Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
File: WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft (raw, json)
Hash identifier: YOWxVv4kKMk9vGcM2g+8p0mxJUgSTA13L/cN1qj0vWo=
Subject key identifier: 69:16:95:0E:A9:1A:7F:45:9B:CD:8B:66:B6:BC:50:C9:E3:A3:99:44
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 01A1212EED4B1EFB95982061E085422FFE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:25 +0000
Manifest this update: Fri 09 Oct 2026 15:01:25 +0000
Manifest next update: Sat 10 Oct 2026 15:01:25 +0000
Files and hashes: 1: PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa (hash: jz0AWqz5TrCrCZOL8S5rk8ZUwf9/3LQqBKen3hyQ+JU=)
2: WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl (hash: Tk9f0qF6E3qP1ZG3F6tga6IHeFannPvGU1xcACEz4XI=)
3: vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa (hash: kvS6Muny5DxKn7c0ClorB/3JIoMx7iQSiPe4vnhIL2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:ed:4b:1e:fb:95:98:20:61:e0:85:42:2f:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Oct 9 15:01:25 2026 GMT
Not After : Oct 10 15:01:25 2026 GMT
Subject: CN=6916950ea91a7f459bcd8b66b6bc50c9e3a39944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6c:42:a2:bd:e3:a4:89:0e:d8:c8:0b:d1:f0:
0d:79:e9:6c:a2:80:b0:e1:39:8d:b8:08:c5:e7:60:
a6:18:a8:f2:c4:e2:99:88:f0:53:52:9d:ca:e4:29:
84:78:8d:27:cf:27:68:c8:c7:82:90:82:7f:f1:bf:
4c:e5:14:13:a0:dc:19:dc:76:c0:f6:d3:eb:d3:fc:
86:e2:7f:bc:98:9f:0c:4b:98:83:e5:d5:d5:59:d7:
a9:f0:63:30:d5:58:58:46:fb:b4:57:37:22:55:6b:
d3:5b:69:42:d1:bb:93:5b:1a:0b:2a:ea:da:58:25:
45:86:0e:d1:66:21:a3:af:f7:ed:de:65:d7:a5:27:
db:73:08:81:2a:5e:38:f7:bc:12:50:03:42:91:b3:
71:a5:2c:7c:03:f1:5f:71:1b:01:13:00:12:b2:c3:
05:ec:42:d6:98:c6:10:4d:8e:0d:9e:35:f5:4e:83:
c4:f8:bd:56:13:80:92:61:3f:94:25:04:21:f0:52:
19:5d:43:eb:0a:70:7d:7f:bb:8a:06:90:07:fa:fc:
68:4a:ca:0c:8e:84:fa:fc:4d:2f:c8:bf:a3:4a:7a:
6f:40:b9:0c:8a:3c:a4:6d:9c:0f:37:14:79:81:f3:
52:22:37:ae:87:cb:65:87:f7:32:19:82:25:62:df:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:95:0E:A9:1A:7F:45:9B:CD:8B:66:B6:BC:50:C9:E3:A3:99:44
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:67:1e:84:85:69:ff:a4:12:40:45:87:83:4c:7d:22:6c:
a0:c9:ca:8f:22:f4:3d:63:bd:ca:84:42:92:de:37:b9:58:5d:
e4:81:39:94:b4:dd:08:8a:52:b8:c2:1c:41:2f:60:f5:a4:c4:
bd:5f:c0:29:1e:74:2d:89:0a:2e:a4:44:b3:64:3f:86:ff:92:
c2:f6:04:cc:ed:ac:5d:c9:58:df:b8:eb:86:cb:53:fa:52:34:
c5:c0:11:bb:fe:56:93:08:8f:b6:cd:2d:b1:90:a4:fd:75:42:
8e:97:7a:d1:0d:9d:30:64:e4:f3:d1:a1:bf:6e:93:ec:97:1d:
6d:68:35:50:c8:34:a9:44:fb:3f:44:42:f5:40:a7:b4:05:db:
70:60:6c:96:45:50:5d:63:bc:b6:78:06:ea:e0:9b:55:b8:77:
6a:18:0d:76:ab:f1:0e:b0:6a:71:19:44:42:fa:fc:23:c0:22:
bb:ea:3b:46:6f:0b:04:2e:90:a0:34:1d:08:f5:4a:fa:09:2c:
41:5b:43:4d:e8:e2:44:4e:8d:df:27:1c:1b:67:f8:c4:b3:ee:
d8:0d:bf:8c:58:b1:ed:3a:22:f4:97:b3:a9:80:d8:df:66:cd:
2d:58:8b:c9:4d:05:37:41:58:00:29:cf:00:f9:f9:cc:0a:36:
47:d4:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:38:56 2026 by rpki-client