Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: uGHGbra/XpX6v9t11DlrPiNEYyiX7Dv5VakiHgWIrlQ=
Subject key identifier: 1A:C7:A8:AB:0C:28:E6:0C:2F:BE:06:19:63:EA:33:FE:D9:80:FE:94
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 01A10B4B8DCD55D29A37CC8E59BE0F2CA49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0C9A
Signing time: Mon 05 Oct 2026 09:01:03 +0000
Manifest this update: Mon 05 Oct 2026 09:01:03 +0000
Manifest next update: Tue 06 Oct 2026 09:01:03 +0000
Files and hashes: 1: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: NuStYinh4J3NGzw3Fl5Aqr/ZxaaF2bI99Fa8zPEJItI=)
3: wksYSx05kpG2_m1bA5uuiXnqKFc.roa (hash: k+uDuqacR/yRBvtSsf1I4NfjvCtYBj4iQtFjb6MXywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4b:8d:cd:55:d2:9a:37:cc:8e:59:be:0f:2c:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Oct 5 09:01:03 2026 GMT
Not After : Oct 6 09:01:03 2026 GMT
Subject: CN=1ac7a8ab0c28e60c2fbe061963ea33fed980fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:9c:6b:ec:07:20:03:fc:ba:79:59:f3:8d:
d1:e5:86:14:0d:4a:25:c8:48:28:fe:f0:d3:e3:7c:
22:2c:f5:4c:fc:0f:35:0a:78:c9:e5:0b:4b:79:7a:
ee:94:b4:43:d3:7f:8a:b7:02:6f:7b:d5:f5:b5:9c:
3e:3e:10:28:7d:10:e1:45:7a:e4:2e:d0:fb:27:f3:
44:e0:37:1e:20:34:e7:88:01:0f:0e:88:4c:94:59:
78:12:22:d5:ac:ed:34:cf:0a:89:16:5d:ec:0d:1f:
9b:b8:4a:f6:19:44:05:95:d0:68:ab:4c:98:9d:71:
75:1c:69:48:41:06:87:ab:48:08:42:e4:e2:b5:f5:
d6:1b:e0:0f:c5:53:ee:1c:95:61:2d:52:20:c8:42:
32:da:3b:20:0b:70:d6:a9:de:8c:31:ba:6d:e5:71:
8f:79:39:ab:f8:f8:fe:95:cd:e7:e0:9c:40:2a:27:
d8:cf:9e:32:3c:ef:e5:99:36:b7:62:93:b8:18:65:
4b:cb:17:65:2f:43:69:52:dd:d1:64:ec:3b:0a:74:
6d:71:e4:e2:46:ee:aa:bb:4d:52:58:3e:46:c0:b8:
07:1f:aa:08:c2:d6:5c:d3:52:dd:7b:13:d3:99:ae:
64:d7:83:7f:2e:f7:2f:73:a0:66:66:69:16:26:96:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:A8:AB:0C:28:E6:0C:2F:BE:06:19:63:EA:33:FE:D9:80:FE:94
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:42:37:37:da:99:4b:a7:62:4f:65:5b:27:7d:ab:1e:91:36:
47:83:37:c6:21:5b:7f:57:93:a8:0d:19:af:b0:ef:1a:a0:53:
33:f1:0e:cb:2f:a9:ed:39:ce:5c:6a:07:90:45:d6:46:f4:bb:
de:e5:92:89:d0:c3:2e:af:f5:36:6f:e4:11:f7:26:fb:02:1e:
22:a0:cc:d4:29:c2:ea:a3:05:e7:92:74:e9:07:c5:d1:15:13:
96:47:3e:1c:36:89:5b:86:79:07:09:a4:37:6c:6f:c8:ae:75:
47:90:57:31:af:20:a5:57:b6:0d:55:52:30:6c:24:ec:7e:2f:
55:14:7a:e0:26:d6:ce:00:a1:d9:c1:7a:5c:41:66:70:4b:ad:
3a:44:9f:64:90:80:75:4b:95:16:b0:81:16:35:d0:ab:42:ec:
82:b6:3e:08:9f:ba:28:12:c6:26:b7:ed:d3:8b:ed:cf:01:cc:
9d:d0:15:6e:1d:05:a4:da:74:da:1b:98:9f:f9:b2:a3:eb:09:
15:d9:dc:eb:03:e6:78:08:21:29:62:0d:5d:2f:60:49:81:fa:
ad:42:ab:c7:5e:63:05:f0:fe:90:8c:f6:0f:de:4c:33:67:1b:
f0:c8:61:c1:99:e7:52:3a:00:92:87:f6:f2:34:c2:01:19:86:
06:46:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:59:24 2026 by rpki-client