
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: 9Daf0IrtOe5Wb+KGsHhOmQaEc3G6Cq8+XikOWormOA0=
Subject key identifier: A4:E7:F9:8E:BC:9D:4F:BF:C1:D9:FE:83:8C:8D:45:6B:95:D0:8D:B9
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01A0E88926BEF6074D0C2CD3B99870D77475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 15:01:37 +0000
Manifest this update: Mon 28 Sep 2026 15:01:37 +0000
Manifest next update: Tue 29 Sep 2026 15:01:37 +0000
Files and hashes: 1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: Yl/WnAOrQLwCfkmNnNkWOpfGUVIsfrMPVfIP25dulHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:26:be:f6:07:4d:0c:2c:d3:b9:98:70:d7:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Sep 28 15:01:37 2026 GMT
Not After : Sep 29 15:01:37 2026 GMT
Subject: CN=a4e7f98ebc9d4fbfc1d9fe838c8d456b95d08db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:25:64:1a:c2:7e:c7:23:00:5e:68:dd:84:
87:56:20:5b:39:d6:e6:78:03:77:c5:97:ce:7f:6c:
83:f1:14:f2:d8:6c:14:cd:3f:2c:85:a2:5c:1a:b1:
14:e5:5f:b8:f0:04:2b:d6:15:a2:63:1f:ef:45:e1:
18:c2:02:5c:78:22:8d:4e:09:63:0b:df:2d:b4:e2:
27:40:f1:11:b0:f1:a6:ad:d1:78:ce:89:2b:c9:79:
5a:50:ea:9b:22:0d:58:f3:71:7b:68:cd:24:46:3c:
e5:4f:5d:9b:74:32:65:0c:86:b0:8e:3a:f5:53:92:
89:71:7c:6b:5f:30:fa:9d:07:c6:ab:00:2a:fe:0a:
66:c1:4f:56:a5:e7:c7:a9:18:72:00:de:f2:1c:7d:
37:8f:39:fd:0c:e9:0b:8e:ea:3c:33:2c:1b:31:e1:
e0:cb:e3:21:83:7b:a1:8d:96:c0:8f:b5:ef:04:60:
31:d6:bd:1e:72:48:c7:fe:29:13:e2:d2:5b:60:a9:
cd:67:75:34:81:78:d2:9e:5e:ed:4d:28:84:e8:40:
82:72:ea:9d:db:e5:ba:ec:3f:6d:8c:0a:91:c6:01:
89:6f:0d:48:51:09:8d:95:a3:01:e6:1e:99:f5:fd:
ba:91:2b:8a:00:48:e2:28:40:1e:52:53:bd:2d:c4:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:F9:8E:BC:9D:4F:BF:C1:D9:FE:83:8C:8D:45:6B:95:D0:8D:B9
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2f:91:81:4d:44:b9:17:76:ec:55:53:53:40:17:a4:11:bf:
91:5f:4d:79:a6:f8:bf:9c:54:4c:aa:18:5d:36:f3:55:75:ff:
4e:7d:15:d0:84:a5:37:eb:05:72:e1:01:53:6e:f0:4b:6c:80:
16:2b:7d:9d:d9:ab:4e:24:d8:0a:82:41:b3:db:be:26:d3:ec:
b7:91:b1:52:53:be:b3:d5:8e:a2:7f:b2:a8:f4:f3:9c:df:4c:
09:1c:a7:d5:77:bc:6b:39:16:d6:f2:71:07:4e:dc:08:5d:bc:
71:e6:32:81:15:d9:3a:df:19:e9:2b:eb:80:69:75:e4:1e:18:
b8:bf:ec:23:93:04:74:b2:e3:b5:de:cd:bd:aa:1c:c4:17:ec:
4d:60:67:9f:29:34:a6:72:03:0e:11:59:96:fd:e3:22:63:f0:
20:87:44:70:9c:66:9d:ba:0f:bc:7e:c3:e9:b4:db:34:da:24:
5e:fe:e6:7f:26:ae:0c:07:3e:19:d4:57:0d:2f:44:de:ae:7f:
98:62:b2:85:2e:e7:5d:1f:a0:44:08:38:40:f2:97:c2:83:26:
4e:17:7f:30:8a:b2:ba:35:b5:d5:1d:74:b1:fe:5f:0e:05:89:
1e:a3:01:b7:0f:c7:bb:ec:a2:13:7f:9b:20:3d:99:18:f5:75:
b5:3d:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:21:01 2026 by rpki-client