Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
File: WlCmmsOzTfXy2LiMe0EEMux3c7s.mft (raw, json)
Hash identifier: szuozd8iqjkZWneMx0GJs2S+uRIDbZyWxULC0DAromg=
Subject key identifier: BF:3F:CF:8E:EE:35:9B:C0:81:8E:64:04:A8:64:7B:84:93:FA:FB:2A
Authority key identifier: 5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
Certificate issuer: /CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Certificate serial: 019FA8CFC9C8B3967647A8866D27F3F01C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
Manifest number: 36
Signing time: Tue 28 Jul 2026 13:00:17 +0000
Manifest this update: Tue 28 Jul 2026 13:00:17 +0000
Manifest next update: Wed 29 Jul 2026 13:00:17 +0000
Files and hashes: 1: WlCmmsOzTfXy2LiMe0EEMux3c7s.crl (hash: k3rdcAF5hhVKBzkJS7+a1zJi9DZMRja/TYQ+h4MDO2c=)
2: Yst5Qj-zvcPEq30_qzvGF3COwE0.roa (hash: Sh7bkfErjwAbJ1zwX6e1hPa7oSiv2lwYiU1nZ2j65uM=)
3: aOgrnkONLZhAf5Y_FGg0Jrz8A_c.asa (hash: xc1tL2LgrybTpJU3OwT3V3UJxQkXyAwBQmIN99tp03c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:c9:c8:b3:96:76:47:a8:86:6d:27:f3:f0:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Validity
Not Before: Jul 28 13:00:17 2026 GMT
Not After : Jul 29 13:00:17 2026 GMT
Subject: CN=bf3fcf8eee359bc0818e6404a8647b8493fafb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:26:41:e6:da:59:c2:5e:4b:44:77:24:56:
25:a8:e5:81:82:2d:e5:99:8c:48:2f:91:18:cb:ac:
a7:b0:3b:6c:6a:5c:b3:a3:52:03:e4:e8:2e:ad:63:
6e:5f:be:81:67:18:7f:04:cd:c7:2f:a0:75:8a:46:
c7:2e:78:52:df:41:04:db:e2:84:43:58:ca:d6:de:
01:a8:89:11:85:ab:fe:9e:89:f1:43:fe:6d:45:f3:
ca:ec:63:89:09:fc:96:d4:00:17:33:fb:f7:72:ef:
51:e0:56:7b:96:d1:a0:d9:c4:81:11:8b:fb:d9:89:
66:a2:04:ee:68:c0:fc:b9:58:60:72:d6:03:fe:59:
0e:ef:85:a1:83:04:40:73:83:8c:a9:ed:99:0e:c9:
02:e8:c4:f1:4d:ce:bd:a6:e6:44:14:6e:62:41:ca:
ea:5a:2d:fc:b0:74:ac:41:bf:54:05:00:74:0a:44:
54:7d:38:76:f4:d0:df:a9:57:05:2a:3b:ed:02:47:
93:75:4d:de:d8:1d:4d:aa:a0:81:19:e1:0d:69:33:
5d:32:a6:72:70:fc:50:b5:a0:4f:d9:e2:84:dd:0a:
fa:d0:ab:c9:cb:59:39:95:94:23:23:f4:36:f6:d0:
e9:b1:54:ac:9b:2f:b8:db:d5:2c:e3:f5:fe:2d:6c:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:CF:8E:EE:35:9B:C0:81:8E:64:04:A8:64:7B:84:93:FA:FB:2A
X509v3 Authority Key Identifier:
keyid:5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8e:1c:3b:65:74:4c:be:7f:bc:b7:14:74:c1:37:8c:ff:eb:
d7:d8:2d:31:45:8c:d1:32:a9:a4:6b:77:0f:80:3f:f8:c5:b0:
69:f8:77:02:27:7f:4f:68:31:ce:98:7c:ce:61:6b:82:02:f0:
17:e2:a1:95:bc:44:67:e3:cb:4e:ff:74:fd:51:1d:52:44:c5:
4e:df:b4:52:62:b5:c3:dc:bd:8e:4d:5c:4f:6c:d9:b5:54:17:
19:4c:1e:63:b3:16:1a:37:54:7a:44:20:db:d1:4d:de:5c:15:
e0:86:42:d7:a8:63:f7:16:bc:21:f3:16:9d:a7:95:7a:51:f6:
1a:6b:59:fa:05:36:04:e5:83:d8:8e:17:bb:71:00:5e:b1:d8:
bc:fb:92:ab:bf:78:dd:3c:8a:d5:15:b6:3d:f9:9a:d7:7a:18:
45:8b:8d:80:7b:28:25:9a:8f:42:a9:ae:3a:5c:9a:04:22:3a:
97:a0:d8:40:38:ad:42:2c:49:da:ae:75:c7:da:62:4f:35:4b:
92:80:29:3c:69:a5:48:72:91:6f:53:43:ae:c2:8e:aa:d6:72:
21:9a:dd:ad:9c:47:25:e5:fc:02:86:86:c8:ea:11:ee:aa:e0:
37:e9:c8:80:68:4d:d1:17:a4:08:5e:0b:cd:66:6f:20:73:8c:
45:5d:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:59 2026 by rpki-client