Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: R2s/KRhzjytCstGLLkdGHk0Zp3Go77yKJxVRw7jsM90=
Subject key identifier: 86:AC:30:B6:C2:EE:B3:67:78:B7:B1:57:5D:98:AD:F8:DC:C0:25:85
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 01A001A67A639329C2D57A0A8A4719F149FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 02E4
Signing time: Fri 14 Aug 2026 19:01:22 +0000
Manifest this update: Fri 14 Aug 2026 19:01:22 +0000
Manifest next update: Sat 15 Aug 2026 19:01:22 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: l5s2uhpRYdHDXv0qckHvmmHSeD4sFAYKxvSfX7kx5kE=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:7a:63:93:29:c2:d5:7a:0a:8a:47:19:f1:49:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Aug 14 19:01:22 2026 GMT
Not After : Aug 15 19:01:22 2026 GMT
Subject: CN=86ac30b6c2eeb36778b7b1575d98adf8dcc02585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:b3:28:2b:cc:b7:1c:87:6d:92:eb:9a:dc:
44:cf:55:f4:ee:3b:dc:41:cc:f9:4c:79:b8:18:92:
46:a1:91:13:91:1e:c7:ca:86:18:e3:c3:10:8e:5e:
aa:c4:c7:25:56:2b:30:e2:7e:5b:f4:46:d0:85:0c:
64:03:f1:8f:b7:b4:7c:55:2c:95:ce:eb:b7:92:7d:
73:47:c0:e5:ae:a5:8e:32:06:1c:c5:09:3c:16:ed:
a5:2e:a8:25:fc:68:53:0c:02:e6:45:16:23:e4:61:
a6:df:bf:37:50:4f:95:7f:34:82:78:e6:76:a9:11:
ef:e3:a6:1e:6c:d5:15:26:08:28:5e:1b:22:30:68:
4f:75:c7:e9:ff:99:2a:74:11:84:ab:35:ea:a6:99:
63:69:c4:00:c5:b7:65:4e:d7:c3:55:82:c0:40:42:
c7:80:09:54:f2:78:1a:12:2b:96:c0:34:33:b1:79:
14:62:c2:5a:e2:94:c5:d0:f3:28:d8:23:9a:96:a3:
ab:7f:94:ca:dc:4b:17:a0:91:99:c9:30:bb:b6:4b:
ac:62:96:5c:67:79:50:e4:ea:be:47:d7:fc:b6:cb:
dc:a3:85:5f:28:4a:3d:3a:89:55:cb:8e:da:50:cd:
86:73:c3:c4:70:e5:01:78:f5:9c:b6:1b:f8:7d:90:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:30:B6:C2:EE:B3:67:78:B7:B1:57:5D:98:AD:F8:DC:C0:25:85
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c5:ba:e7:f0:16:99:d0:33:3d:e6:7b:52:eb:6e:78:60:2d:
fa:5f:0a:d8:92:56:ce:16:94:49:94:d9:ae:9f:f9:f3:84:5e:
30:ff:c5:54:98:ae:f7:d6:56:18:ca:9d:ec:cb:06:28:e2:2b:
04:e5:70:dd:40:80:78:69:b9:08:0d:0c:b6:cf:2a:67:e0:ac:
a8:d6:fa:a3:a8:0e:94:a0:29:cb:24:95:b4:86:e7:32:9b:db:
d3:2e:8d:0a:ad:06:1d:91:27:35:f1:de:f3:e2:d9:20:a4:2f:
68:75:15:fb:a6:42:a5:f1:aa:99:af:c7:2e:8b:b8:e5:19:3b:
15:07:dc:f4:ac:c8:7e:17:61:8e:e6:22:95:f6:26:99:a1:6b:
27:5f:b5:90:64:57:ce:2f:b7:df:f8:5b:7a:d8:3d:aa:3f:7f:
70:2a:96:a4:44:03:6f:4b:7e:6f:7d:ef:69:72:f3:dc:8c:8c:
83:f1:66:15:c6:1f:9e:41:2f:cb:ee:fc:38:02:52:51:ae:64:
9a:49:3f:a9:ec:74:c4:11:04:85:54:36:39:c7:75:6d:f7:fc:
f0:0a:f8:3b:0d:7c:43:f1:16:61:26:81:c9:23:ec:cd:dc:72:
02:45:1e:6b:19:85:4f:21:b5:9c:df:c2:30:5a:04:66:90:83:
7e:23:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:28 2026 by rpki-client