Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: rSLNW06Bi1SKZxRsfUC1RP6bCQDzjdohBrW9EsOrrJA=
Subject key identifier: 6F:19:97:52:AC:09:ED:B3:EC:92:80:AF:43:7A:F0:43:B7:AE:FB:C4
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 019CAD594BCB9F9A822AC629D2C89BE2D61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0EEC
Signing time: Mon 02 Mar 2026 07:00:36 +0000
Manifest this update: Mon 02 Mar 2026 07:00:36 +0000
Manifest next update: Tue 03 Mar 2026 07:00:36 +0000
Files and hashes: 1: FtmrAWvs32J-0LCY5jlebMT1Rfw.roa (hash: rHUlX8ur2N+m0zFmk9zgsq6JuE1TKDjTeQ3hfqt+3hA=)
2: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: KoIYYsMvhKejYXD01Ln209KSaa7bf5SxZ2mgXo22Vx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4b:cb:9f:9a:82:2a:c6:29:d2:c8:9b:e2:d6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Mar 2 07:00:36 2026 GMT
Not After : Mar 3 07:00:36 2026 GMT
Subject: CN=6f199752ac09edb3ec9280af437af043b7aefbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:3e:26:9b:67:86:02:d6:f1:15:f0:d4:87:
15:a0:61:03:13:c4:da:20:7c:18:8b:c7:17:21:da:
f2:9b:ef:02:87:bf:46:07:9b:bb:75:8e:b1:6e:2f:
43:73:46:1b:c7:34:8b:5d:12:a9:e4:74:d1:98:b7:
bc:fa:ff:dd:e5:80:19:03:4c:45:7c:14:6b:ee:34:
01:20:c5:71:22:ea:d1:db:10:ea:06:67:65:f4:63:
11:5d:1e:34:1b:1d:33:eb:d4:e3:96:00:a2:75:c6:
d1:17:7d:ef:3c:30:f7:af:d0:8a:05:8f:5d:df:1b:
3f:bc:64:91:af:f0:f4:ad:69:e5:c8:ef:f8:f3:a0:
49:e5:b7:15:57:c2:e9:34:a2:5f:18:c8:78:3f:e3:
dc:91:bc:9b:74:c8:86:d5:cc:b2:df:96:8c:82:01:
6a:d9:bf:e5:24:db:78:7f:74:8a:16:e0:65:9b:ce:
de:12:00:5b:e7:55:77:38:3b:d8:d4:79:bf:83:89:
3f:b6:1f:72:dd:0e:44:3d:95:1b:c0:2f:4e:46:94:
b6:7d:55:db:e4:79:eb:6e:0d:68:75:92:1c:72:23:
3a:3a:ae:d8:56:68:65:d1:54:1b:6e:9b:f2:41:49:
37:9c:4e:59:eb:b0:0f:19:b1:bc:40:55:36:62:58:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:19:97:52:AC:09:ED:B3:EC:92:80:AF:43:7A:F0:43:B7:AE:FB:C4
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:44:f5:01:a6:80:7a:81:3e:f2:1c:59:a4:f0:6d:b5:c1:cb:
51:0e:15:cd:7d:a5:13:57:1c:f1:62:3c:73:df:6e:60:32:9a:
e2:0d:2c:eb:4d:88:e7:b2:de:08:3f:60:b5:f0:97:37:2e:45:
1b:d2:10:28:f9:30:c1:97:1a:9f:4c:36:ed:bf:55:21:3e:48:
db:4b:bb:ee:94:ba:f2:7d:a6:f8:e2:8f:2f:d8:26:e5:f9:22:
8b:d8:a8:c5:c6:3b:49:bb:0f:85:ce:83:ac:85:17:fd:c5:f2:
3f:99:52:e0:29:72:b3:42:42:a0:a2:60:37:91:87:04:5c:0e:
b0:4c:68:61:f7:df:a1:76:2d:d1:99:67:1c:f4:5b:32:93:cf:
1c:53:06:9e:be:9c:b0:d3:32:d0:51:31:ce:c7:11:5a:2d:94:
73:01:79:91:61:47:e8:e4:1e:b7:96:b8:39:87:e5:1f:56:fb:
14:57:b4:21:a9:2a:f9:1b:ad:f7:aa:53:af:5f:ee:09:02:38:
77:52:71:05:8a:aa:88:62:f9:dc:0c:1b:f1:0b:ed:8c:59:87:
81:cc:2b:a1:2a:84:6c:95:d1:3b:c6:c3:0d:9c:83:3f:e2:69:
89:de:13:20:ff:10:65:81:3e:6e:57:5a:ef:26:1a:17:a9:4d:
db:94:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:50 2026 by rpki-client