Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.mft (raw, json)
Hash identifier: Rfg+MlgFIVcw0PUZi4yIalB1tUi9n7YTu5aiG+uekRw=
Subject key identifier: 3C:58:25:33:8A:67:AF:D8:80:1B:3A:0C:C0:97:0F:ED:AB:B5:4E:A7
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 019FA228F18A87B161DB31DBC5A985B86BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 06:00:19 +0000
Manifest this update: Mon 27 Jul 2026 06:00:19 +0000
Manifest next update: Tue 28 Jul 2026 06:00:19 +0000
Files and hashes: 1: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (hash: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=)
2: WvxA0kCVgUP3KaGOLDVOucQ_E68.crl (hash: a2ejJuKe1WNshuCLNlUM9CRtkYShur84IWMrUmUOKf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:f1:8a:87:b1:61:db:31:db:c5:a9:85:b8:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Jul 27 06:00:19 2026 GMT
Not After : Jul 28 06:00:19 2026 GMT
Subject: CN=3c5825338a67afd8801b3a0cc0970fedabb54ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:6d:74:4b:a1:2b:79:5c:c6:e2:eb:9f:5c:
24:41:42:54:26:a8:51:e2:ac:46:41:4a:a6:ea:5a:
7b:ae:45:c7:a6:5c:d4:57:dc:3d:b6:28:50:00:f2:
03:41:75:66:0a:04:da:39:46:e3:3a:64:c1:10:8f:
54:48:42:77:c9:89:58:75:53:76:7c:22:ac:f2:e9:
b8:ed:c9:2a:36:74:cc:ce:3b:5a:67:f7:3a:30:47:
fc:44:46:53:d5:40:29:11:5a:21:ce:16:5e:0d:bd:
cd:f4:5d:57:44:a0:8c:7c:a9:a9:fd:d9:c0:1c:55:
56:14:46:34:52:01:a3:0f:f5:35:e9:b3:d0:38:b9:
31:ce:10:99:53:a3:b0:37:11:b6:ab:c4:40:43:d8:
44:6e:25:42:35:3f:02:e1:ee:a4:24:7a:dc:a5:1a:
b9:a0:d1:e8:71:ea:0e:c9:78:7b:48:82:24:09:d5:
2c:58:50:56:58:ea:bd:ca:82:5a:50:a4:57:cc:04:
9e:29:f5:ae:9f:58:4a:37:0f:ed:2c:cd:3c:95:ac:
a6:d3:8e:d0:3b:3b:05:0a:af:cf:3c:9b:45:d4:9a:
8e:77:21:1c:4a:63:54:14:79:2b:90:f4:17:c0:56:
ad:8b:e3:71:0c:e3:ea:2b:62:d4:b1:4c:e6:8b:d7:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:58:25:33:8A:67:AF:D8:80:1B:3A:0C:C0:97:0F:ED:AB:B5:4E:A7
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:19:f5:e8:d2:75:94:a7:93:73:06:e4:74:5e:5a:7a:0e:7d:
ca:c9:50:f6:a1:87:88:0e:06:cd:84:02:34:9c:a2:02:7c:76:
d2:fe:0b:83:01:25:bd:7b:65:51:01:e4:44:0b:7c:7b:da:63:
e6:d2:df:86:98:81:c0:7a:a5:7e:48:27:6a:7d:0d:b0:f6:bb:
2a:68:ce:f8:76:45:15:70:9e:09:c5:92:f4:bb:be:b4:04:d9:
b5:bd:ba:19:48:8b:e3:0c:da:ac:23:34:1f:d3:bf:cc:20:78:
bf:b5:85:e3:c2:e2:e6:2a:fc:0e:02:fc:dc:fe:19:bd:11:d0:
7a:b3:a4:d9:85:3c:e2:0a:ca:2f:65:27:74:5a:69:a1:ab:c1:
b4:e5:b2:ea:ed:e7:80:68:9a:be:43:18:1c:d7:57:8c:71:6d:
7f:3d:45:c2:9a:8e:1c:73:37:10:68:a8:ce:26:53:ad:96:5f:
01:30:3d:da:e5:5f:b2:38:3d:5e:22:33:b3:14:cf:bb:93:08:
e4:88:c4:aa:25:aa:f4:36:51:5d:34:18:96:e8:d8:f9:d4:7d:
dd:47:a4:09:52:0f:8a:db:74:71:a2:ec:d9:fe:c6:d0:80:91:
18:1d:f1:0c:e1:78:3a:b5:dc:a9:7c:69:b0:72:fe:48:1b:2c:
f4:70:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:56:51 2026 by rpki-client