Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File: W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier: B7SZBpp2OQqOTjVP+8jIpe2LeBLZKpmieWsmQ5bNB10=
Subject key identifier: 9F:0E:32:A9:2F:2C:E7:72:03:EB:3A:B5:5D:C8:DF:8E:F8:8D:C9:15
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer: /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial: 01A0BF1EECF05D8AAA3F84083BD8E64B1477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number: 0211
Signing time: Sun 20 Sep 2026 14:01:10 +0000
Manifest this update: Sun 20 Sep 2026 14:01:10 +0000
Manifest next update: Mon 21 Sep 2026 14:01:10 +0000
Files and hashes: 1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: t0wnKyHdy5BTvH+XpV93d+iJ6d36w0UqAq/wDALCsP8=)
2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:ec:f0:5d:8a:aa:3f:84:08:3b:d8:e6:4b:14:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Validity
Not Before: Sep 20 14:01:10 2026 GMT
Not After : Sep 21 14:01:10 2026 GMT
Subject: CN=9f0e32a92f2ce77203eb3ab55dc8df8ef88dc915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:25:47:5d:92:c5:55:ba:68:0f:0f:c4:e9:
4b:fb:75:9e:57:89:2a:bd:40:02:99:bc:94:69:da:
3e:4b:61:a9:2b:9f:71:80:47:39:3d:2d:09:1f:53:
70:46:d5:1f:03:4f:6c:b1:95:e3:7e:38:f3:ba:66:
f2:81:f3:7d:8a:d3:ec:1a:ea:e6:7a:25:78:82:e3:
c8:c8:b7:83:65:58:c2:b6:56:b9:7e:be:b5:60:47:
07:3c:85:35:c0:d3:c0:e7:d0:f0:24:d9:b1:65:85:
59:9b:9c:34:a6:2b:70:74:c5:a7:f7:5e:1e:12:ea:
3f:6a:fe:11:5e:fb:74:01:2d:af:00:89:f4:16:32:
72:46:59:88:42:1e:8a:aa:ae:ec:ea:a2:c8:46:df:
8a:d2:fb:82:d3:8e:e7:54:b1:53:e6:dd:18:90:b7:
df:86:96:e8:db:b0:c4:08:11:80:fc:5c:71:11:79:
dd:c0:42:be:0a:e6:37:22:63:c4:2c:c8:90:31:d2:
15:f0:1f:f2:e2:65:84:78:52:7f:27:c5:5f:ec:6f:
da:2f:3b:56:fa:41:e8:4c:a5:24:a2:f3:1c:fd:0d:
2b:65:f4:3b:0c:60:f8:a1:b6:b4:a5:bd:f7:84:d5:
c8:c9:cc:d3:d6:9d:1f:17:24:4a:0e:0e:61:a0:e1:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:32:A9:2F:2C:E7:72:03:EB:3A:B5:5D:C8:DF:8E:F8:8D:C9:15
X509v3 Authority Key Identifier:
keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:4e:f6:7a:ec:61:57:aa:c3:b4:5e:dc:ba:4f:43:5c:60:
7e:a2:ed:43:04:a3:ab:b5:a7:22:e6:b5:d7:64:3f:2d:55:1b:
40:d2:4c:81:97:0d:17:a1:13:a5:db:a9:70:97:9c:43:86:90:
07:2f:70:e6:d4:05:04:b9:9a:b3:ff:cb:d8:e6:bd:de:fb:03:
91:ca:08:77:5d:a1:d9:73:57:fb:9e:2d:da:fe:eb:1c:f6:21:
c9:69:c8:f6:6f:48:46:4a:1e:bc:70:03:1b:44:e8:db:7c:6b:
f2:74:10:8b:b7:10:64:fe:46:b5:1b:1f:24:d4:59:be:f0:21:
6f:3d:26:42:a7:5d:ea:61:7a:1c:6e:ab:c9:47:97:20:f7:af:
ac:b3:72:ec:37:64:ee:46:bd:91:b2:50:d3:a6:ea:29:78:4b:
2a:09:2d:f6:d4:36:7e:c1:02:7f:5b:84:0f:48:a0:80:e9:48:
ef:b9:97:f1:ea:7e:a9:1a:65:df:59:ab:b8:12:9c:69:c8:6e:
b6:ae:09:fe:d4:e7:a6:80:5c:8b:f5:1d:e4:4a:3d:0f:da:92:
58:d7:70:9a:fb:8c:41:62:3d:4d:90:12:27:56:a8:7d:81:fc:
47:1a:2d:a8:2a:ad:3c:d9:aa:d4:cf:09:27:e3:87:59:55:35:
e9:2e:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:31:28 2026 by rpki-client