Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
File: W2fkuRJYp4VpukUKXno0e0MR1FE.mft (raw, json)
Hash identifier: tYKgYxRfIuTgWpfijZD6JTE7FxGIcIhXh4qDY2YUG+I=
Subject key identifier: DC:70:B2:16:97:E8:43:D7:00:AC:1A:95:DC:A1:2C:2E:82:C9:45:C8
Authority key identifier: 5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
Certificate issuer: /CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Certificate serial: 01A1174F12C1DCA083E5ED3DC53325B7F239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
Manifest number: 014F
Signing time: Wed 07 Oct 2026 17:00:20 +0000
Manifest this update: Wed 07 Oct 2026 17:00:20 +0000
Manifest next update: Thu 08 Oct 2026 17:00:20 +0000
Files and hashes: 1: W2fkuRJYp4VpukUKXno0e0MR1FE.crl (hash: ifbT/dl7l524YIlT+d1DHZDrIKuzjXUnAngeMeJybiA=)
2: yBxwaW11AdzCtD2abIPzlUZyrb0.asa (hash: sgvoWb8Eg0fLOeE4h8rR/2GP62YHBrZ5DZ553gmHgZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:12:c1:dc:a0:83:e5:ed:3d:c5:33:25:b7:f2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Validity
Not Before: Oct 7 17:00:20 2026 GMT
Not After : Oct 8 17:00:20 2026 GMT
Subject: CN=dc70b21697e843d700ac1a95dca12c2e82c945c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:ba:b2:99:1a:a3:02:f1:2a:b3:f4:25:f6:
a0:c0:b8:ec:6a:e6:0f:db:f1:ce:93:32:db:85:83:
23:30:fb:6b:43:bb:08:de:8d:1a:14:a6:5e:52:ee:
85:ac:94:f3:fe:7d:28:9c:73:80:0e:af:f3:d6:a1:
7a:7a:97:ba:a9:64:39:19:1a:c6:2d:1a:af:a8:ec:
41:7d:21:7f:41:8b:ec:87:51:62:f1:fe:02:64:66:
bb:21:1c:fa:3d:09:ca:69:b1:75:68:2b:95:fc:8a:
f1:42:02:e7:34:a3:d7:ab:34:f0:80:32:52:73:5b:
95:21:ee:f7:a0:28:cd:40:4b:58:a2:cd:97:d0:2c:
a2:dc:83:c5:95:93:4d:48:92:ec:01:04:13:2c:22:
6d:2f:50:2b:81:81:f3:86:52:26:2a:f1:5e:d8:54:
13:cc:e9:86:05:07:9c:a4:83:52:17:0b:a4:d2:6c:
cd:4b:27:a6:e8:6f:2a:31:51:8a:74:62:ed:52:9e:
23:5a:69:5a:a5:80:e2:ca:57:26:59:44:9a:a2:36:
c3:21:8b:71:20:5b:44:9c:80:45:54:f7:55:94:55:
25:f4:39:58:f8:e4:45:f6:87:0f:0b:e5:4b:cf:8d:
b6:54:26:d6:03:ad:2b:13:4e:b3:eb:2d:c8:3d:42:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:B2:16:97:E8:43:D7:00:AC:1A:95:DC:A1:2C:2E:82:C9:45:C8
X509v3 Authority Key Identifier:
keyid:5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:b7:8b:fa:79:48:f8:23:c6:06:c4:e7:60:ff:e6:08:2f:
61:ab:b6:e6:68:f9:60:b9:70:0d:23:48:d1:4c:9e:50:3c:05:
3d:4d:36:1b:fb:1a:04:bc:72:0c:03:5c:bd:49:39:c5:fa:52:
02:74:3c:49:a9:f1:79:e4:e0:d9:b3:3b:b1:bc:fe:3a:44:33:
9c:51:15:1b:38:f6:2a:c5:f9:ae:ac:79:cb:e1:4f:f0:e3:75:
16:17:b6:b4:1a:19:0e:6a:9e:0e:e3:5d:c8:20:c1:db:75:89:
40:bb:b5:20:70:c0:7c:59:d5:1f:9c:fa:7b:0d:1f:5d:4b:7f:
cd:3e:c4:d4:55:ee:af:6d:95:25:0d:c9:04:f7:6d:97:61:84:
23:36:c1:27:21:d9:6a:d4:7b:8c:91:bf:55:d3:a4:a3:fc:91:
8c:b1:13:30:7a:cd:e2:32:cd:71:bc:d6:62:89:0f:e5:93:7b:
77:73:f3:28:a8:00:72:f9:7e:3d:c9:92:73:53:7f:e7:7d:24:
f9:11:be:fb:a9:7c:f0:31:08:f3:41:d1:bc:fb:a6:b0:b2:d6:
52:42:17:be:25:de:e7:7b:8d:5c:f6:a7:2f:0d:54:75:47:ca:
cd:02:59:dd:ea:a4:81:2d:a1:7d:c9:80:55:77:54:c4:32:5e:
81:b4:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:17:28 2026 by rpki-client