Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: hNiK9kQjQYm1KJxCjuDyqiasiJlifIf3EludQF2CPwQ=
Subject key identifier: CB:AF:6E:B9:B1:46:23:85:CA:84:09:F8:FB:21:C2:B3:A8:8B:47:AB
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019FAB9A67418C8D12C96FC96C687A8ABC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0F25
Signing time: Wed 29 Jul 2026 02:00:50 +0000
Manifest this update: Wed 29 Jul 2026 02:00:50 +0000
Manifest next update: Thu 30 Jul 2026 02:00:50 +0000
Files and hashes: 1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
2: BDv1bnHvaLtWajfUeKcw3pIG_Ok.roa (hash: 69EUlopn2Prmu5cUFMolg4m3eko2E4egAqnT2et0qIE=)
3: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: M3gs0F3+7Q+P86ErVEAEyqF84VDI17x0Cqd2RmMlvDI=)
4: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (hash: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=)
5: r_8bT90UjcZl-MvxK-5tmdznS1I.roa (hash: +kBFEQDnTe7FZB/GY9jWIpmDn/+p706IcANeKk3b/o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:67:41:8c:8d:12:c9:6f:c9:6c:68:7a:8a:bc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Jul 29 02:00:50 2026 GMT
Not After : Jul 30 02:00:50 2026 GMT
Subject: CN=cbaf6eb9b1462385ca8409f8fb21c2b3a88b47ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:a5:23:c1:00:79:b5:03:b3:3b:1b:c6:1e:
93:81:7e:73:f5:35:68:ab:35:1f:97:35:d6:07:f0:
ff:f3:d9:1f:0b:fd:6c:53:2c:ef:df:f8:a9:fa:3a:
d7:cb:ec:8b:a8:22:34:8b:0e:50:46:4e:97:4f:aa:
3d:b7:92:cf:37:90:b2:d5:64:07:1b:11:e9:6e:e3:
ba:2d:5f:da:44:4f:38:76:18:5c:9a:ca:02:1e:3f:
52:76:07:7c:70:ea:ee:2d:20:fa:7c:96:e5:4b:ac:
4a:22:da:5c:e1:b1:18:13:b2:46:1d:9b:f2:a6:4a:
47:95:a1:7b:9a:a1:85:c2:ba:a8:f7:21:e4:fe:f4:
33:10:fb:72:50:1b:af:55:4f:0e:d6:24:90:75:cb:
e5:73:fe:fd:b1:b3:2d:11:f7:9a:b7:59:8a:d8:f9:
75:54:74:1a:c4:e5:ca:d1:b2:7a:8a:81:11:76:b9:
69:17:ec:fa:9c:be:84:7d:6a:5a:55:95:87:d0:bc:
51:4c:19:3a:9c:90:8f:c9:b3:1f:4b:ce:8a:4a:5c:
54:72:05:78:8d:a1:c7:89:4d:f3:67:67:63:e8:b5:
53:39:a2:2d:d3:41:be:6e:45:83:4b:73:3e:10:de:
99:ae:fa:b3:3b:37:39:c7:b6:d1:9a:2a:b7:78:15:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:6E:B9:B1:46:23:85:CA:84:09:F8:FB:21:C2:B3:A8:8B:47:AB
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e9:5f:ce:63:6f:da:fa:9c:db:ab:11:80:fa:98:cd:ab:8b:
9b:5f:b2:75:c7:18:49:3b:39:10:e7:51:0f:57:41:9d:8c:89:
d7:86:6d:5e:2a:61:77:f7:31:66:0d:b4:39:61:2a:14:54:dc:
2c:df:f2:74:94:81:0e:1b:77:24:7d:73:a9:fc:0c:4e:b0:4e:
50:52:e2:62:c3:27:f0:82:2e:36:2b:23:bf:10:48:9d:1f:22:
7f:25:25:a7:51:fc:1f:87:bd:bd:f2:d5:18:a1:84:77:f4:81:
1e:e3:b8:ec:3c:37:83:90:f3:ed:45:b9:0b:19:da:cd:b4:ff:
38:44:35:3d:54:03:9b:40:d0:ab:da:59:af:05:7a:96:67:74:
6b:80:3c:15:bc:58:5b:0d:c2:55:f0:c5:b2:56:73:3f:1b:27:
6a:6c:06:46:56:a3:9f:ed:46:ed:15:40:0f:49:b2:55:4a:5c:
26:f3:b2:d4:43:36:1c:fb:01:7f:90:1f:1c:f9:a7:b2:fb:c1:
66:d4:55:61:c3:7e:80:f7:db:72:e9:90:81:5a:54:48:c3:5d:
c9:21:4b:1c:e2:69:16:ef:60:db:3d:04:1c:88:81:4d:2c:21:
ce:5a:9a:64:23:b5:97:b4:c5:c8:6b:f2:f1:4a:84:34:e2:80:
6e:22:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:10 2026 by rpki-client