f:85:64:6c:01:3f:25:77:cc:d9:46:e5:68:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:F0:8B:ED:63:7B:3D:AF:38:15:1C:13:E1:1A:B0:67:FF:D9:88
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:c7:ae:aa:08:73:b0:72:ea:09:6b:82:3a:28:fb:0c:c6:
ec:da:42:a0:4c:2b:18:5d:fb:95:94:99:84:55:10:16:50:62:
7e:dd:a6:e2:a2:6b:6e:b1:ae:b1:09:d6:2c:96:d3:e8:d9:dc:
e5:07:9f:83:81:ca:88:35:5c:3d:91:26:02:47:08:b9:72:09:
3a:c6:02:8e:c8:6d:ee:79:5f:35:64:6d:cc:54:e9:41:22:68:
2c:56:e4:d8:a4:5d:32:f6:aa:a4:9f:83:72:43:38:48:35:60:
5b:1a:31:7f:eb:2e:39:0b:88:0b:c9:b2:51:92:f7:df:42:30:
9b:cb:d7:98:1f:c1:ae:0e:b3:7f:13:62:c4:83:85:8e:3f:ad:
1f:fa:ca:f3:9b:68:b1:39:fa:7d:c7:0e:91:c5:ab:22:30:1b:
fd:15:0c:ba:60:67:e5:9e:ad:97:55:fc:3b:73:63:8d:60:7c:
72:b6:10:26:3e:53:53:f4:f9:7a:36:fd:4e:a4:71:ac:0a:c9:
95:3a:0d:37:e6:66:ce:ad:fd:80:f4:26:df:7c:df:9b:be:fa:
31:c2:ab:d1:87:5c:30:99:6e:c8:c1:df:96:4f:fd:b2:62:de:
8c:35:c0:64:b4:02:af:13:e2:b1:13:a9:0d:01:4c:aa:e5:2f:
9a:61:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:43:31 2026 by rpki-client