Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: 8MyUbRwibgtkh2e2ykDkxvxlaz7g6+i1F0hH6BwDfok=
Subject key identifier: 36:5C:82:A2:8D:E2:79:B5:7A:E6:DD:84:5B:D6:D5:CB:06:B3:20:48
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 019EBF23D088FD1A9D5EA85F5412D434CB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 023D
Signing time: Sat 13 Jun 2026 04:00:55 +0000
Manifest this update: Sat 13 Jun 2026 04:00:55 +0000
Manifest next update: Sun 14 Jun 2026 04:00:55 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: GJI35mcFvSpUvO2z+csVWBiibcl4K1GXLOD+x+tydxw=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:d0:88:fd:1a:9d:5e:a8:5f:54:12:d4:34:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Jun 13 04:00:55 2026 GMT
Not After : Jun 14 04:00:55 2026 GMT
Subject: CN=365c82a28de279b57ae6dd845bd6d5cb06b32048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:75:7e:5b:d6:c7:67:25:e5:7d:10:d5:ca:
82:69:ef:08:2a:ae:91:d8:4a:0c:1d:ab:99:2c:7d:
29:9a:ed:99:99:c3:46:17:45:2a:cd:49:8a:c1:89:
76:2a:30:43:6e:7b:0a:af:0a:e2:14:3f:63:89:0d:
f0:b9:49:40:48:e9:3a:1d:f5:e8:f2:f2:a9:90:ee:
b5:53:d1:1c:ba:6e:63:aa:54:dc:97:b4:58:15:95:
44:6b:a5:fd:48:ec:51:5f:86:78:2c:0f:b6:29:cc:
2c:3e:26:83:64:18:fa:ed:c9:5e:48:0a:32:bd:33:
c6:ad:ee:20:37:7d:55:c9:a5:0b:30:aa:f8:15:f3:
b3:e1:f2:d8:ac:7c:5f:b1:ce:1f:37:36:d6:d8:01:
6c:9d:f5:17:cb:46:71:5e:f3:4e:b8:f2:77:ba:10:
26:16:7f:9b:4e:70:fc:a5:92:17:06:5b:cf:ad:ea:
8c:56:de:46:9f:3d:0a:af:03:b0:2f:dd:fe:d7:3b:
fc:c4:c9:38:52:22:73:ac:99:53:d4:ac:6c:87:a0:
3b:4e:47:6c:af:12:1f:eb:be:d1:84:8e:e9:24:93:
b6:4b:ed:29:d6:d4:0c:60:f1:94:b1:12:19:de:c0:
64:1e:38:5b:91:1d:73:e8:d1:d6:74:da:f1:5c:24:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:82:A2:8D:E2:79:B5:7A:E6:DD:84:5B:D6:D5:CB:06:B3:20:48
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:80:62:5e:14:be:e2:61:87:51:e2:49:a6:6e:02:48:ac:46:
c5:da:8c:01:6c:c7:69:1e:2d:7a:ce:7b:e1:5b:70:77:25:ec:
c0:61:08:c3:ea:f6:e6:ef:73:6f:c3:49:0d:27:09:45:0c:9b:
91:75:11:18:8b:6e:30:31:a0:26:81:a3:6a:51:e1:82:c7:f1:
f1:ed:c0:d4:bb:bc:ee:e4:5b:bd:76:fa:ca:78:83:53:ac:cc:
83:a5:17:2d:6e:2d:2a:41:05:0b:c5:b3:21:31:8f:7e:4c:cc:
75:be:8f:52:a9:75:5e:54:e2:86:6b:ef:59:97:65:a2:39:db:
b7:84:5f:06:7a:41:4d:fe:31:de:44:05:f8:b0:5a:7e:54:15:
6b:01:be:0d:57:a4:54:fd:2b:08:bd:01:45:5a:92:d9:72:cb:
48:2e:03:ba:49:86:b6:24:c8:76:f9:9d:bb:7a:5b:6f:ca:84:
0c:38:09:3c:2b:16:ca:48:3a:04:b3:e8:d7:e0:6c:ac:93:7d:
e8:2b:53:0c:02:fa:73:89:cc:76:ec:14:eb:72:2d:cf:e9:eb:
b5:c6:6a:e2:29:4c:04:b8:56:3d:44:09:e6:59:13:ef:96:09:
6a:bf:50:19:55:07:45:44:74:d8:79:27:4a:7e:88:f6:5f:ef:
cc:61:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:53 2026 by rpki-client