Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
File: Wkv82nYeTylp9jQ3IYeeygGert4.mft (raw, json)
Hash identifier: iKbde/4B0Lg64e5tVwPgdXvLt166Bn6f29QNoWk1k4c=
Subject key identifier: 01:02:AC:5F:E9:E9:13:BE:EA:45:13:BD:CB:40:54:F0:0A:F3:75:98
Authority key identifier: 5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
Certificate issuer: /CN=5a4bfcda761e4f2969f6343721879eca019eaede
Certificate serial: 019FA898F44E560F285F90E1F1A45AB5D5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:23 +0000
Manifest this update: Tue 28 Jul 2026 12:00:23 +0000
Manifest next update: Wed 29 Jul 2026 12:00:23 +0000
Files and hashes: 1: Wkv82nYeTylp9jQ3IYeeygGert4.crl (hash: vvWMNRNSiilI6StbYnrutdphyU5sKoNzcJot7QkgXmo=)
2: xyc3dtPBeCZodO1ea-M7uUOk0M4.roa (hash: OTJn4Cjc6VH+vP9GyHGv33tTlfRUx9SD+YiIfBghf20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f4:4e:56:0f:28:5f:90:e1:f1:a4:5a:b5:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4bfcda761e4f2969f6343721879eca019eaede
Validity
Not Before: Jul 28 12:00:23 2026 GMT
Not After : Jul 29 12:00:23 2026 GMT
Subject: CN=0102ac5fe9e913beea4513bdcb4054f00af37598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:9e:d7:d0:30:a3:db:1e:3a:dc:ca:8c:93:
60:50:55:48:9f:ff:00:0a:72:6a:28:61:8b:c3:78:
54:53:ab:31:10:f4:44:a5:05:3c:2a:12:73:7d:f7:
93:53:e2:68:ed:1d:09:7f:dd:ec:f1:76:7c:8a:f0:
7d:aa:07:4d:c3:32:96:71:c7:11:0b:e9:94:40:08:
8e:72:f4:47:85:3e:3e:56:cf:ce:02:e8:0a:0c:d6:
11:0c:34:03:b2:a2:5a:c5:9c:b5:d1:74:ff:21:d9:
6c:4f:25:73:d8:3e:33:45:e7:c1:7b:34:c9:ed:f4:
02:81:31:16:fe:78:c4:8d:00:27:17:5b:0f:cb:8c:
04:19:0b:b5:b8:7a:81:67:23:8d:8b:2f:84:4c:ae:
d0:f7:e6:28:39:79:e6:77:74:a9:4e:72:0e:4a:1a:
9d:a6:22:7f:ac:ea:cc:f7:3e:12:3f:9e:97:e8:ec:
0b:0c:d9:dd:2a:58:b4:09:e6:71:7c:2a:00:e7:6b:
02:ae:02:b5:c4:74:6e:d7:f7:3b:ac:5f:1f:31:a7:
f0:8c:74:70:3e:13:74:f7:d9:e9:47:6c:49:0e:61:
fb:2f:ea:f9:77:8a:5a:5d:4d:01:66:aa:7f:a0:9d:
14:97:ee:ce:76:c6:51:8c:9e:06:d8:cd:37:a4:42:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:AC:5F:E9:E9:13:BE:EA:45:13:BD:CB:40:54:F0:0A:F3:75:98
X509v3 Authority Key Identifier:
keyid:5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:27:5e:0e:ab:52:df:02:84:33:7e:57:b6:ea:c1:c3:43:
60:e8:d6:ff:29:7c:20:4b:3d:84:05:8e:8b:21:14:0f:8d:71:
4c:46:c0:e1:a8:75:6a:c6:79:b5:cd:d8:40:5e:41:cb:1e:43:
8c:0c:06:19:d9:10:7e:21:14:60:0a:7d:84:20:3c:61:67:9b:
29:a9:a8:6a:a5:11:6b:24:ad:fb:a5:ff:04:b8:50:a4:9a:14:
d3:ed:8b:ad:1f:30:64:88:67:16:da:2e:58:45:7b:c0:a9:6b:
c7:a7:28:db:be:10:72:47:03:f7:1c:52:d3:aa:0e:14:1a:82:
ee:bd:68:c8:e0:78:df:42:53:39:91:f6:0f:4d:09:0d:5a:e4:
56:b0:8b:5f:7f:a3:29:7c:4d:d8:b2:12:84:25:8c:4d:48:89:
9a:4f:f7:2c:02:db:59:ef:da:d9:c3:ea:b4:3c:8c:72:5f:47:
d5:d1:81:94:85:2b:59:c0:06:f6:12:c8:76:0a:c2:da:98:e9:
b5:9b:2b:00:11:cc:42:f1:f1:8c:c8:31:d5:1b:1e:47:f5:7e:
b3:dd:2a:6b:3d:1e:77:01:d6:02:1f:b7:35:d7:8b:ac:8c:b8:
fa:66:66:48:82:e5:bc:21:66:ac:60:17:74:2b:99:80:d4:c3:
8d:22:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:33 2026 by rpki-client