Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: Bbw6JArb3gX4kL+gj0UaDmNHZzhquRnaST2mfclVt0Y=
Subject key identifier: 20:E6:98:EF:A6:20:B6:E9:4E:19:66:1B:80:CF:FB:9D:02:29:CD:66
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 01A0D1C9605B62CD8D5B01A8C750B32E8204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 047D
Signing time: Thu 24 Sep 2026 05:00:30 +0000
Manifest this update: Thu 24 Sep 2026 05:00:30 +0000
Manifest next update: Fri 25 Sep 2026 05:00:30 +0000
Files and hashes: 1: 6byb2KY2dzFJ8LYZ-ZhDNUXIq1s.asa (hash: E/Sb3QnwB0uVhpRKVET1Wmf7ZhLZisXxaO8Q1T20DZk=)
2: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: M2rb6Pq/coOP9OcCGH5UiMokY8SDrwFxNlHkK5sugTA=)
3: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:60:5b:62:cd:8d:5b:01:a8:c7:50:b3:2e:82:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Sep 24 05:00:30 2026 GMT
Not After : Sep 25 05:00:30 2026 GMT
Subject: CN=20e698efa620b6e94e19661b80cffb9d0229cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:13:f5:09:50:0f:e1:9d:19:3a:f1:c0:31:
ab:69:a4:c5:d0:05:26:59:d4:d2:a4:9b:39:01:b5:
f6:2c:da:98:55:c7:6c:62:a1:da:0b:1b:66:56:c8:
b3:6e:ad:67:32:8e:9a:8f:b0:86:f9:c9:f9:ea:31:
d2:61:a0:8c:89:f4:cf:0f:39:47:dc:3d:70:5b:43:
94:8f:68:29:71:11:2f:50:3b:27:d8:56:92:85:f1:
b0:92:69:37:70:a1:cf:44:a2:bd:70:f3:94:b4:66:
28:f5:6d:f2:83:f5:25:c0:22:46:14:7e:49:82:b7:
6f:fb:10:7f:5b:c5:8a:1e:9f:f8:c3:41:54:b8:be:
f5:a4:08:5f:a7:0a:9b:f2:1c:7f:18:b2:b8:de:ad:
73:c6:ed:b5:2c:b4:1c:52:fd:59:49:90:25:75:d3:
8f:b3:ee:fd:5a:d5:14:8a:a7:8b:89:6f:15:c6:d2:
2d:95:3c:b6:f5:15:e4:83:69:4c:cf:2d:ed:52:63:
e3:2f:5c:4d:3b:61:27:96:69:bc:c4:9f:f9:bb:10:
57:29:8d:1c:b2:1d:79:01:e0:f9:83:cd:2c:5c:c2:
c6:91:36:52:bb:f6:a6:c6:7a:48:3b:3d:69:bc:29:
52:00:01:b5:12:58:87:66:53:39:84:c6:93:10:aa:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:98:EF:A6:20:B6:E9:4E:19:66:1B:80:CF:FB:9D:02:29:CD:66
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:be:f3:34:cb:d1:5e:5d:07:80:1e:9d:cd:db:b3:15:0f:f3:
3f:11:bc:b8:56:d9:ac:d3:0f:69:ca:47:c5:94:8f:32:1f:72:
0b:b5:f6:ec:13:ca:8b:c5:86:fc:bc:09:61:b0:1c:85:df:fa:
48:08:df:b5:87:2f:7d:6c:4f:55:9b:1b:cd:51:5e:a2:ea:2a:
b7:09:2c:36:50:31:1b:f1:c3:ba:1f:6c:a3:45:3c:49:fa:07:
a2:f2:55:c7:79:24:be:0c:eb:22:44:c4:45:0d:ac:c5:d5:1d:
76:35:31:ca:da:9e:9e:85:e2:8e:31:97:6b:cf:11:55:e8:11:
c5:15:0f:76:ab:24:4d:e6:9a:30:5f:80:c1:b4:af:50:3a:b9:
0e:eb:69:05:a6:4a:c5:4a:52:54:fc:29:45:7a:8c:ce:db:6d:
d4:1a:e6:16:a2:9b:98:48:a4:59:cd:90:eb:37:b4:2a:c4:55:
c4:ba:71:a6:2f:dd:f3:56:65:70:29:7d:6f:45:20:82:79:7a:
be:38:95:09:9e:90:46:b8:ab:a0:14:03:a3:eb:7e:b6:44:bc:
f7:3c:3e:5a:0f:b4:b1:3b:89:e8:09:07:b8:d9:ca:45:81:7f:
9a:0f:70:22:55:9b:23:01:d5:3b:69:bc:47:40:b0:d1:ef:eb:
d1:51:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:01:33 2026 by rpki-client