
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: fzzc9+kf+Qs6Ap44xtG5Qh7xxP3MfbkVe2Z5dfXmlhQ=
Subject key identifier: BC:FA:92:9A:60:D9:36:32:68:7D:0A:23:AF:97:40:30:22:2A:1E:17
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019FAA87C0CD59FD85D92D63BF9FD578EB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:00:50 +0000
Manifest this update: Tue 28 Jul 2026 21:00:50 +0000
Manifest next update: Wed 29 Jul 2026 21:00:50 +0000
Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: /6celuSV3cYY/nwM8babeIf+DuTu5Qgu+SQLBRkAK/Q=)
2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c0:cd:59:fd:85:d9:2d:63:bf:9f:d5:78:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Jul 28 21:00:50 2026 GMT
Not After : Jul 29 21:00:50 2026 GMT
Subject: CN=bcfa929a60d93632687d0a23af974030222a1e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:cd:4f:99:0b:bd:10:6c:f4:d6:d2:87:09:
8a:1f:58:7e:5e:10:69:cc:21:6f:12:a0:5d:a8:19:
0c:31:d9:af:64:74:7f:1e:87:52:fe:11:11:e6:c3:
66:af:21:19:51:12:6c:5d:ba:2b:db:6a:cd:aa:b8:
d1:c0:3b:19:c6:40:f2:3e:c7:4b:88:7e:81:52:b5:
0d:fe:c7:7c:f8:b4:55:8b:20:30:b8:ef:33:13:70:
8f:60:20:e4:71:cc:03:28:43:40:e2:96:14:9f:f3:
51:a3:a6:72:b8:7b:3c:cc:7d:4a:4c:d5:a1:c0:04:
f3:89:c9:fb:66:3c:ac:ba:ec:33:ff:b5:64:71:b2:
77:d2:4f:c6:d6:f8:27:ec:0b:f2:19:02:4a:83:12:
a2:d2:e5:5a:e5:48:c9:21:41:a2:ab:aa:69:95:1f:
77:bf:8d:07:9f:6e:21:a8:0a:5f:de:7e:40:ad:cc:
45:9a:a3:a6:54:85:0b:64:bc:0b:42:a3:40:24:eb:
43:71:a5:91:24:e4:f4:de:ce:53:3c:2a:7c:4d:b4:
f5:3c:43:ce:f2:07:97:93:03:11:00:2f:3f:da:75:
7c:ae:1f:ce:62:fe:da:39:61:b3:67:e9:ff:f3:d5:
04:08:51:c1:be:54:ad:68:94:bc:46:cf:5a:09:0b:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:92:9A:60:D9:36:32:68:7D:0A:23:AF:97:40:30:22:2A:1E:17
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7d:b6:b7:f5:29:3e:3a:83:a9:84:30:c3:d3:f1:4e:e9:00:
84:0a:48:33:9c:66:d1:ca:b6:92:e5:52:5e:01:a5:27:8c:39:
e3:66:d7:4b:db:8a:be:10:23:92:94:f0:89:43:79:5b:45:48:
29:81:da:23:d3:0e:9e:e1:5d:e8:76:d7:1a:48:69:5f:b4:a0:
97:ba:60:a2:29:35:cd:7e:6b:d9:e0:8a:13:d4:be:7a:7a:80:
26:20:b4:7c:4c:66:42:7a:29:68:10:f1:3a:da:22:d6:b1:6e:
1c:d1:10:0b:ac:ec:d5:cd:ca:3d:38:92:4e:0f:5d:fd:ab:39:
4b:cb:c5:19:3a:93:c5:c7:53:1f:62:d4:5e:c8:34:2c:2a:17:
9d:e5:68:27:21:9a:83:f2:ef:7f:88:e5:af:c9:95:22:c8:1b:
19:20:cb:6f:1a:6e:13:b9:66:ba:ad:70:1d:95:39:21:92:5c:
8f:3d:b7:90:7c:fc:bd:fa:88:3d:b3:be:1d:02:99:96:7f:18:
c0:40:17:d4:6e:ac:42:39:ab:a7:77:85:f0:df:43:3e:61:9a:
de:05:59:14:a2:d6:00:ba:2c:84:a8:b2:22:51:d6:69:87:be:
90:2b:cb:ad:3b:1d:27:90:3d:93:78:e7:a8:8f:9d:b1:cc:dd:
e9:89:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:25 2026 by rpki-client