Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: cCjn1/gFUzDW/0TnZF52BgtGJB5ERqI18bCFLV0Buzw=
Subject key identifier: 99:93:E6:50:E3:84:5A:D9:A9:59:86:87:58:99:B2:21:E9:58:9A:C2
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 01A0D1C95E9063AD7FEB2F4BCEE979FDC496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 09AA
Signing time: Thu 24 Sep 2026 05:00:30 +0000
Manifest this update: Thu 24 Sep 2026 05:00:30 +0000
Manifest next update: Fri 25 Sep 2026 05:00:30 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: Epddn2aIbyjHcvtYmZSWneJkF8rSftcX3MIPl6rS+hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:5e:90:63:ad:7f:eb:2f:4b:ce:e9:79:fd:c4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Sep 24 05:00:30 2026 GMT
Not After : Sep 25 05:00:30 2026 GMT
Subject: CN=9993e650e3845ad9a95986875899b221e9589ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:d0:ce:c4:aa:71:ec:48:f6:f8:45:9d:62:
21:e5:9b:d5:c4:b4:22:13:fe:9f:5c:93:19:f6:83:
07:cb:94:e6:5a:a1:db:0a:bf:d4:46:32:4d:bf:4f:
65:a2:6b:d1:ee:36:a2:a2:2a:77:eb:c2:dd:7c:7a:
48:4b:72:e0:bf:2f:f7:f4:e9:0f:85:ef:12:0c:3e:
77:a3:76:33:55:39:bb:a9:71:15:27:a8:76:e7:fe:
8e:fc:91:e4:4c:52:2a:c8:74:f1:f3:72:22:80:85:
7d:fe:d6:3c:88:5e:d5:3b:8a:c6:21:3d:91:e2:82:
41:88:5b:74:80:2c:fd:43:2c:10:37:73:9a:85:50:
de:b8:1d:36:e8:5f:3a:4e:39:43:0b:85:af:db:c8:
53:70:c0:c3:5d:8e:5c:a8:68:76:1f:89:fc:3d:65:
be:52:bf:fb:ff:6b:a9:c1:0d:96:d8:e7:74:08:f6:
05:53:c6:11:88:e7:ee:8d:5e:f2:15:12:fc:1d:ef:
c2:ac:f9:63:34:ce:f2:4f:8e:ee:49:39:aa:7a:a1:
34:ce:0d:c5:fb:46:39:cd:62:05:0e:bd:02:7a:32:
81:11:b3:36:a9:7d:fa:be:37:c0:eb:33:4c:85:c2:
2c:1a:00:5e:9d:ca:db:be:98:bb:0a:2f:80:9d:cc:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:E6:50:E3:84:5A:D9:A9:59:86:87:58:99:B2:21:E9:58:9A:C2
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:af:49:a2:50:51:a0:92:7b:0d:e3:6b:0b:8b:42:12:5a:
c1:b1:e6:2b:e7:c3:ae:13:cd:41:73:99:d0:a3:98:7f:8b:5a:
46:eb:21:4a:70:4a:03:b5:45:25:7d:73:d6:c2:4e:20:d1:88:
03:47:56:b4:19:d9:cd:7b:53:e3:74:01:de:2e:64:2c:c8:42:
92:d3:3a:15:ce:fb:94:f7:3e:30:c7:1f:6c:fa:aa:03:dc:b1:
b5:02:f0:04:28:8e:a7:96:91:90:95:8a:b0:0b:0d:e4:98:5f:
52:00:d6:bb:7c:85:40:15:a9:01:ce:b8:eb:56:4b:69:7f:b7:
6b:c7:4c:27:33:d7:fe:5a:3e:0f:fa:63:f8:07:5d:53:e0:e9:
f2:5c:85:74:be:be:9d:3b:8e:00:fc:ba:60:7a:12:8b:7b:75:
dd:11:0f:51:a4:a7:d0:d1:8a:14:09:0b:ac:92:1d:8b:06:2f:
d8:fb:39:55:78:7c:1d:66:6f:f7:9e:fd:62:18:7f:cd:28:b8:
f7:6d:be:26:16:46:b9:2b:9b:35:27:ce:c8:f6:c9:da:2e:39:
eb:f8:8a:81:ba:c0:e3:d3:14:9c:b4:56:30:51:23:b7:60:00:
57:cb:5c:32:45:da:74:ef:13:19:56:5b:3f:05:fc:ab:30:7c:
ad:a4:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:01:48 2026 by rpki-client