
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
File: WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft (raw, json)
Hash identifier: lnU6OgZKP5qz6RFeLiCWvhnKSuaubfhXZjFVl0fCy3s=
Subject key identifier: FF:95:01:AA:5E:7A:71:47:F7:65:65:0A:88:BB:FC:D9:6D:B9:28:15
Authority key identifier: 5A:F5:47:B7:70:6F:CD:B1:8A:F5:A2:EF:C7:87:41:6D:B0:8A:1E:BD
Certificate issuer: /CN=5af547b7706fcdb18af5a2efc787416db08a1ebd
Certificate serial: 01A0E1AB5BBA2523EE76660FBF1E0DF2AB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
Manifest number: 0111
Signing time: Sun 27 Sep 2026 07:01:38 +0000
Manifest this update: Sun 27 Sep 2026 07:01:38 +0000
Manifest next update: Mon 28 Sep 2026 07:01:38 +0000
Files and hashes: 1: WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl (hash: NVWKke26cIZQOKBV2IvisIlvLyv0VIKl8wf0hyb3Fh4=)
2: jq5WfSeP2pDPT2hiFBZeXrNo_gA.roa (hash: 8UIQ/f3+ilI0mGQboCjy2Gm2Iv4nHmZ9Nb2yvR4gYaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:5b:ba:25:23:ee:76:66:0f:bf:1e:0d:f2:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af547b7706fcdb18af5a2efc787416db08a1ebd
Validity
Not Before: Sep 27 07:01:38 2026 GMT
Not After : Sep 28 07:01:38 2026 GMT
Subject: CN=ff9501aa5e7a7147f765650a88bbfcd96db92815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:93:b7:30:2b:59:1a:e1:36:44:c8:b8:fe:
68:90:0e:e7:dd:ef:46:f2:27:72:4e:ef:cd:a8:1f:
2c:5e:31:f3:4c:6f:68:aa:a4:e2:e9:3c:0d:df:99:
b3:9a:e5:ed:f1:4d:79:59:e3:bb:2b:14:b5:61:a2:
1c:68:7e:ac:6d:8c:e1:d8:34:9e:b3:57:58:fd:50:
7c:d8:aa:62:cd:8e:ca:8d:3a:d2:32:6e:7b:0e:9c:
03:94:17:79:55:6a:45:1c:63:b3:c3:a0:bb:f8:fc:
df:b2:b4:44:0e:df:fb:65:83:52:04:5e:7d:8d:3a:
9b:8e:88:ec:65:65:82:20:5f:fc:93:8d:57:96:91:
ea:70:e1:4e:37:64:ed:2b:38:ff:ee:25:07:00:06:
c1:55:af:0f:92:87:ad:2d:5d:0a:88:98:3b:63:5a:
e0:a1:78:67:dc:2e:9e:ae:b1:ba:2b:77:37:95:42:
1e:ab:e2:97:5d:37:cb:32:46:60:17:cc:bd:85:1c:
36:7f:84:f6:cb:98:07:4e:1e:2e:51:80:72:3f:09:
e6:43:14:b1:b9:04:ab:50:ba:6b:88:1d:1a:d1:06:
eb:bb:52:a9:04:82:43:85:12:94:64:1b:a2:72:8e:
6d:9d:e6:78:80:6e:18:e9:59:74:c7:31:f9:58:cb:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:01:AA:5E:7A:71:47:F7:65:65:0A:88:BB:FC:D9:6D:B9:28:15
X509v3 Authority Key Identifier:
keyid:5A:F5:47:B7:70:6F:CD:B1:8A:F5:A2:EF:C7:87:41:6D:B0:8A:1E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvVHt3BvzbGK9aLvx4dBbbCKHr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f75cf3-1f7f-43f9-a5be-bc5cb963de5d/1/WvVHt3BvzbGK9aLvx4dBbbCKHr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:3d:6c:a7:e3:e3:a2:ad:d2:4f:32:be:63:04:d6:8b:d9:
a3:2d:65:eb:47:90:e2:f9:ce:2a:54:bc:0f:c0:1b:2d:4c:f2:
30:85:78:d5:90:e6:5b:52:87:d1:ab:6f:7c:5a:7a:3a:6f:00:
d9:de:9f:02:99:cf:b5:15:34:8d:34:48:26:bd:5b:69:dc:ac:
1a:9b:28:d1:8b:42:94:8d:74:24:1c:f5:6d:4f:f4:5c:72:c9:
8c:9e:cf:45:a2:d9:22:d7:39:71:b1:20:d8:16:dc:6e:08:19:
00:8c:23:02:d9:86:53:99:18:9f:ef:9d:24:2f:54:c2:85:61:
dc:8e:df:f0:a7:0a:c4:31:2c:57:7b:f3:ab:96:29:d5:4a:1a:
62:6d:45:ba:e6:1c:c0:da:f7:d3:e0:f4:53:8e:97:ed:4b:36:
25:ed:a6:41:7e:8f:69:de:84:83:9b:8d:2c:0d:21:dd:fc:72:
46:0e:ea:61:1d:bf:83:ab:79:d8:87:68:ea:73:d0:94:bd:9e:
36:49:3f:57:f7:e2:06:16:87:65:47:f3:78:e5:79:85:1d:fb:
cc:67:63:85:91:99:4c:ef:ca:f5:3f:f4:a4:aa:86:d9:3a:8d:
7b:1a:39:c0:40:02:bb:ca:61:f4:42:a6:17:fe:f2:d8:df:21:
c0:75:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:57 2026 by rpki-client