Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: vN49n8QApzcbKTpti5vvMb3/QSBt3ZshepvNX0i4Z6I=
Subject key identifier: 99:75:94:69:D0:45:A0:55:6F:1B:72:66:9D:F6:F6:95:44:F2:CD:29
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 01A0BEE78B5ECCE422F87FA8B1C036E274A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 0346
Signing time: Sun 20 Sep 2026 13:00:40 +0000
Manifest this update: Sun 20 Sep 2026 13:00:40 +0000
Manifest next update: Mon 21 Sep 2026 13:00:40 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: 4uaduPU1ikSncFA/bRblSbDtWyDPliIPqKwU4OslHGE=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:8b:5e:cc:e4:22:f8:7f:a8:b1:c0:36:e2:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Sep 20 13:00:40 2026 GMT
Not After : Sep 21 13:00:40 2026 GMT
Subject: CN=99759469d045a0556f1b72669df6f69544f2cd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:e7:cd:9e:80:5c:bf:c2:13:90:18:7d:95:
8f:6d:f3:35:83:7d:0d:e2:bd:aa:bf:70:55:23:b3:
71:49:82:0c:f1:ec:94:66:f6:70:cb:81:0d:22:b1:
7d:65:65:90:13:c1:fa:73:45:21:33:a9:23:d3:18:
33:ed:81:77:b0:89:05:25:4d:75:2a:64:2a:a8:41:
23:dc:2f:66:b5:64:bf:df:e4:ed:83:77:23:e0:cf:
02:a0:d8:34:e5:be:75:ef:4c:c0:b8:3e:a4:17:a9:
a4:cf:6b:44:64:b9:af:0d:0a:f0:a6:88:c2:7d:9c:
97:01:a0:19:3c:4a:79:78:c4:8f:fc:d6:b2:d4:55:
69:a6:81:1c:dc:c8:63:71:3e:6a:87:66:23:36:f9:
10:e5:ff:96:8e:1a:23:3d:8f:96:e3:6c:16:09:de:
6d:7c:e1:41:6b:23:47:d8:52:ff:31:65:72:03:64:
06:b1:65:fd:04:ef:be:6c:17:ca:42:86:30:97:0d:
b9:36:43:c3:6d:33:93:27:b4:90:5e:52:4a:34:6c:
0a:98:12:1f:71:e1:e8:42:89:e6:f5:ce:57:b9:15:
fc:26:91:85:5c:85:5b:da:af:8e:c1:d2:ea:fe:72:
5b:92:ac:3c:ab:70:7b:4a:9e:28:24:18:85:16:38:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:94:69:D0:45:A0:55:6F:1B:72:66:9D:F6:F6:95:44:F2:CD:29
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a6:92:3b:ea:18:d4:82:c5:ce:bd:b6:7a:2a:2f:0d:19:fd:
94:d2:c2:37:7f:e7:86:36:9c:52:e2:1f:82:0b:76:d1:c2:44:
90:2a:f7:50:f3:bb:23:d6:f8:94:cd:53:3c:f6:5b:0c:c6:ba:
1e:7c:d7:96:e9:63:07:9f:f6:22:6f:7f:fe:f7:5e:03:68:9c:
a8:05:67:ae:2e:50:be:20:c3:fb:2f:16:e9:c3:33:c0:9a:50:
76:ac:c5:63:99:0c:6e:94:2a:83:ce:fa:19:e1:02:97:c1:f7:
56:db:95:92:bc:51:a1:4a:ef:e9:05:1e:dc:61:97:99:b1:10:
74:73:eb:7d:4e:f8:ea:48:28:b9:7c:2e:d0:d1:7f:93:19:1a:
b0:2c:67:ff:63:1e:20:ae:54:84:0d:b2:9c:93:bc:a8:c3:b3:
e0:03:00:44:6a:92:74:62:61:80:ed:50:b5:04:e9:76:7e:68:
89:ce:f5:7c:d0:41:f4:d8:f5:bf:11:bf:a9:57:fd:57:8b:52:
b8:24:35:d2:bb:61:2c:15:b2:92:57:75:5f:38:8a:98:c6:47:
d9:68:cc:05:ba:87:de:1c:61:6a:4c:fb:02:93:e1:4b:6b:15:
28:63:98:14:4c:e5:97:80:36:08:30:ee:98:97:c6:95:58:3c:
05:1c:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:23:37 2026 by rpki-client