Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.mft (raw, json)
Hash identifier: npApvhElIs94Nh6bymXGo1YSG100gB3X8bWPly7NB88=
Subject key identifier: 36:D4:DF:7A:98:CF:C1:0A:8B:98:94:1C:34:12:D6:11:AE:1B:14:4C
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 01A08BD5FB0AB731A90FE8A68CCD8A729D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
Manifest number: C3
Signing time: Thu 10 Sep 2026 15:00:51 +0000
Manifest this update: Thu 10 Sep 2026 15:00:51 +0000
Manifest next update: Fri 11 Sep 2026 15:00:51 +0000
Files and hashes: 1: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (hash: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=)
2: WvxA0kCVgUP3KaGOLDVOucQ_E68.crl (hash: qUOBcHiS5EXCc27XgI6ycJB2DWhHbKf29xXgYbpHWdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:fb:0a:b7:31:a9:0f:e8:a6:8c:cd:8a:72:9d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Sep 10 15:00:51 2026 GMT
Not After : Sep 11 15:00:51 2026 GMT
Subject: CN=36d4df7a98cfc10a8b98941c3412d611ae1b144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:79:e8:4c:c3:24:98:56:ad:10:ce:cd:0c:
39:bd:63:a7:e2:7a:b1:6b:45:3c:33:be:c6:50:03:
68:39:b6:59:7f:27:0d:19:15:f6:0e:2b:40:25:36:
a2:e4:9c:f8:f2:10:bf:ec:67:b9:18:68:69:3e:2d:
c9:43:ff:d6:e9:01:3c:a3:85:aa:1b:7f:c4:37:1d:
c5:4b:a1:5d:5b:52:b8:dd:27:23:82:a6:f7:fa:d9:
a0:41:41:c2:d0:17:50:6b:27:41:b3:e8:52:bd:83:
74:37:3e:10:3a:96:87:7c:1d:89:51:f3:93:d4:a3:
a1:88:fd:02:76:60:b7:12:9a:25:38:65:3e:83:3f:
83:75:e5:bf:5b:29:98:bc:f6:f1:01:f8:28:e8:0d:
5f:a3:cf:ea:ed:45:32:17:8c:2b:25:f1:b5:3d:17:
bb:8e:0f:10:16:b6:23:1c:c9:fc:f2:02:dc:62:ec:
c7:ca:b6:ae:33:fd:96:e9:7c:62:01:7e:0a:c6:d0:
b0:80:fd:bf:36:cc:1a:8b:55:ce:78:3b:d9:68:0d:
23:bc:43:e2:6e:fe:15:79:7a:25:4f:e2:77:ad:1b:
d6:dd:a9:57:9a:0a:fb:5b:a2:29:93:a6:2b:17:c0:
45:6f:41:33:bf:96:e3:18:77:5a:66:d9:5f:6a:72:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:DF:7A:98:CF:C1:0A:8B:98:94:1C:34:12:D6:11:AE:1B:14:4C
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c1:c2:75:a3:1f:ad:c3:29:b7:a0:a7:e2:14:ac:40:9e:80:
89:c7:8b:28:8e:11:e3:a3:a1:8e:29:2d:fb:f1:03:8c:17:2b:
e1:d3:4c:ea:57:01:af:12:a6:43:62:6e:e6:d1:fd:a8:3b:4f:
a2:e4:8e:5c:8a:fa:be:54:b5:0e:96:c0:f0:b4:46:c7:5b:6e:
fb:1a:35:e2:09:54:2b:09:7b:31:d0:2c:71:85:be:ed:a2:50:
71:c2:58:ff:8b:68:31:10:76:8e:d5:68:9b:28:ad:fd:91:b4:
37:77:8b:c2:37:78:72:c1:ae:eb:84:8c:67:1a:d9:a6:19:15:
10:f8:14:ec:35:eb:88:f1:c5:84:76:c3:db:61:12:50:ac:f0:
42:a9:63:b2:17:e8:0d:7f:d9:98:2e:1e:92:9a:9b:f4:04:63:
5f:31:8a:3d:00:93:14:f6:a8:fc:b8:53:47:95:d4:6d:7a:c0:
11:0e:8e:c0:ea:dd:bb:7c:40:de:73:57:4d:82:a2:de:33:48:
ae:22:bd:57:a1:12:fd:cc:f4:b0:72:c6:e0:dd:77:b3:78:ff:
09:6e:87:3e:8f:58:ab:12:cf:d1:36:ed:30:6c:f0:cd:f4:c7:
48:9f:ac:47:0b:48:5b:07:25:77:99:82:1e:0c:ef:ba:00:a0:
10:57:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:35 2026 by rpki-client