Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: APSXhrcndLrAu8XLv4yQS+VzpKmlr6Jf+nCbQU1Tppw=
Subject key identifier: 73:5D:AD:CA:93:47:B3:86:9D:9C:B9:22:DD:E2:98:D0:16:92:E9:DA
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 019F122EAC9F41D9FF1C2B46AFB786ECFCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 0268
Signing time: Mon 29 Jun 2026 07:01:16 +0000
Manifest this update: Mon 29 Jun 2026 07:01:16 +0000
Manifest next update: Tue 30 Jun 2026 07:01:16 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: +yU9Vsi9nkGgGegHAW7lf+mvxubKb4j/8niC3MVqzbU=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:ac:9f:41:d9:ff:1c:2b:46:af:b7:86:ec:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Jun 29 07:01:16 2026 GMT
Not After : Jun 30 07:01:16 2026 GMT
Subject: CN=735dadca9347b3869d9cb922dde298d01692e9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:31:c8:5d:bf:00:74:dd:2f:14:b6:d9:32:
f1:ff:f1:39:86:0f:c8:26:e3:bb:7b:1b:17:95:92:
f7:82:7c:ec:81:ef:61:7e:2d:ef:34:63:0d:23:f0:
c4:46:85:4f:da:5b:34:ed:bb:b5:3e:52:00:2b:9f:
7a:ea:7d:9b:23:de:53:01:61:69:f9:5b:bc:32:3e:
e5:68:e1:30:10:29:2a:ce:76:2d:08:18:c5:4e:39:
8e:60:2a:ca:77:12:aa:7d:f1:cd:7e:e8:a6:07:08:
0c:9f:4c:95:51:d7:40:7b:f2:ad:85:33:0f:5e:a5:
60:f8:fd:a2:0d:9c:20:68:26:07:37:24:25:4f:13:
4b:43:c7:aa:35:11:cb:9e:b4:3b:89:61:6e:ed:b5:
bd:5d:cd:a2:ff:da:f6:c5:f9:64:a4:6d:1a:42:46:
76:46:6b:73:fe:b1:9c:e0:25:b1:07:01:92:c7:5d:
a9:2f:75:b5:b2:10:4e:55:7f:82:22:39:d5:a1:96:
53:58:bc:16:ec:0d:25:82:fa:a0:4c:7d:1a:9a:69:
6f:67:d8:15:09:10:f3:77:31:77:89:20:93:e7:fb:
b9:13:6d:ae:ac:9b:cf:e2:3b:79:5e:db:8f:2e:4c:
25:06:27:1b:d7:43:2e:93:36:a3:03:0f:16:73:09:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:AD:CA:93:47:B3:86:9D:9C:B9:22:DD:E2:98:D0:16:92:E9:DA
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ad:11:4f:f7:6e:e6:cf:b8:85:4d:dc:70:0a:ea:c6:f1:92:
02:cd:da:58:12:e0:a6:35:b9:80:df:3e:15:bd:4d:2e:14:62:
e3:9a:0f:3a:80:5a:93:18:3f:07:2c:f5:56:e7:47:f1:10:41:
1a:76:a7:37:9f:e6:ae:f5:6e:eb:42:77:25:34:de:54:28:ff:
4b:f9:55:26:d3:2b:bc:38:98:87:fe:8c:72:64:74:82:7b:3b:
b0:a8:c6:6f:ce:e4:3f:2b:87:0f:a4:f4:18:75:24:14:44:24:
08:00:7c:0d:78:7b:f8:2b:d1:69:cb:3f:4f:33:71:5f:43:8c:
69:db:e2:49:ca:cd:ad:b4:57:47:4f:4f:81:a1:c6:f3:7c:59:
17:a7:17:3a:31:46:17:fa:88:76:a4:f9:0a:47:85:b9:8e:d3:
81:8b:cf:f5:70:f2:99:42:29:19:1b:83:f7:33:60:29:cc:2d:
6a:b0:84:bc:70:fc:3b:43:40:fc:c0:bf:7c:19:aa:0f:f3:51:
a9:8a:6b:3e:78:73:28:7d:4d:cf:2c:8a:97:6a:fe:79:83:a9:
f4:d8:3e:ea:73:f7:bf:64:49:35:0d:9e:98:ac:32:d0:e8:47:
dd:18:2a:95:5d:36:65:b7:5c:a2:e0:b1:72:52:15:80:53:38:
81:ea:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:24 2026 by rpki-client