Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: la5hXdXtejQ6oLv2GCO/Ii8KpJJBXpkNQyR8Dgwo6zw=
Subject key identifier: E2:13:6F:9A:97:E9:B9:35:D1:11:B0:FE:31:A7:21:86:2A:07:A2:65
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 019FA8D074F9066DD1A3FA00759251F8CABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 02B6
Signing time: Tue 28 Jul 2026 13:01:01 +0000
Manifest this update: Tue 28 Jul 2026 13:01:01 +0000
Manifest next update: Wed 29 Jul 2026 13:01:01 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: TEv9Vxjd4GXvSJrokIPQoNvPtRkxJJG7RbTuQ5A2AFI=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:74:f9:06:6d:d1:a3:fa:00:75:92:51:f8:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Jul 28 13:01:01 2026 GMT
Not After : Jul 29 13:01:01 2026 GMT
Subject: CN=e2136f9a97e9b935d111b0fe31a721862a07a265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:0f:12:e1:a0:1c:b0:c9:8f:75:04:c0:f5:
61:fe:98:e6:58:5a:0e:6a:5d:50:d6:72:d3:63:01:
d1:e7:4b:3d:d7:52:76:e3:2c:13:bf:af:1e:e7:31:
cd:0d:20:84:67:36:a6:f0:75:3f:bb:fb:08:5f:a4:
ba:15:42:33:0d:94:15:f1:fb:24:f6:db:72:37:69:
e1:1d:bd:a6:e3:03:ed:fe:24:6a:65:2f:82:cd:f6:
4d:a2:4d:7e:e0:72:0f:8a:7a:f8:c2:7b:e3:cd:4d:
23:ab:df:ae:28:35:41:37:e7:e6:c5:f3:e0:ea:b7:
37:78:8a:b3:f3:eb:c2:8b:3e:c0:b6:38:99:03:ec:
a7:73:a0:11:2d:2f:86:d7:8d:cd:26:08:b6:61:ca:
2f:fe:0e:83:a7:ca:93:20:15:6f:c2:dc:a9:f8:db:
a1:09:1a:42:e0:dc:aa:3d:4d:c8:6c:e5:cf:7c:4e:
ef:c4:ab:cc:6e:6f:21:64:8e:4b:e1:9d:4e:5a:cb:
f0:cc:d2:76:64:c4:42:34:dc:2f:dc:7f:40:1c:6d:
2f:f5:ba:93:8a:d5:83:97:f2:ae:68:42:ef:68:37:
7e:39:31:ba:a7:39:7b:69:6e:6e:35:23:97:7a:13:
08:92:53:4c:46:28:9b:22:7e:1e:76:e1:ec:ae:fd:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:6F:9A:97:E9:B9:35:D1:11:B0:FE:31:A7:21:86:2A:07:A2:65
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:e8:39:11:97:48:d8:c6:9c:78:10:7c:d1:d7:72:05:4c:
ce:f8:bc:e5:e1:46:01:ed:b7:19:3a:b8:8d:c0:88:ea:a3:b8:
db:a3:46:90:8a:1e:8c:e7:4c:a1:dd:d6:39:4e:9c:32:de:14:
35:48:52:32:13:7d:ef:15:a2:c0:3a:12:98:f0:af:43:07:30:
7d:75:1a:71:41:04:a9:54:18:3c:d5:e2:7d:17:23:3a:f0:fd:
31:2b:77:4f:7a:5e:9a:b1:3b:4a:4b:dd:60:3b:18:5b:cc:7e:
3b:40:db:20:6e:01:4b:e4:0c:33:46:ef:1e:ef:96:33:ec:60:
8a:c6:d2:00:e8:c3:23:c9:92:8e:98:0e:ee:ed:7f:93:bd:fe:
2b:5b:45:fe:33:45:05:6c:1b:9f:8f:a3:c8:23:24:91:b5:e0:
79:85:dc:cb:a3:9c:1b:8c:db:1e:1f:bb:d0:8a:a8:e8:91:28:
80:5d:31:e7:9d:15:ff:49:57:47:a7:64:f8:77:84:f6:44:d2:
16:6d:94:b7:d6:bd:e1:95:bb:42:ad:72:c8:2e:0a:02:97:b7:
5e:de:a3:b2:ee:6e:2b:b9:b1:e8:9c:20:a7:82:6c:1a:b5:13:
f4:44:73:47:44:55:4c:8a:d3:9a:5d:8f:0c:4e:68:b4:3c:8e:
e5:06:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:28 2026 by rpki-client