Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File: WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier: LtXBxdkDJDR5QIffrOGW2b+lhJdGSAhm87nQI33uCEY=
Subject key identifier: F3:BC:CF:9F:4A:5D:53:83:71:BB:D6:35:5F:C4:B8:76:5D:4C:01:F6
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer: /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial: 01A177DE899860CF5FF222AC1956FFCBBDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number: 0A20
Signing time: Mon 26 Oct 2026 11:00:35 +0000
Manifest this update: Mon 26 Oct 2026 11:00:35 +0000
Manifest next update: Tue 27 Oct 2026 11:00:35 +0000
Files and hashes: 1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: XaW3b/nF3FMvFU5RO2E5BBCYOPkKQUK2TjKiW6j3ckU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:89:98:60:cf:5f:f2:22:ac:19:56:ff:cb:bd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Validity
Not Before: Oct 26 11:00:35 2026 GMT
Not After : Oct 27 11:00:35 2026 GMT
Subject: CN=f3bccf9f4a5d538371bbd6355fc4b8765d4c01f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:8d:3c:34:f5:01:c0:19:ec:1b:2c:5b:9e:
fb:1b:39:2a:34:5b:fc:cc:3d:53:aa:92:2f:ed:f0:
cb:6c:44:46:3c:d9:be:bf:95:13:0f:1e:ea:69:c4:
24:ba:90:9d:2f:da:75:c8:c1:65:02:5f:33:ff:5a:
95:a4:c8:3f:cc:f9:f8:d4:f2:72:20:33:8c:8d:33:
5e:ca:a1:4b:33:4f:2d:0c:29:6d:d4:ff:b9:27:c5:
5b:eb:0e:dc:45:bf:87:ba:77:f5:40:af:60:31:70:
41:19:4c:41:33:25:5b:ca:a4:2f:da:f5:09:9e:99:
3a:3f:27:c2:2e:cf:45:34:f8:d6:46:e7:83:70:9b:
23:3b:7b:94:c7:9f:77:9a:70:e6:81:64:0f:f9:a1:
96:ac:5d:ad:88:a5:65:00:a6:4c:06:54:bd:a1:37:
a3:8c:6b:d3:5e:1a:98:ba:ed:21:8b:17:e2:5d:4d:
ef:e8:98:5c:f9:a6:ec:89:d9:1b:ec:d5:2b:24:ab:
2b:1c:ea:e8:f7:5f:54:3b:0a:81:0e:9d:be:72:65:
64:bb:7f:09:59:90:bf:bc:b8:cf:69:7c:72:d5:e3:
be:56:19:f1:f8:8b:5c:4f:ce:5f:d6:56:ce:d0:af:
93:5d:d2:13:92:85:ef:3a:27:ee:e2:e2:29:c9:40:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:CF:9F:4A:5D:53:83:71:BB:D6:35:5F:C4:B8:76:5D:4C:01:F6
X509v3 Authority Key Identifier:
keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:1d:aa:ba:b4:95:24:03:80:60:47:07:0b:e5:45:3d:54:
91:8d:6e:72:94:05:81:36:a2:19:25:2d:88:a9:a5:51:3a:9c:
b8:7a:03:bd:90:6d:6b:52:94:2d:46:a8:0a:47:b4:95:9c:dc:
8c:97:88:15:4f:ed:dd:42:82:1f:ec:0c:69:a8:9c:c7:84:cf:
1c:b3:1c:33:12:ff:ad:5e:c1:11:55:5c:53:01:b0:c7:f1:e4:
b8:19:63:d4:0d:94:2c:f8:7e:14:af:e3:c4:32:06:43:0c:e6:
1d:7d:8a:ed:99:bd:4d:b2:2e:1b:d7:46:26:98:77:fe:fb:e1:
8b:48:fc:80:80:75:16:0c:21:b9:bb:e0:0b:46:65:b3:9c:e6:
20:48:00:30:5d:3f:72:88:e0:46:86:9a:f8:98:9c:b8:0c:8c:
d0:a0:9b:e4:e9:e8:56:81:ee:d4:36:2b:df:d0:4f:c9:be:c1:
61:cc:83:8e:3e:b1:6d:41:60:f0:a5:ee:fd:d0:fc:70:11:5f:
41:e0:64:f7:23:ec:37:6d:08:c2:6f:97:5b:ef:a5:0e:fa:d2:
04:05:75:74:a7:da:ac:ef:7c:97:ee:fc:99:25:57:ba:45:6a:
a1:38:33:53:8b:98:44:70:91:ee:41:f4:ed:82:02:1b:17:88:
4e:63:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:06:27 2026 by rpki-client