Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: 65PBIESMgZ5/GzzPz+aE2Uhlt4JsB0vY83avIn/G5+s=
Subject key identifier: 02:D9:AB:2E:51:B1:8C:21:DE:33:34:93:37:05:0B:9B:8E:F7:01:6C
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 01A0C520C8B50AC53A3E30E53CAB3DB797FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 0797
Signing time: Mon 21 Sep 2026 18:00:54 +0000
Manifest this update: Mon 21 Sep 2026 18:00:54 +0000
Manifest next update: Tue 22 Sep 2026 18:00:54 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: +DPTTSo+3UGWOI/86YalwPi8wTNb6B9Sn5/x/OY21ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:c8:b5:0a:c5:3a:3e:30:e5:3c:ab:3d:b7:97:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Sep 21 18:00:54 2026 GMT
Not After : Sep 22 18:00:54 2026 GMT
Subject: CN=02d9ab2e51b18c21de33349337050b9b8ef7016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:f8:03:23:1c:10:09:96:79:cf:1a:1a:23:
ec:08:e1:04:85:52:ba:4a:a6:c8:3d:27:be:ad:86:
d5:17:64:00:63:bb:e6:cd:9f:28:fc:2b:2f:6d:10:
0a:42:6c:19:fc:eb:bc:69:05:44:02:e4:3b:cb:47:
f2:6d:bf:16:6c:0b:7b:9e:3a:f7:50:ee:64:8c:39:
7b:bb:8e:f6:ed:54:fe:c2:f4:0f:21:6a:d8:14:1c:
66:12:70:97:fa:64:59:d7:c5:0a:d8:09:98:63:e3:
dc:ba:a6:a7:d9:f2:9a:fe:a2:a3:c3:2d:7f:86:ae:
36:df:f1:c1:6e:74:4f:46:25:c8:6c:28:23:60:f7:
35:43:a2:4f:04:29:93:cf:87:26:12:ab:92:96:f2:
10:9a:5a:8f:14:2c:be:ca:40:28:d0:7a:b0:29:d6:
43:f6:b4:5e:64:24:09:20:64:a4:a4:97:9f:00:f6:
0e:2c:17:7f:c9:40:76:98:80:2e:21:98:d5:82:ac:
4b:48:92:32:22:b0:39:57:ff:cd:5a:2f:a3:b0:16:
59:fc:b8:3f:25:f0:1f:a5:8d:4b:fa:a2:4d:34:ce:
da:5f:7a:de:b3:bc:5c:36:40:e1:c4:b8:b8:3f:04:
5f:8d:a9:f5:27:87:66:ea:c4:78:c3:07:80:2a:aa:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D9:AB:2E:51:B1:8C:21:DE:33:34:93:37:05:0B:9B:8E:F7:01:6C
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ad:af:e6:20:11:41:b9:b6:a4:c1:61:b2:7c:5b:b7:64:f8:
d3:97:b8:9d:c8:54:0a:7a:f5:ea:e5:90:87:fc:a3:c2:e8:4b:
93:0e:17:1d:a4:0d:a6:35:f8:c4:61:6b:b9:5d:5e:8d:58:6d:
eb:a3:ae:f2:ec:33:1e:b7:10:f0:31:2a:f9:4b:58:aa:64:ce:
7e:c6:77:69:96:97:58:c4:81:8f:b8:92:38:e3:18:4f:bf:9f:
6d:d6:da:09:b2:b8:a0:ba:8f:63:78:01:69:70:6c:a4:a6:e2:
ad:52:c4:30:b2:2f:4a:bd:5a:ea:c3:af:3e:39:a2:6c:25:6d:
e6:c7:96:c1:6e:1b:b1:35:33:45:f7:5a:66:8a:2c:3c:b4:f9:
44:af:39:e8:e7:9f:00:e6:8e:54:63:5e:e0:d6:9c:6c:14:24:
a2:71:28:93:d7:80:b3:87:c9:4b:5a:4e:37:25:5d:3a:67:d0:
a5:33:b9:c4:73:f3:62:a6:3e:d2:79:5d:73:06:fd:83:e4:42:
ef:c9:fe:db:79:08:d5:01:41:67:83:81:6f:b1:e9:05:82:0c:
bf:66:90:e5:6c:3e:49:3d:00:5d:e6:27:40:17:ba:93:3b:5e:
33:47:51:25:3f:cb:bd:3c:dd:dc:e5:f0:03:fd:e9:5b:02:35:
8d:4e:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:07:59 2026 by rpki-client