Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: JybeDqHfrcrswLFpYHn/UYu/6atmhowXDWhXCLGc8gk=
Subject key identifier: 28:F0:65:C8:D2:42:24:AB:CB:F9:7D:94:70:87:EE:11:E6:A2:1D:71
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019FAC76A40102C730B47741FFA1ADA15789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0AE2
Signing time: Wed 29 Jul 2026 06:01:24 +0000
Manifest this update: Wed 29 Jul 2026 06:01:24 +0000
Manifest next update: Thu 30 Jul 2026 06:01:24 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: Im9UT/LZLj34j3WT9C9qGbAipHIl+z6sPrhx6JRaMoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:a4:01:02:c7:30:b4:77:41:ff:a1:ad:a1:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jul 29 06:01:24 2026 GMT
Not After : Jul 30 06:01:24 2026 GMT
Subject: CN=28f065c8d24224abcbf97d947087ee11e6a21d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:cd:c0:76:fb:86:96:e7:bb:3c:ee:42:26:
e7:ca:e1:35:ed:91:22:2c:3c:ca:4c:c3:55:82:95:
df:c0:4e:06:6c:86:87:87:a7:ee:3c:32:23:0b:31:
53:39:43:71:4a:02:31:2a:b6:7e:66:6e:01:1f:5b:
a2:9b:76:e3:0e:32:40:09:10:a9:d3:53:46:07:ad:
cd:3c:61:89:a8:e4:fb:8e:77:b8:8c:04:bc:7a:17:
9c:ed:06:4b:b0:79:78:ec:9e:28:98:a0:a6:3a:0d:
03:3b:87:8a:1c:c2:6b:e2:1a:a3:08:51:b9:6a:aa:
cf:66:58:98:ed:21:f6:fc:75:9e:ad:0c:df:d8:8e:
25:ce:b7:c7:33:31:9c:31:e4:a7:51:47:1b:e0:f8:
9d:6c:97:34:9f:e5:91:83:14:be:3a:c8:df:69:a3:
65:f4:98:00:dd:e4:c0:d2:d9:f8:50:07:66:70:de:
5b:f1:2e:48:2f:79:78:2e:f3:69:9e:68:f0:b0:54:
52:e2:fc:a0:10:1f:05:79:14:12:74:53:c6:c7:41:
eb:5f:12:32:3d:46:01:a5:07:01:fa:5d:6d:da:9a:
47:6f:c7:9e:17:9f:09:d4:dd:95:16:8f:b9:ed:bd:
b1:77:59:f3:fd:48:42:0e:a8:83:93:72:ed:06:31:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:65:C8:D2:42:24:AB:CB:F9:7D:94:70:87:EE:11:E6:A2:1D:71
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a8:94:bd:5d:f6:28:ba:36:75:70:ea:72:ca:1a:20:cb:99:
8a:83:df:07:cb:17:42:c3:6f:13:29:bf:9e:d9:f2:e3:e6:6b:
53:d4:1f:50:44:bd:ef:1d:dc:6b:17:0e:de:12:56:10:39:79:
72:3d:f1:9d:d8:3d:26:08:bb:0f:43:cc:48:6b:a1:0f:f5:de:
d8:03:d8:8c:16:2d:9a:52:8e:d3:77:ad:45:13:1d:18:4d:2d:
f4:fc:07:5b:3b:a4:e9:ef:48:c5:e7:4d:fd:19:1e:aa:4b:0a:
3b:fd:3f:98:18:c2:10:de:47:fe:0d:d0:c2:0f:8d:5e:97:4d:
9c:13:ad:3e:8d:a5:fe:5f:47:df:bb:a2:73:50:0f:3e:06:6b:
15:fc:2b:e6:53:83:9a:49:73:78:20:53:c4:8c:c4:f0:d6:f2:
cd:a6:74:f9:06:7c:91:c5:fc:f9:1d:ef:72:68:2a:dc:ef:d8:
77:f4:23:0b:17:23:f9:69:e9:8a:9d:8e:b7:00:00:df:df:8b:
30:0e:80:a7:09:b7:ea:cb:c9:f5:fd:d5:95:db:a6:d4:70:9d:
64:9a:09:c3:92:38:e8:fc:e7:41:1c:d9:26:01:ad:a7:1e:07:
72:38:47:fd:c8:6a:82:8d:e5:bf:d6:77:87:d6:84:3c:2b:f0:
cf:af:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:49 2026 by rpki-client