Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: +Ti0CKNdtQaDy5ohHMFWi6jRx09c6if/6/x8rdHP5cA=
Subject key identifier: 74:95:6D:F0:AB:D9:D5:18:7E:3A:A7:10:51:95:B7:06:ED:CA:BC:6F
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 01A0D26EDFFE55BC2DD0CF4BCDD2039E3C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0FBE
Signing time: Thu 24 Sep 2026 08:01:16 +0000
Manifest this update: Thu 24 Sep 2026 08:01:16 +0000
Manifest next update: Fri 25 Sep 2026 08:01:16 +0000
Files and hashes: 1: BDv1bnHvaLtWajfUeKcw3pIG_Ok.roa (hash: 69EUlopn2Prmu5cUFMolg4m3eko2E4egAqnT2et0qIE=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: ui+0bhO1WBFOAyHXXHdPb+DYWtux0zEd/YZWK7/mr6c=)
3: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (hash: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=)
4: r_8bT90UjcZl-MvxK-5tmdznS1I.roa (hash: +kBFEQDnTe7FZB/GY9jWIpmDn/+p706IcANeKk3b/o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:df:fe:55:bc:2d:d0:cf:4b:cd:d2:03:9e:3c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Sep 24 08:01:16 2026 GMT
Not After : Sep 25 08:01:16 2026 GMT
Subject: CN=74956df0abd9d5187e3aa7105195b706edcabc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:12:cc:c2:5e:d1:69:6c:5f:fb:61:2c:fa:
40:47:ba:06:ce:02:54:62:36:ad:44:aa:7b:76:7d:
8c:34:da:c5:ae:00:e6:d6:b5:f9:d9:aa:09:00:8f:
57:bb:89:db:6c:02:9b:4f:3c:a1:a8:0d:f9:a7:f4:
3d:17:99:ea:80:f1:7a:c1:9f:e1:92:3b:b3:b0:5f:
26:22:b3:d6:b4:48:4b:35:b7:7f:aa:c4:7c:c3:60:
e1:64:1f:10:f1:f2:b5:29:f9:9f:56:d7:90:7f:3c:
be:20:e6:58:99:0f:63:be:cf:58:53:3d:a7:50:2e:
98:b8:e5:7c:f7:48:19:f1:c0:0c:07:f2:e1:56:64:
78:6f:06:47:f1:6b:b3:25:34:18:30:c6:68:52:60:
73:3a:b1:46:c6:42:f9:af:29:b6:d2:5e:53:39:69:
2a:27:7c:11:6b:c0:11:64:5b:3a:b0:c2:82:a4:e4:
c0:c2:f5:c1:35:5c:60:71:e7:01:30:b5:a2:11:73:
15:8d:d8:2d:aa:da:7e:79:c0:ec:e8:9f:32:e2:c8:
3a:94:c7:8e:7d:9e:3a:2b:b6:44:12:5b:c9:25:78:
7c:e3:e4:db:7d:54:12:22:2b:cf:2f:e2:af:90:5f:
24:fe:77:f9:3e:f2:0f:8d:ab:d9:11:6c:57:d0:d7:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:6D:F0:AB:D9:D5:18:7E:3A:A7:10:51:95:B7:06:ED:CA:BC:6F
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:b9:35:1e:d8:4f:ad:29:f1:42:5b:e7:70:3d:be:dd:a9:
06:d8:78:32:5f:ae:19:42:33:2c:b2:9e:32:35:ad:90:9d:44:
46:4c:49:33:66:41:56:3d:b0:1e:a4:a6:e7:03:1b:5e:67:2a:
54:4c:6c:cf:72:15:92:41:99:e7:d3:cf:fb:2a:93:2f:a3:d2:
3f:6f:ca:34:6a:ad:df:ba:37:da:51:f4:38:a0:17:39:01:f2:
c5:9c:33:db:46:e2:f1:f7:e3:eb:5d:24:5f:ad:8e:7c:66:95:
43:80:b2:32:1f:ca:6d:a4:9d:6c:53:c6:fe:49:d0:84:92:3b:
66:bc:08:b8:72:fe:3b:3b:0f:04:ba:13:5d:b5:cd:1b:ef:b7:
eb:b7:a5:72:68:30:be:25:be:2f:8e:f7:9d:d3:ff:0a:3e:6a:
1a:ae:8a:96:a7:59:8a:d0:78:ea:97:9f:39:9f:2e:e5:c1:0a:
69:ef:45:5c:16:d6:d8:08:e4:56:a0:77:c3:04:c0:77:7f:b8:
6d:55:51:cf:ac:33:62:05:24:45:e0:3d:6b:38:65:80:cf:3d:
3a:79:02:69:d5:41:5c:51:bf:f7:1d:c9:86:fe:f2:b8:bd:db:
93:01:e2:ea:f2:eb:08:4c:4a:58:49:1b:71:e2:af:dc:0d:65:
6f:4d:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:55:27 2026 by rpki-client