Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier: P/HMiTmQdszVT3sxbst3e+QxlW8PNE2nUQYGatYAWTo=
Subject key identifier: BA:5C:50:A5:48:57:95:39:53:C9:55:3B:77:60:42:B4:CB:4F:43:24
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial: 019CACB4F44F68351E763301689D177BBCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number: 05BC
Signing time: Mon 02 Mar 2026 04:01:06 +0000
Manifest this update: Mon 02 Mar 2026 04:01:06 +0000
Manifest next update: Tue 03 Mar 2026 04:01:06 +0000
Files and hashes: 1: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: 7mALG0ZrtfyBzqJ2IzGaVkEEaTxnnr44wcgp0fWAbm0=)
2: m0yOtQ4zzaWwbkLA2mct7O9eAl8.roa (hash: TTt4vBq0ts1GuSUcOF2cVVxmQbeDaFKzFBYDNYxTze8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f4:4f:68:35:1e:76:33:01:68:9d:17:7b:bc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Validity
Not Before: Mar 2 04:01:06 2026 GMT
Not After : Mar 3 04:01:06 2026 GMT
Subject: CN=ba5c50a54857953953c9553b776042b4cb4f4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:df:2b:df:42:02:bc:08:6d:18:81:1a:21:
9a:14:45:b5:57:ae:d9:5c:37:e3:1a:b8:7d:a6:a4:
a4:e2:7d:08:ac:9a:48:e0:62:f1:9a:1a:8e:f3:69:
b2:d8:20:94:37:a3:a5:17:c3:e1:3f:89:df:0c:b9:
db:6d:09:ba:a4:e3:02:04:53:5f:5d:9f:d6:10:48:
55:7f:f2:27:e4:34:32:51:91:ed:6a:1d:3d:14:1d:
e1:55:ce:1b:b1:0d:b7:38:48:bc:8e:20:69:3d:d8:
e1:4f:3d:ce:5a:99:83:5d:53:04:14:da:ab:74:c7:
f1:b2:79:1f:74:2b:fc:80:b1:07:ee:c1:0d:41:89:
33:c6:fb:ee:d6:e7:92:64:95:fe:d3:82:a2:21:8e:
bb:25:1e:e8:c5:d3:61:27:f3:6a:d7:c1:39:88:a2:
af:a0:44:9d:2d:32:c2:c7:7b:7c:9d:22:86:50:6e:
48:22:39:b1:67:df:49:37:ba:0f:48:85:b4:0c:bf:
c8:d0:cd:a7:bd:d2:df:28:7b:89:4c:68:e9:f8:36:
60:10:dd:c9:65:e2:49:33:3b:ab:1b:3c:93:bc:45:
12:d2:de:2f:c5:d4:d6:61:94:7c:3f:16:27:a5:ef:
5c:f3:95:5a:ae:db:7a:aa:93:3c:f6:27:cb:f1:ef:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:50:A5:48:57:95:39:53:C9:55:3B:77:60:42:B4:CB:4F:43:24
X509v3 Authority Key Identifier:
keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9b:25:b6:04:43:37:b8:8a:8e:f8:c4:69:3a:ef:37:0c:21:
8a:5a:86:1e:2c:e0:24:54:b8:d7:52:4c:e1:e7:86:0a:ab:7d:
7e:5f:1b:cc:90:af:74:02:8c:a1:72:45:e5:06:14:0b:93:4d:
64:24:b0:25:b5:f5:ad:bc:54:68:22:52:d7:cb:cb:d2:39:f2:
eb:63:08:04:a6:12:d1:ae:b6:16:42:d2:04:43:e2:33:19:7f:
1e:6f:95:7c:dc:c5:5a:80:91:5d:3e:3e:54:b8:b5:40:29:94:
be:19:32:e1:70:56:35:b7:7f:3d:f6:aa:fb:c8:e5:22:c5:70:
db:9a:24:84:b2:3b:ad:23:7d:ba:3f:6a:9f:19:4f:64:02:79:
14:ba:1b:60:bb:4f:56:d6:61:75:e1:91:d8:6e:42:c5:ac:e5:
65:ee:94:12:04:27:96:22:3d:23:4c:52:30:5d:53:46:54:04:
32:fa:e0:ce:2f:90:62:55:b8:27:e5:5a:8b:8f:0b:ee:f8:92:
fc:9b:74:08:04:ca:c0:61:07:ad:3b:f9:0e:c6:4d:1a:20:dd:
f7:9a:48:23:cd:76:bc:3e:9f:08:28:1d:88:a1:7c:03:19:05:
5b:b1:cb:44:52:21:e5:cf:70:73:21:61:b6:fa:bb:d6:31:0f:
6d:dd:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:15 2026 by rpki-client