Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: 4ehlwDMQowMV8qutYwVu5RCniARC0P2ySsFajV0pdYI=
Subject key identifier: 04:81:9F:02:1F:70:6A:9B:F8:CA:98:13:8A:B3:EA:1E:4C:AA:C8:98
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 01A0E92E6308F28C3CB4361C5920A46A5D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0FD2
Signing time: Mon 28 Sep 2026 18:02:06 +0000
Manifest this update: Mon 28 Sep 2026 18:02:06 +0000
Manifest next update: Tue 29 Sep 2026 18:02:06 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: t90Cb7IXRdcmTOjGT8TijblyEk7iEaPfwueK+Yn6Uic=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:63:08:f2:8c:3c:b4:36:1c:59:20:a4:6a:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Sep 28 18:02:06 2026 GMT
Not After : Sep 29 18:02:06 2026 GMT
Subject: CN=04819f021f706a9bf8ca98138ab3ea1e4caac898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:2f:6c:c0:53:cd:b5:e2:e0:1d:d1:46:e0:
9f:a4:d6:d2:84:6c:24:24:29:ed:c3:37:4b:2a:48:
42:5c:32:02:fe:22:75:e4:cd:33:ae:7b:b2:15:eb:
86:cd:2a:3d:1d:0a:f1:96:0e:94:a3:76:c7:32:09:
57:58:20:bc:d3:67:6c:25:5f:22:11:a7:0b:6b:9c:
84:10:59:77:d5:66:3a:2c:a7:98:5b:31:e0:1e:ba:
2b:36:be:5b:e1:23:a4:57:c7:04:f7:8a:e4:99:d8:
68:b8:aa:e4:fa:91:34:f6:c6:fe:46:19:ec:38:a3:
cb:a8:32:9b:46:07:78:7b:e2:cf:ca:26:f9:60:f4:
ea:46:4d:6c:1d:a0:b9:2c:a8:5a:2a:b2:1c:35:65:
81:bb:ea:28:40:53:0a:16:f9:a6:fd:6d:80:96:78:
ac:96:88:82:02:2f:59:05:11:48:20:e5:26:ad:ae:
45:fa:f2:39:e9:fc:20:00:fc:55:66:78:30:de:41:
22:d7:a8:1d:ea:cd:82:ce:1d:84:50:17:e9:68:07:
14:c3:ed:5a:b1:90:5b:55:0b:05:5b:8c:bc:0a:7c:
32:7d:72:6a:8a:21:db:1c:08:76:27:6e:aa:cd:c2:
42:b3:08:c3:97:14:0e:a9:83:26:df:36:ef:3d:db:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:9F:02:1F:70:6A:9B:F8:CA:98:13:8A:B3:EA:1E:4C:AA:C8:98
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:7f:70:cb:ab:90:63:da:aa:5a:51:86:b0:0d:fe:88:2c:
2b:76:e3:9e:f1:65:e8:78:a9:ab:39:0c:73:cb:42:26:bb:2f:
53:18:46:7a:64:04:cc:d9:44:9a:db:7f:dc:c8:69:5e:7e:28:
65:2b:6c:e0:21:8d:02:c4:09:ae:d6:d5:bd:e4:2d:a2:e5:43:
80:f8:30:20:65:df:0c:1f:88:55:b0:42:a4:9c:85:98:ee:d1:
48:6e:86:85:bb:f4:5e:03:8a:51:f5:8f:7f:31:60:14:97:bf:
7e:38:3c:53:f2:f8:e7:91:16:c5:5e:ed:ee:7f:c1:4c:ee:92:
5f:5b:6c:97:b5:d1:a7:09:56:21:df:90:15:a8:61:34:a7:e4:
28:50:7d:9d:54:c5:41:34:81:7d:a2:62:e2:19:ce:65:4a:4c:
a6:23:3a:49:f7:41:6b:47:5e:41:d7:ee:2f:d0:64:90:19:07:
70:a5:41:63:88:4a:f2:44:07:49:17:c2:91:0f:1c:f3:67:10:
56:3b:a4:9b:66:11:0b:6f:df:b4:89:20:93:a8:b8:7d:41:40:
b8:e2:e8:90:3a:18:b6:95:6e:d5:2f:fa:bc:f0:29:18:79:8d:
73:4c:6d:7f:27:86:bd:69:b9:a5:08:a3:eb:81:c6:59:e7:89:
01:dc:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:23:31 2026 by rpki-client