Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.mft (raw, json)
Hash identifier: pUIl2mKaFetR64Bus6H/Eke7r7Fkm7RUJVaTzQl7biE=
Subject key identifier: D9:16:5E:75:FC:B0:FE:9B:3C:A9:CF:82:23:A8:6E:49:A3:36:12:CF
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 01A0C3D75119E37B6147ABB154A45430960B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
Manifest number: E0
Signing time: Mon 21 Sep 2026 12:01:03 +0000
Manifest this update: Mon 21 Sep 2026 12:01:03 +0000
Manifest next update: Tue 22 Sep 2026 12:01:03 +0000
Files and hashes: 1: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (hash: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=)
2: WvxA0kCVgUP3KaGOLDVOucQ_E68.crl (hash: 7Jnv6D7z4D/rfdvtLAzQ0rac251LGxSAQqyxNGzfWmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:51:19:e3:7b:61:47:ab:b1:54:a4:54:30:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Sep 21 12:01:03 2026 GMT
Not After : Sep 22 12:01:03 2026 GMT
Subject: CN=d9165e75fcb0fe9b3ca9cf8223a86e49a33612cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:e6:b9:25:9d:7f:d5:06:35:b0:45:48:85:
aa:df:23:fb:e2:c3:c2:d2:76:9a:2d:5d:b5:15:b3:
57:fb:4a:e5:ff:a0:65:53:e1:56:62:f7:9b:2b:9a:
76:7e:74:8b:75:0e:1f:88:e4:fa:36:b5:c8:05:99:
a8:b0:b6:de:d5:f9:04:f3:44:64:0b:2e:45:82:03:
f8:92:88:b5:74:cb:18:be:2a:e4:69:78:2f:84:17:
46:5f:49:a6:d3:2a:f4:2c:26:b3:89:3f:53:b9:15:
92:84:7d:d8:64:d0:ed:1c:da:fd:3d:f1:50:5e:da:
87:61:f8:ad:39:9b:78:3d:07:64:9d:f5:11:66:f3:
13:9c:da:14:f4:e3:aa:3a:18:4a:40:14:ea:81:26:
04:59:bc:09:f9:07:46:85:56:f1:ce:e6:fb:dd:55:
6d:2e:20:de:44:41:64:f2:aa:12:7e:9d:87:37:ef:
b6:2e:12:84:ee:96:92:c2:1a:18:b8:52:3b:8d:aa:
d8:26:87:bb:97:6b:0c:e1:51:f9:58:2a:9f:88:d6:
d4:34:21:bf:66:0c:46:23:c1:a0:32:07:3d:1f:b1:
6f:64:94:b6:e1:86:90:58:d3:45:50:5a:b8:5d:89:
5e:2b:91:13:4c:70:73:56:82:d4:fd:8d:07:2c:02:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:5E:75:FC:B0:FE:9B:3C:A9:CF:82:23:A8:6E:49:A3:36:12:CF
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:50:9f:ec:2f:70:ca:81:54:17:1f:76:ae:ea:a0:f1:4c:5c:
d3:71:16:69:5c:58:fc:ae:d1:8a:9d:0f:87:79:54:fb:fd:95:
72:29:b4:13:1c:84:ee:0b:dd:10:d1:76:8b:70:8e:5f:14:dc:
5f:2f:3e:7c:4a:b8:39:d9:72:53:ae:a9:32:51:ea:30:e1:0a:
fe:b6:50:28:86:d7:a9:1d:53:76:81:0e:50:3c:c8:8f:b7:5b:
68:fc:e8:0b:f3:6d:48:68:3d:bb:71:5b:18:f4:63:ae:b5:7c:
4f:4c:94:37:aa:ce:0d:1a:32:4f:9d:d3:34:02:79:4e:fd:86:
e3:c3:be:67:28:d0:b5:62:bd:a4:69:72:a5:38:bd:9c:5c:0b:
d7:15:36:ac:de:ef:be:24:51:6f:26:89:ab:e1:d9:f8:d4:44:
92:84:82:8e:6f:92:92:3f:8f:00:83:f6:42:bf:a8:f2:78:19:
a0:50:a7:ed:57:f8:e3:c2:bb:65:b3:d7:ed:62:4d:dc:a8:1e:
ca:de:2d:e5:4a:ab:cb:4d:68:ce:4a:43:09:3d:fe:50:57:df:
dc:c2:65:3c:48:f3:ee:35:78:fe:d2:81:1c:14:d3:5d:25:df:
05:fa:88:db:fd:6f:84:88:3d:e8:85:28:94:68:66:1a:fa:1d:
b2:dd:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:19:46 2026 by rpki-client