Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: 5zgFxEgh+zWYqda4O2qkLB4E4YOStQokcLZyqF7apcI=
Subject key identifier: 43:49:9F:91:A5:4F:9D:76:B3:6D:03:F1:0D:79:7A:6F:61:EA:4E:A2
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019D19ED3F506137CCF741CC523078754974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0DD9
Signing time: Mon 23 Mar 2026 09:01:11 +0000
Manifest this update: Mon 23 Mar 2026 09:01:11 +0000
Manifest next update: Tue 24 Mar 2026 09:01:11 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: zrpU/sAYnfw5SXrOylqXLam7XBlz/w4aYAlnkHV0qbY=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:ed:3f:50:61:37:cc:f7:41:cc:52:30:78:75:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Mar 23 09:01:11 2026 GMT
Not After : Mar 24 09:01:11 2026 GMT
Subject: CN=43499f91a54f9d76b36d03f10d797a6f61ea4ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:6c:28:a6:b5:2c:97:bd:75:b3:f6:26:ea:
b9:0a:11:f3:4d:e8:84:11:a8:06:b6:52:93:fc:27:
cc:90:72:f0:d4:8b:a3:99:62:17:6f:c2:2f:e4:ed:
86:1a:6e:3c:c3:13:89:be:1a:8a:04:15:5d:3a:56:
c3:83:78:d9:c0:a0:08:43:2f:bd:8f:ee:99:07:4c:
c4:ed:3c:4d:67:a2:70:b8:5d:a5:01:0d:52:7f:f0:
9b:60:0b:69:55:1d:32:55:c2:ee:47:1f:46:41:86:
0f:e3:88:17:2f:b9:37:a1:df:de:17:03:71:bf:7c:
ef:d4:58:f8:ee:2f:85:36:2d:ae:28:88:0f:c2:b1:
2b:61:8d:d4:c0:65:02:0f:a5:60:d6:96:9a:15:cd:
f1:f3:78:7a:ae:ff:9d:f0:f0:68:14:2e:71:41:d3:
f8:5b:b1:82:52:a4:45:7c:6e:49:7d:fe:94:11:87:
26:32:c1:ca:e8:94:09:8c:5e:59:3d:2f:60:ec:56:
99:f2:48:28:28:fb:45:75:b6:24:69:d8:ae:16:bb:
da:48:ed:a7:56:8c:b8:7a:87:23:e5:dc:87:61:76:
c1:dc:53:21:c8:07:cc:69:b3:83:95:6d:55:b9:1e:
d5:24:09:ad:3f:4b:86:55:d6:35:9d:42:e3:18:55:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:9F:91:A5:4F:9D:76:B3:6D:03:F1:0D:79:7A:6F:61:EA:4E:A2
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:de:b0:6b:b8:d6:4c:9c:2e:2d:91:f9:d2:9f:be:f6:13:
a9:32:8d:c4:08:f3:f1:62:18:b9:15:10:a8:40:11:f0:71:cf:
60:ae:1a:98:bb:ad:ab:2a:ec:97:59:b5:cc:85:02:30:6d:54:
cb:ab:84:80:db:1a:de:c4:c4:cd:6c:7a:16:44:e2:49:6b:b8:
ef:1f:15:1f:ad:33:92:33:28:21:ae:05:4d:4a:0b:a1:43:18:
1a:f6:7d:37:98:27:0e:63:7f:d7:8c:42:d8:50:0f:2f:f5:49:
26:2b:6e:24:e5:8e:ff:13:ac:0b:ae:c1:52:f3:c3:cc:23:22:
db:9f:6d:de:91:35:1c:6b:a2:c7:60:af:f6:49:52:28:5b:da:
fb:06:b1:fd:20:3a:44:fd:de:39:32:88:b6:35:59:ae:1c:b5:
3a:16:1b:9a:41:10:3b:8a:2e:f4:d6:25:72:ce:c6:08:b8:9b:
85:e6:17:ac:1b:10:1b:89:84:a6:f6:17:11:9b:b5:8c:57:e6:
8d:be:e4:f8:f6:ce:0c:a7:09:6c:a6:b1:39:6f:04:f7:e0:b3:
b2:d1:91:9d:c0:c9:d6:49:37:1e:8a:7f:64:bc:83:b4:4b:80:
21:26:ad:c2:9a:bf:c1:76:36:3a:20:a6:fb:6c:7a:30:f1:c9:
26:09:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 15:49:28 2026 by rpki-client