Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: D85iKh+cjXzN/iF5yi/Y2nQqOU+fG8+392bSsrp3Qkk=
Subject key identifier: D3:5D:BD:7B:94:B1:23:91:6E:40:AB:95:70:C3:1B:AD:5F:32:46:C1
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 01A08F0DDDD29A7CB7F7D7B097557D81934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 04FF
Signing time: Fri 11 Sep 2026 06:00:45 +0000
Manifest this update: Fri 11 Sep 2026 06:00:45 +0000
Manifest next update: Sat 12 Sep 2026 06:00:45 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: Wt4VHvT0CqeumPHKKtz+3DkfYaGmmAPXGFoQjPgrOEs=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0d:dd:d2:9a:7c:b7:f7:d7:b0:97:55:7d:81:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Sep 11 06:00:45 2026 GMT
Not After : Sep 12 06:00:45 2026 GMT
Subject: CN=d35dbd7b94b123916e40ab9570c31bad5f3246c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:bd:86:5e:90:fd:bb:86:ae:02:8c:0b:e5:
7f:b2:2e:1b:7a:22:56:b8:92:bd:7c:84:b6:7f:d5:
8a:3c:5f:d9:a4:2b:33:4c:e8:89:cd:ee:e0:e3:5d:
80:d7:bf:39:4e:02:50:13:69:70:fa:86:97:af:ab:
57:df:3f:5e:4f:1f:30:7d:f6:5c:cc:88:88:87:e8:
04:88:07:37:a8:24:13:0e:fa:ea:3f:1a:2b:42:9c:
96:20:69:bc:96:6f:0b:07:37:e6:b0:4d:f1:33:1d:
f9:00:9d:5c:6e:41:e2:9f:20:43:07:2b:25:ec:3a:
03:07:47:a5:29:22:41:4a:44:41:1d:de:6d:2d:2c:
6f:45:10:7b:85:ce:a2:35:32:5f:1a:a5:0f:49:1d:
88:37:5e:bb:4c:7a:6a:65:cf:1e:d6:fe:3c:fc:c6:
a0:d9:5f:96:18:29:4a:24:3f:f9:c8:bb:82:e5:3c:
a2:98:48:ee:81:d9:56:6d:0b:a0:e4:2a:04:95:12:
be:55:e4:de:fc:70:ee:d0:a8:1f:5f:55:9f:f7:c1:
f3:32:e0:39:05:08:de:86:c9:6b:6f:12:54:8f:d9:
8e:c1:e0:9a:ce:4e:54:67:56:c1:98:32:68:b8:f9:
75:df:3b:cb:bf:58:51:97:40:a8:c2:a1:77:99:67:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:BD:7B:94:B1:23:91:6E:40:AB:95:70:C3:1B:AD:5F:32:46:C1
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:3d:07:d1:4d:76:d3:5e:49:b3:60:22:a8:d6:bc:50:20:
eb:9b:c8:8f:4e:e5:9d:a7:30:26:78:9e:27:2a:ce:70:6d:4a:
cd:1a:e7:85:1e:c0:94:98:c7:41:9f:b7:dd:7e:5d:18:8b:cd:
66:78:88:d8:cf:97:71:8f:1d:77:1f:e1:54:7c:f6:92:d2:76:
c7:47:22:0c:b8:ed:ad:0a:5a:aa:37:bc:80:2c:b1:a9:58:c1:
18:35:8d:d6:4a:ec:8e:a2:37:58:60:c8:a6:9a:78:25:3e:65:
2b:ae:eb:6e:25:80:70:5c:cc:7e:20:38:11:52:79:3e:50:f9:
ce:60:77:05:d4:c4:72:88:3c:7a:6c:75:ab:f6:a3:b7:33:6d:
60:6e:c7:78:cc:12:0a:a6:60:1a:6f:a1:ec:bd:47:42:60:77:
8b:56:43:32:4b:28:48:93:10:46:20:75:f5:f9:a2:34:f9:22:
05:30:1a:6d:72:05:b0:c3:ae:fb:f5:e9:1c:29:10:85:60:96:
ea:36:d8:38:56:79:ff:4f:64:4f:dd:17:65:28:ac:28:1a:90:
5f:d0:bf:89:4d:b0:9a:47:68:e0:fa:0d:c7:b9:34:22:a3:ff:
6b:f7:36:68:2d:31:eb:67:3d:fc:7f:b3:6d:ed:82:0d:91:7d:
a0:0c:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:39:08 2026 by rpki-client