Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: lMmjdtXZYHbzA1BslxE94xtsZ/lV6Lu1F0tfXV+07Jo=
Subject key identifier: CB:D5:8E:5C:78:53:F0:5C:95:B0:D4:7D:48:59:9E:C3:A9:FA:FD:0F
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 01A0C8C658C76E7E8650565AAC0FCFC45314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 07CB
Signing time: Tue 22 Sep 2026 11:00:37 +0000
Manifest this update: Tue 22 Sep 2026 11:00:37 +0000
Manifest next update: Wed 23 Sep 2026 11:00:37 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: +dBEyzyfdzmkLXK+MNbl1AwOURfmrc4wtykC5wX1B/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:58:c7:6e:7e:86:50:56:5a:ac:0f:cf:c4:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Sep 22 11:00:37 2026 GMT
Not After : Sep 23 11:00:37 2026 GMT
Subject: CN=cbd58e5c7853f05c95b0d47d48599ec3a9fafd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:6a:04:7f:36:b5:f9:e0:60:e4:76:57:1c:
d9:be:2e:0a:5c:3e:d2:fb:2b:4b:e2:d1:2b:80:43:
4a:ff:ab:a8:c3:01:04:55:17:6d:b8:91:55:f2:f6:
19:94:12:85:50:fa:f1:99:60:0f:cc:18:ad:24:8f:
2b:aa:8b:1a:c6:41:2d:d7:2b:f7:28:64:d5:64:2e:
cd:03:df:95:89:3d:99:ee:e0:2f:b1:31:27:f3:b2:
7d:42:ad:9e:06:6b:d7:7d:30:36:41:09:4b:5e:ae:
0a:6e:29:24:6e:7a:10:84:3e:9e:50:3c:21:88:89:
ac:ec:56:56:9c:c2:54:9c:9a:8f:b1:07:29:b2:7f:
97:29:e9:97:f5:51:85:1a:43:65:70:67:32:2b:b3:
54:4e:c6:64:a0:a9:d2:0e:62:64:b5:30:90:c5:8a:
28:d6:c0:ea:e8:3d:c9:f1:66:39:f2:bf:a0:74:ab:
34:c0:5e:63:c4:d6:59:cc:5f:94:69:ea:26:59:a2:
68:19:9c:10:c8:2f:6e:bf:e1:92:db:6f:42:f2:79:
b1:fb:02:bb:a7:1f:f1:b0:ba:3b:f9:de:85:4f:9a:
08:51:c2:e8:50:5a:3d:5a:12:0d:3d:4c:10:6a:32:
ac:11:35:8d:e0:51:7e:ef:d1:cd:f1:c9:36:3d:0e:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D5:8E:5C:78:53:F0:5C:95:B0:D4:7D:48:59:9E:C3:A9:FA:FD:0F
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7c:33:51:70:fd:7f:95:b7:72:9e:9d:6b:f2:01:7f:ba:0e:
3a:93:fa:48:49:48:fc:5f:6c:73:29:c7:30:50:9f:0e:8b:d7:
77:73:1c:85:78:6b:cf:f9:d4:4e:56:29:0a:4c:23:8a:a2:f6:
af:96:05:df:2c:f0:c7:2a:57:b6:f4:29:c9:a8:59:fa:d7:6e:
96:d1:54:6e:d7:ee:1e:28:a0:71:66:17:02:e0:a8:d8:ea:4e:
c7:2a:a4:2b:19:cf:96:48:28:20:e1:0f:dd:d7:0e:a8:cf:df:
43:23:32:19:6d:d4:15:08:5c:f8:6a:c1:1f:35:d6:2b:82:51:
5f:76:f6:91:f0:b9:26:8c:af:5f:d1:b2:6e:34:f2:60:70:22:
f5:44:01:87:06:80:8e:ae:8f:f7:bf:e9:2d:81:d4:8f:96:35:
ea:b1:d7:d6:ab:f6:63:47:b8:8e:5d:ec:53:cf:64:46:85:39:
90:e7:57:cb:a3:03:ed:56:25:fb:1b:0a:9b:66:0c:06:72:be:
d4:e0:89:aa:20:41:e0:24:6c:18:6a:28:a2:4f:b8:27:50:6d:
40:3c:6c:b9:d7:16:dc:b0:80:1c:e9:07:49:b8:fb:ea:0b:d8:
d6:b8:00:42:38:9f:20:a8:08:cb:13:03:71:62:71:a4:12:37:
36:8d:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:07:50 2026 by rpki-client