Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: eYs8H8jor6O1JlSYiYcGyG4nV/lRy30idDMTu5YazPc=
Subject key identifier: 2A:30:B5:7F:10:1B:E1:DF:B0:9B:4E:74:95:25:83:DD:B4:94:73:33
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019F85D71A8F164D18E5187FD9AEE3A64A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 03D1
Signing time: Tue 21 Jul 2026 18:01:34 +0000
Manifest this update: Tue 21 Jul 2026 18:01:34 +0000
Manifest next update: Wed 22 Jul 2026 18:01:34 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: YtZVIEG3EaBEnnU+HWQqJDdwaPanABVqsaqP132sVUs=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:1a:8f:16:4d:18:e5:18:7f:d9:ae:e3:a6:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Jul 21 18:01:34 2026 GMT
Not After : Jul 22 18:01:34 2026 GMT
Subject: CN=2a30b57f101be1dfb09b4e74952583ddb4947333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:7b:b5:57:02:49:74:fe:65:93:04:79:b9:
6e:35:c4:19:2d:84:66:72:8b:e5:f4:83:2e:cf:a3:
66:e0:db:3b:1e:a4:cc:48:bc:7a:b6:3b:1b:b9:a4:
9a:1c:54:0c:f3:da:a0:42:bf:b7:f1:34:be:65:3b:
06:0c:36:01:16:40:d0:19:f5:8c:6e:56:b4:82:fa:
ac:b4:6d:15:d8:bc:ea:35:60:a4:d1:5c:78:ff:97:
75:50:8b:76:aa:bc:a7:c0:93:44:37:0f:af:e2:78:
5c:5f:08:b0:a3:66:68:4f:79:c5:5c:e0:b7:28:bd:
16:c5:72:bf:88:ee:65:02:79:d8:a2:8d:14:32:82:
31:b7:37:59:60:f1:3d:fb:da:f4:a6:ec:1b:9e:dc:
49:95:c2:30:e3:37:09:3b:3f:9b:32:57:f8:07:b0:
f8:a2:e8:ba:03:dc:13:38:98:90:80:6a:10:22:2d:
bf:e9:bf:eb:f9:df:da:2e:91:ca:4a:b1:66:67:11:
14:96:e8:45:2c:c1:0d:ce:e3:f6:ca:5d:75:68:b8:
9b:f5:77:49:e2:46:9e:2c:0c:29:c3:69:13:9c:ae:
56:c5:95:36:6e:1b:cf:64:c3:72:47:f2:b4:19:f4:
49:51:40:d4:25:b7:97:7f:d2:e0:8e:2f:0b:f8:e0:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:30:B5:7F:10:1B:E1:DF:B0:9B:4E:74:95:25:83:DD:B4:94:73:33
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:81:05:53:21:14:20:88:90:52:7a:da:00:a4:e3:99:5b:2c:
13:72:ea:a5:26:8c:2b:fa:64:7d:97:01:80:03:05:d3:6e:9d:
77:fa:af:43:f6:4e:40:6f:fd:7d:6c:90:79:50:3f:c4:0f:0a:
d0:34:21:90:07:7e:97:c1:86:e5:95:c6:ca:6e:e9:7b:9e:fc:
26:a1:a9:c3:6c:15:f2:16:e2:d3:02:ec:bf:12:a3:82:3d:14:
65:91:54:99:6b:9d:fe:28:3e:a9:9f:9a:85:ad:3f:28:95:b7:
f0:dc:c4:53:4c:39:7e:5f:00:d1:f4:99:52:cf:d2:e1:07:cf:
79:c8:fc:33:04:80:3f:03:fc:31:37:1a:c5:d7:f8:75:fd:ae:
14:16:5f:e2:04:cf:7b:94:34:75:01:01:4a:16:9e:96:da:75:
21:2a:2c:f1:6f:bc:89:4b:7b:30:9f:f6:9b:22:a6:ea:02:cc:
d3:62:12:3f:37:2d:e4:ca:be:50:eb:a3:f5:e9:7a:8a:bd:71:
9e:3a:17:56:0f:f5:d7:b2:57:61:bf:46:3a:58:16:a9:a8:87:
6e:ff:f9:a8:d7:a9:c4:9f:52:f9:51:ff:34:ab:e8:52:8b:6d:
76:9f:69:6a:b7:66:c7:7a:1a:eb:d9:d9:b9:cc:19:1f:0a:be:
52:48:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:47 2026 by rpki-client