Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: hVyfiGnA5UCdG1l0XN40VMKvOIMNjgHMmuYXIcYpt1Y=
Subject key identifier: 3F:C2:7F:46:7E:D5:B3:E9:85:B2:0A:1E:81:38:38:F3:1A:7C:4E:B4
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 01A0BDD502A5C52CCCC427821331DCA71404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 05D0
Signing time: Sun 20 Sep 2026 08:00:48 +0000
Manifest this update: Sun 20 Sep 2026 08:00:48 +0000
Manifest next update: Mon 21 Sep 2026 08:00:48 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: hsMAcIJDa34m3fAct9PiYc2xoTolqYi5ZwU6L83zr6k=)
2: _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (hash: /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=)
3: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:02:a5:c5:2c:cc:c4:27:82:13:31:dc:a7:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Sep 20 08:00:48 2026 GMT
Not After : Sep 21 08:00:48 2026 GMT
Subject: CN=3fc27f467ed5b3e985b20a1e813838f31a7c4eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:2d:2a:5b:3c:a7:cb:8c:eb:a7:96:5e:14:
bf:e1:c6:2e:6e:4e:a7:4a:98:8a:f3:cc:56:a6:5a:
60:52:e5:3a:96:9a:0a:83:f1:0c:84:97:ed:60:bc:
cc:85:04:c2:83:c7:98:92:1b:8c:54:01:9b:24:b1:
50:c5:de:c6:43:87:5b:0c:85:c0:a9:46:07:60:8a:
9e:3b:a5:14:e3:3b:21:9d:32:3e:32:03:21:ff:6b:
40:13:38:aa:49:3b:d9:22:a6:e5:5b:44:d7:ec:ab:
1e:3b:d5:11:c1:e4:59:04:ed:e2:71:70:62:8e:68:
5d:33:16:ee:b9:2e:1f:1a:c6:1b:fa:a7:65:5e:30:
e8:83:8e:34:c1:bb:6a:75:30:50:ab:a9:f0:6b:81:
98:ab:3a:d4:c8:9f:0f:12:bc:fa:f6:c7:4b:5e:47:
9b:30:ea:d8:37:a6:88:a1:da:08:3b:7f:74:f6:53:
ea:e3:26:6a:9b:09:b8:09:0f:f8:cc:27:c4:13:8a:
dc:b8:6f:0f:0c:38:56:69:14:50:15:fe:36:f0:a5:
fb:17:e9:83:32:ce:33:5b:72:cf:ee:ec:98:91:99:
39:dd:6f:15:0c:f4:d5:c6:d3:80:c7:36:1f:ec:3b:
c8:b6:cb:b2:3e:56:38:1e:e2:0b:78:79:44:5f:46:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:7F:46:7E:D5:B3:E9:85:B2:0A:1E:81:38:38:F3:1A:7C:4E:B4
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:d7:65:e5:48:35:d8:d3:c9:7b:fe:a5:f1:45:7d:67:02:
a1:08:b3:8f:01:49:78:ff:53:82:ec:b6:de:5f:3a:82:2e:58:
c0:1d:2c:c6:66:eb:30:1d:08:99:54:34:41:ab:82:f9:c8:4d:
0e:fc:36:cd:00:6b:5f:b1:64:7f:1c:80:be:d3:9e:e2:67:4a:
66:ee:54:f5:19:e1:20:6d:17:40:4c:70:f0:f2:06:41:90:07:
aa:c9:17:a0:97:84:94:35:04:b7:07:d3:72:d1:32:33:3a:18:
e3:ec:cd:7a:09:97:e9:57:45:24:cb:b8:1b:34:79:87:62:57:
c2:ae:f5:6d:ff:25:59:b4:22:5f:ad:aa:96:1a:2f:70:37:6e:
36:4c:c8:bd:9d:a9:87:27:67:4d:3b:ec:e3:f9:02:50:bb:ee:
fc:13:d3:f6:9a:64:84:e8:bf:c1:dd:71:76:e4:81:4c:45:8c:
73:e9:4b:0a:01:50:18:41:2b:2a:f0:a9:8e:fd:2e:ed:5b:63:
97:6d:27:9f:f4:50:f1:e4:02:57:20:36:1e:14:b9:07:6e:5f:
b6:de:c0:ec:c6:56:84:1f:b6:db:54:e4:a9:7b:df:8d:7c:5b:
04:dd:71:4f:3b:17:3d:2c:62:dc:c1:c4:0a:25:86:26:60:e0:
d8:ef:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:11:24 2026 by rpki-client