Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: pZXQiqjkCiYHqoHTq5wEAkXER1pvLHsknKzC6e83RL0=
Subject key identifier: BB:DA:3F:0F:05:F0:07:3F:89:29:2C:10:BD:4D:59:51:2A:FF:B6:E5
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 01A1415EED5749D27EBBA233B662B31C4218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 21:01:42 +0000
Manifest this update: Thu 15 Oct 2026 21:01:42 +0000
Manifest next update: Fri 16 Oct 2026 21:01:42 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: uti7ztUfVfF7NuvFVJB7MKeawI+wUE8sAWR7IfR8Svs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:5e:ed:57:49:d2:7e:bb:a2:33:b6:62:b3:1c:42:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Oct 15 21:01:42 2026 GMT
Not After : Oct 16 21:01:42 2026 GMT
Subject: CN=bbda3f0f05f0073f89292c10bd4d59512affb6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:16:75:04:e4:e7:88:45:d6:31:ca:2d:b1:
ae:14:cb:4c:35:f7:44:3e:97:04:1c:07:07:f8:c6:
76:a1:63:b3:c2:19:8c:f8:58:c0:bc:1d:6a:87:78:
50:a9:46:66:86:02:26:b8:5f:c8:dc:67:34:17:ad:
5f:cd:aa:23:7f:34:8e:0b:5b:4b:4f:99:ca:d1:28:
74:44:dd:7c:40:fc:0e:07:5e:62:0e:9f:f6:dd:b9:
0a:a9:79:04:89:bb:1d:06:c7:3f:2d:bb:92:bd:6f:
f5:ed:ac:b0:fd:a0:53:01:54:85:61:fb:d3:b7:34:
5a:b4:2f:c6:bd:29:e2:fd:56:d4:a2:23:65:dc:ce:
83:3f:d8:5d:4a:96:76:ff:38:4d:f1:4e:92:a1:ec:
ec:ce:56:9b:3c:ac:ec:88:3f:de:6b:e9:67:b7:47:
a4:be:7d:b7:81:ca:8b:5d:dc:75:c0:c5:58:b0:ff:
02:df:a3:12:01:24:f9:3d:b4:c3:17:dd:ca:55:7f:
ca:09:24:0c:c5:8d:d5:cf:b8:41:8c:c0:a6:2a:19:
f5:51:1f:36:9c:31:74:b0:97:8f:c6:55:e8:23:4d:
b0:d6:e8:2e:78:ae:db:4d:0f:18:5d:e5:f6:aa:75:
44:60:6f:d4:9b:c9:05:69:b5:7e:32:63:37:00:27:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:3F:0F:05:F0:07:3F:89:29:2C:10:BD:4D:59:51:2A:FF:B6:E5
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:b2:3a:5a:13:b3:47:7a:4c:55:1c:e4:4e:04:3f:b9:32:
27:9b:5a:e8:70:3f:7d:0b:be:35:fe:ec:aa:52:6c:20:4b:93:
f9:7e:ba:57:4b:94:15:cb:a6:22:54:70:07:d4:63:a4:dc:5c:
b7:d7:8f:bb:8a:0d:93:c1:b0:00:13:02:6c:4e:f7:04:4c:49:
a3:e3:6c:ea:96:49:10:15:45:8a:f8:50:1d:09:ea:c9:ef:76:
e6:78:f4:da:3f:f6:f2:17:c8:29:41:e7:9b:1b:9d:7d:ca:0e:
2b:ec:38:ad:41:8f:55:a5:36:41:1e:84:57:2f:ea:42:fb:37:
4d:74:23:42:f0:e2:5e:d3:14:66:ca:e9:9a:13:0c:66:17:4b:
cc:54:e9:c3:ec:45:42:df:0a:97:a8:92:a1:23:04:a4:eb:84:
24:1d:e4:47:05:4e:4f:49:a7:fd:f3:d8:cc:2f:03:89:10:4a:
04:ee:ce:de:a7:f5:6e:a0:a8:97:e3:c2:14:d1:19:f1:60:76:
de:70:87:77:39:9b:f5:e3:d3:61:fe:33:9e:fe:fc:9a:e0:ea:
f6:20:e4:09:dd:ee:6f:51:6f:fc:c6:ee:e3:58:c4:01:15:81:
2b:b6:32:57:b7:a6:26:df:25:83:35:bc:ae:1a:3c:fd:27:d4:
a6:e4:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:31:08 2026 by rpki-client