Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: aVLBAuaubbHonnle2R4C/rwFun8+xvCrxU9AKGtZzAA=
Subject key identifier: 67:29:F3:E3:DA:D3:18:FE:CA:20:DC:D4:87:9C:DB:83:A9:A1:47:9D
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 01A0D64BB289F95B405CA0BDF0548498A0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 1959
Signing time: Fri 25 Sep 2026 02:01:20 +0000
Manifest this update: Fri 25 Sep 2026 02:01:20 +0000
Manifest next update: Sat 26 Sep 2026 02:01:20 +0000
Files and hashes: 1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: lTtIqQnvjlDNxl2IyGzvvEaE5wxTf8agimsz9RN8u1E=)
2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:b2:89:f9:5b:40:5c:a0:bd:f0:54:84:98:a0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Sep 25 02:01:20 2026 GMT
Not After : Sep 26 02:01:20 2026 GMT
Subject: CN=6729f3e3dad318feca20dcd4879cdb83a9a1479d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:65:cc:fe:0d:2b:e2:69:04:27:95:9d:75:
89:81:db:c8:1f:8e:0e:f6:75:5c:7d:36:5e:a0:a5:
6f:63:a7:3b:bb:13:bf:d1:38:23:a6:47:40:89:56:
78:28:4e:cc:a6:a1:6b:7f:97:c7:48:a9:8b:5d:85:
29:1d:08:c2:14:b9:97:e7:26:b5:a1:a7:49:c8:9d:
2c:55:16:1c:ec:a6:f2:01:bb:33:85:c7:79:0f:6b:
af:20:e5:77:29:75:a8:56:4e:a0:d4:1e:0b:83:83:
8b:7d:6a:3d:ea:3f:67:e3:be:fd:6a:7b:03:ef:12:
35:38:1b:2e:81:32:c6:6b:ca:c3:8b:c0:75:6b:0c:
0c:2a:a4:bd:08:76:5f:0c:1a:a9:ee:9b:32:9c:7d:
f4:52:57:37:84:6e:65:38:b7:17:34:17:0a:4e:b1:
06:4c:ac:46:09:40:a2:bb:64:77:59:a0:61:b7:45:
86:55:5e:ec:e4:a8:ba:80:be:bf:f1:91:59:8e:7a:
7a:05:d7:91:a9:cb:fb:bb:a5:40:77:44:04:7c:ef:
13:b8:45:2d:95:71:77:e5:6c:b4:54:ca:3c:56:43:
c4:dd:2e:80:41:9f:e0:d3:bb:46:ab:4b:12:e9:b8:
1c:74:a2:d2:aa:57:9b:02:de:ab:f8:20:45:94:17:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:F3:E3:DA:D3:18:FE:CA:20:DC:D4:87:9C:DB:83:A9:A1:47:9D
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:d2:b9:a9:60:b7:11:d7:a1:29:e0:98:d8:e4:e4:42:4e:
32:98:50:74:d6:02:c7:01:a2:28:93:b3:e0:a8:86:23:bd:78:
37:96:45:63:53:08:19:03:dd:42:e6:3e:b8:64:d4:04:41:48:
91:d9:f7:d1:6d:72:54:5e:32:ca:40:a0:71:f1:4d:46:66:3f:
46:7a:74:54:14:95:16:e4:97:95:20:6e:49:b0:af:9f:4c:0f:
49:ad:1c:91:65:44:47:f5:af:cd:e5:93:2f:eb:5b:91:ed:ac:
09:c5:02:54:8a:3b:e9:26:b2:85:16:9a:c8:a7:54:95:17:e8:
c4:a4:9d:95:ee:14:d7:17:0b:43:40:ce:fd:fe:02:41:87:f5:
33:07:b1:8b:3a:64:2c:a7:47:09:44:3a:94:7c:f2:a3:85:24:
2a:05:03:53:23:0a:c8:9c:af:fd:b8:51:6a:72:96:f6:ef:04:
ee:cd:ab:2f:45:a7:7d:be:e6:20:a9:c1:68:9c:ac:96:dc:f9:
34:9d:98:c4:e8:be:73:91:33:5b:3f:b7:13:c5:de:8c:47:35:
15:d9:38:60:4e:2d:71:c1:a3:45:77:c0:77:31:89:68:26:89:
f6:fd:3c:1c:42:3a:74:10:c1:52:87:80:6c:0a:f0:0e:97:c3:
4a:a0:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:30 2026 by rpki-client