Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: 4D025Ec8JNoeI3u/eXimVrkkdoyZJ7sfCGuWCbYUrZ0=
Subject key identifier: AF:CE:16:07:1C:79:C2:AA:E3:E1:37:4E:8E:A5:25:85:51:B7:0E:F2
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 01A0F48D846270B4797939EAD9722E86991D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 048F
Signing time: Wed 30 Sep 2026 23:01:50 +0000
Manifest this update: Wed 30 Sep 2026 23:01:50 +0000
Manifest next update: Thu 01 Oct 2026 23:01:50 +0000
Files and hashes: 1: 6byb2KY2dzFJ8LYZ-ZhDNUXIq1s.asa (hash: E/Sb3QnwB0uVhpRKVET1Wmf7ZhLZisXxaO8Q1T20DZk=)
2: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: I1tqE0hmUCK/VIXI3mWNLUEgPmuMCDSh8VERbb9rMM8=)
3: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:8d:84:62:70:b4:79:79:39:ea:d9:72:2e:86:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Sep 30 23:01:50 2026 GMT
Not After : Oct 1 23:01:50 2026 GMT
Subject: CN=afce16071c79c2aae3e1374e8ea5258551b70ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:30:cb:c5:df:74:0d:ca:6f:52:aa:89:92:
62:c7:33:f1:43:da:96:9a:a8:32:11:0b:c8:f8:9b:
53:f7:12:69:b1:94:74:4a:45:9f:db:71:c8:81:f4:
1a:50:14:e1:6d:ce:fc:4b:15:3a:f2:23:5d:7e:20:
da:86:fa:bc:94:8d:fb:fa:51:14:90:26:57:e2:3c:
1b:57:fd:2d:26:89:9c:fe:cb:8b:ca:df:c3:69:ae:
89:eb:9f:e0:1b:a6:e1:bb:3c:dd:b5:ad:7a:2b:c8:
e7:45:2d:95:51:c2:56:cb:28:86:cf:a8:28:5e:14:
4a:23:8d:ae:e0:42:ba:21:eb:e1:ce:96:54:85:58:
86:ac:85:a2:4e:70:4b:5e:0a:56:b2:d6:db:2f:cc:
50:35:97:0b:6b:c1:68:96:7e:33:dc:56:1b:f7:56:
33:17:ca:9d:86:9f:7e:e3:4d:fc:0e:dc:79:25:f5:
43:f7:21:cc:fe:a7:4d:b6:af:51:fc:69:d7:a9:7c:
fc:d2:2c:ea:64:db:a0:82:9c:65:c0:3e:cf:8d:dd:
a1:4d:0a:34:57:b7:17:50:0f:76:a0:8f:24:a4:fa:
ca:c0:1b:e3:f8:f6:86:9a:e8:37:29:b6:f7:08:e9:
79:63:81:07:0a:8b:35:55:8c:ec:ff:6d:e6:6e:16:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:16:07:1C:79:C2:AA:E3:E1:37:4E:8E:A5:25:85:51:B7:0E:F2
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:22:b3:4e:8f:f1:15:2b:84:1e:ad:2d:f7:93:2b:c9:7d:70:
40:c7:e4:12:a8:82:1a:2c:41:27:53:21:d5:74:09:e5:23:7e:
64:55:68:19:f1:bc:c8:df:5e:33:aa:12:06:8a:f3:a6:75:4d:
cf:ca:fa:57:97:9e:d0:71:a3:7d:68:3c:97:19:d0:43:0b:84:
32:03:66:e7:28:51:2a:6e:cb:63:9a:2a:51:fd:63:35:41:99:
3d:a7:b8:ac:33:1c:fa:a3:2b:7d:c3:a1:c4:fa:5e:dc:3e:2d:
63:cb:6f:c0:44:c8:23:ce:ab:b4:84:09:71:75:84:7e:42:6e:
a5:f2:7c:61:66:ff:b5:c5:f2:5b:bd:75:71:4c:1c:f0:86:fb:
19:19:73:4b:8d:ee:42:c1:0c:fb:ee:51:05:99:68:97:57:1b:
93:d1:00:84:6e:4f:1a:fd:41:8a:14:1a:41:5f:f5:32:18:3b:
c3:c3:40:5a:24:cf:9b:59:ed:e2:e0:f9:73:e1:8f:3a:1f:22:
32:15:f0:a6:2e:d2:93:8d:46:5f:14:f4:b3:37:b9:57:c2:65:
a8:f1:d9:d6:82:29:74:28:85:0c:df:78:0c:99:be:77:a9:97:
e1:32:91:f0:c2:bb:5a:6d:cc:db:f9:2e:a5:46:7f:30:6c:11:
58:9c:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:08:17 2026 by rpki-client