Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: hnOnAalPnJ9lG7eLHMgc93zbdXjvs1fq799e8TIoH30=
Subject key identifier: 3B:4B:89:1D:F4:39:F5:B9:D2:CF:DF:3A:43:F0:76:61:7A:DB:C8:6D
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 01A0DFBC9C1123C5A590CAABD69A22C73B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 05DD
Signing time: Sat 26 Sep 2026 22:01:14 +0000
Manifest this update: Sat 26 Sep 2026 22:01:14 +0000
Manifest next update: Sun 27 Sep 2026 22:01:14 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: o5pd6TjPTWreNAIavBXUrRU4wEUY1e5o0yrsWtHf/Tw=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:9c:11:23:c5:a5:90:ca:ab:d6:9a:22:c7:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Sep 26 22:01:14 2026 GMT
Not After : Sep 27 22:01:14 2026 GMT
Subject: CN=3b4b891df439f5b9d2cfdf3a43f076617adbc86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:56:33:e4:7d:08:34:9a:1c:f6:40:98:b6:
35:e9:e8:38:81:41:18:43:84:c3:11:c8:e2:08:42:
68:48:1b:40:8f:db:cc:27:e2:e6:8a:b1:fa:e3:d3:
c8:68:3b:08:59:99:30:7e:f8:a2:80:54:d9:fe:c8:
5a:67:e9:7f:f9:19:9b:59:61:af:f8:55:a3:ae:1f:
ca:35:97:16:1e:08:05:2f:7c:c2:6f:77:58:cb:b1:
4a:b3:f6:13:eb:20:43:ad:8d:f7:c4:d9:b3:ec:76:
86:84:8e:13:a5:84:d7:a3:f8:c2:74:4b:b1:c6:de:
20:cb:69:05:59:5d:07:77:fa:0b:99:9a:94:c9:ff:
bc:ce:dc:26:b9:96:82:e1:d0:15:c3:fc:c0:50:94:
71:45:e7:f4:bd:ac:98:70:7e:f3:9f:fe:8a:60:a7:
e8:e7:88:03:ac:db:01:46:bc:83:d8:6c:52:60:bf:
8c:bd:7a:b1:7c:57:30:d3:f9:1a:d7:b7:d1:e4:44:
19:a0:34:f7:84:a9:1b:f1:dd:dc:b3:bd:99:b7:e3:
c9:9c:d1:ed:c0:57:fd:95:07:e8:29:7f:04:47:99:
a0:b1:63:2c:b6:77:19:10:c3:b9:df:1c:1d:7c:f1:
92:fa:10:eb:bc:3a:0d:bc:2a:81:41:3b:3f:6f:96:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:89:1D:F4:39:F5:B9:D2:CF:DF:3A:43:F0:76:61:7A:DB:C8:6D
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ee:82:8e:7d:9d:af:7c:6e:05:7a:20:53:f3:e8:a0:30:68:
13:0b:cd:9f:e6:c7:9b:26:9e:36:cf:30:a8:94:09:09:7b:a0:
00:ab:db:f1:04:e8:45:c5:56:51:8a:54:d4:21:02:10:23:ef:
2c:f2:16:f2:61:a3:61:89:6d:bb:10:0f:1c:54:3f:6b:26:aa:
7c:94:a4:82:45:df:69:32:a8:c0:d7:ff:02:1a:a1:78:ce:54:
c8:78:c5:a9:cd:1c:ac:12:24:cd:4d:fe:55:d7:e5:8d:fa:d9:
40:cb:5c:df:ec:5c:25:7e:94:21:c8:82:ee:14:ee:1d:17:71:
f0:b0:b6:82:3c:b3:94:8e:35:f9:98:05:71:c4:3f:c1:c9:d0:
59:58:71:cf:14:01:0d:12:47:34:d6:2e:36:31:9d:66:98:8f:
fd:ca:04:e1:99:ad:19:c1:4d:d9:5b:c9:e0:2a:73:b6:f9:c1:
33:f6:9e:27:52:d1:ef:3b:eb:5d:77:a3:de:71:3a:c3:a1:c6:
82:4b:6a:b8:4f:85:0f:75:11:6b:c7:15:52:b6:bf:4f:05:f4:
1c:27:6a:f5:a0:28:ef:4e:eb:ef:5d:f8:b3:2a:f7:b7:15:64:
99:fd:e6:31:a7:08:85:bb:f6:19:8c:e5:c6:d9:ff:88:de:63:
b6:88:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:34:45 2026 by rpki-client