Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
File: WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft (raw, json)
Hash identifier: xG4zj70CpaxFs6C8XKKOiMXTa4LBvsvaaKJ6e3J9gZA=
Subject key identifier: 82:38:D6:69:CF:A9:D5:80:57:BF:96:BA:4F:0C:84:FA:D2:D0:49:11
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Certificate issuer: /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial: 019FAA88694F831C7625573DDBD7A4A46BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:34 +0000
Manifest this update: Tue 28 Jul 2026 21:01:34 +0000
Manifest next update: Wed 29 Jul 2026 21:01:34 +0000
Files and hashes: 1: 8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa (hash: UTaNMd3CEd0lWrDH+fieqbIVnu1cLWotgckfZ6yVE20=)
2: WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl (hash: 8m1aiamG8XuYCkIE0iWrBeCVOr+KrvLQAs3zxLwDi3Y=)
3: _5WF2PQCdHfSB17pJupjN-FIiNc.roa (hash: Ya29FAa0OUkvMPvOrcq7snCU9GLA5RS5i5UVH+eGNFE=)
4: s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa (hash: IH63TUzfzMb/SQxlsB7kB/bwWUNTCvlV00UxXhSJjuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:69:4f:83:1c:76:25:57:3d:db:d7:a4:a4:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Validity
Not Before: Jul 28 21:01:34 2026 GMT
Not After : Jul 29 21:01:34 2026 GMT
Subject: CN=8238d669cfa9d58057bf96ba4f0c84fad2d04911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:c3:83:98:a4:23:38:69:72:bb:79:4a:0b:
2d:1e:14:43:cf:7f:5c:33:8a:47:30:10:f4:cc:05:
0f:78:ce:2b:c6:5a:06:e5:85:ae:19:8d:8a:f5:e0:
f6:1f:89:53:7b:c3:be:0a:79:12:91:97:b1:e6:11:
a9:f2:68:c8:4a:94:d9:26:18:e9:f1:16:79:97:6c:
c1:37:b7:10:cb:cb:36:ca:53:33:86:18:51:1c:4e:
65:d2:f4:b4:b9:9c:7c:28:50:29:eb:1e:eb:07:68:
28:43:7b:f0:f3:bf:be:9e:75:03:1c:5b:00:a7:0c:
97:f8:bd:6f:fc:60:6e:97:30:11:e3:da:07:07:2a:
0c:1c:a0:c6:5c:6d:f6:01:44:47:d9:72:92:c6:4a:
18:66:a1:d3:32:04:b3:43:2b:ae:3f:d6:31:b9:7e:
38:b9:b9:87:75:ef:11:39:a9:a7:fa:22:61:05:bf:
05:39:7e:df:ce:ad:c6:de:00:9e:6f:fc:77:c4:b4:
d7:07:6d:40:ea:b0:ee:43:54:5c:14:16:3e:b2:38:
f6:2e:03:a6:19:e8:c1:6d:2a:f8:4f:7e:e1:fb:0a:
68:7b:7f:38:1d:89:84:7d:7e:4e:c7:27:4c:37:c2:
3e:cc:38:aa:a0:c4:5a:f0:ab:2f:7d:24:3d:b4:09:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:D6:69:CF:A9:D5:80:57:BF:96:BA:4F:0C:84:FA:D2:D0:49:11
X509v3 Authority Key Identifier:
keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:23:05:a5:c0:d9:4d:ab:0d:19:9b:89:54:31:51:18:e8:
d9:74:1b:5a:d7:d1:d4:0e:7b:f9:63:38:07:86:89:27:ea:0b:
c3:1b:d1:0d:23:e9:c7:fb:07:87:f3:31:6b:20:a4:2e:d5:6c:
d7:0f:95:79:c9:88:eb:f1:b6:67:3f:61:aa:26:f9:d3:7b:a5:
6c:23:1a:1e:78:03:e9:ad:6b:74:e9:ff:70:c8:af:57:b3:7f:
11:7c:17:92:40:58:4e:57:cb:b3:20:67:0c:37:cb:c3:c6:4a:
cc:03:84:a1:81:22:e1:27:1b:6e:43:cc:d9:6b:32:d8:d1:42:
8c:b6:cf:2a:60:5f:c2:85:b1:13:8c:45:60:a4:ae:93:c7:ca:
84:12:dd:a1:f9:cf:6d:b9:73:ed:3f:33:d5:8b:89:94:0c:e7:
bc:de:e5:39:5b:7c:96:4a:31:45:bf:78:1f:90:60:1c:14:c2:
ba:9f:dc:fe:bc:26:c8:d6:00:5a:19:65:41:02:25:3f:67:e4:
be:e8:c7:d8:20:f8:58:ab:7f:ae:86:5f:31:15:ee:40:c5:c0:
df:93:13:10:25:12:a0:25:dd:c9:38:e7:94:df:1d:88:03:4c:
86:ab:b8:1a:16:f5:51:9e:fd:67:9b:4b:51:c4:66:44:d5:fb:
12:be:2c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:24 2026 by rpki-client