Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
File: WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft (raw, json)
Hash identifier: QgZYcdBle9ic9eHGz+O1gJTAbS3ufWWwbJ9cS7h3qXk=
Subject key identifier: A0:51:52:23:97:75:2D:94:FC:1E:CC:B0:A1:2E:65:0A:CF:99:2C:BF
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Certificate issuer: /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial: 01A0D9BA6B8919FFA2E474D45378F6AF8A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:08 +0000
Manifest this update: Fri 25 Sep 2026 18:01:08 +0000
Manifest next update: Sat 26 Sep 2026 18:01:08 +0000
Files and hashes: 1: HZsbbCQV184FMKGhunsSvE-BnQg.roa (hash: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=)
2: WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl (hash: BEhJxefC8n/gRgOxy6tuZQSicIHe9iVz1qLUK1iDfuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:6b:89:19:ff:a2:e4:74:d4:53:78:f6:af:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Validity
Not Before: Sep 25 18:01:08 2026 GMT
Not After : Sep 26 18:01:08 2026 GMT
Subject: CN=a051522397752d94fc1eccb0a12e650acf992cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:7d:58:51:ba:d0:10:df:05:ce:1e:12:c8:
8e:89:93:52:a5:6a:b2:42:0f:a6:c6:56:3b:52:d9:
36:38:90:11:36:d3:a5:14:20:76:fb:76:fb:a7:84:
2a:aa:77:cc:87:f2:47:56:ff:97:87:20:51:9b:02:
84:93:dd:2f:29:d5:7f:f6:ad:47:d8:41:13:eb:db:
0c:87:42:58:71:6f:6e:26:b5:e4:e3:98:f6:7e:44:
89:58:2b:6b:6b:50:b5:5d:df:8d:74:9c:0d:24:53:
74:c1:c0:e2:d0:e8:6f:3f:c7:cf:77:a6:f9:cb:b8:
6f:e7:06:8b:f4:3f:f6:c7:b0:3f:4a:37:ff:40:18:
f2:76:58:b4:de:f0:1d:e0:f0:27:9b:b6:45:cc:d5:
98:f6:28:3c:dc:35:13:6c:b5:72:a1:c2:88:65:9f:
ef:80:38:93:43:13:9a:21:5d:2f:db:65:85:67:13:
1d:1b:d7:13:4c:65:0a:b5:fd:af:8f:1e:1d:8d:b8:
43:ea:63:1d:27:56:04:94:72:99:53:d3:da:d5:24:
13:2a:70:51:92:5e:d4:ea:27:60:87:05:2f:89:8e:
f7:a9:5f:70:61:6e:3f:f3:1a:eb:0d:a1:d2:6a:f5:
12:c9:20:72:cb:a4:db:ec:3e:4a:56:b6:99:1a:54:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:51:52:23:97:75:2D:94:FC:1E:CC:B0:A1:2E:65:0A:CF:99:2C:BF
X509v3 Authority Key Identifier:
keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:fe:a6:b4:c0:b0:5b:29:09:94:73:19:6e:35:be:0f:3a:
db:b4:81:8c:18:ad:7a:da:fa:67:8b:cd:5f:21:38:51:99:2c:
18:68:b7:57:a7:ab:7e:d2:42:80:6a:21:62:f3:f5:fa:a3:ab:
c7:be:fe:ac:0e:0d:62:a5:95:53:86:05:a0:a9:3c:16:41:28:
0f:57:cf:97:1f:d6:99:f4:f4:ab:19:da:3c:e9:03:c9:1c:32:
fe:df:2b:a2:4e:3b:07:21:2a:25:2c:ed:a4:8f:08:c8:1a:9f:
ef:29:b1:a1:36:c4:0e:81:0b:19:ee:e6:7f:cc:0a:9a:c8:f2:
2e:61:04:cf:cb:e9:07:13:a3:fd:a1:f3:fb:4f:a2:e6:3f:2d:
88:95:96:c3:6f:a3:43:55:6f:8c:d5:c9:72:5e:28:0b:8e:c1:
2d:22:26:e0:17:c1:20:f6:c8:7b:01:4d:e2:ed:79:f1:02:ed:
a6:1b:d8:e1:4b:c7:8c:ce:00:78:1b:5e:55:11:b2:a6:b5:a7:
ba:a5:51:f7:39:d0:76:d9:0f:75:99:f1:a6:24:34:4c:26:58:
ab:f4:69:26:55:f7:42:f4:6c:7e:03:6a:80:ba:59:b4:b5:84:
50:4d:a0:6f:f3:b7:49:30:c9:41:b5:c3:ac:05:78:91:07:13:
34:4c:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:26:00 2026 by rpki-client