Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: +16ilw70mfyLUmxSU2nNzDd0Z5ACIvrOtDm8AMgL2/Y=
Subject key identifier: 8B:38:39:14:D7:07:9C:37:AE:A6:E6:D3:96:76:BB:7E:C8:75:87:25
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 01A03D15ECFAEC34890394EE018A3626741B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0EA1
Signing time: Wed 26 Aug 2026 08:00:41 +0000
Manifest this update: Wed 26 Aug 2026 08:00:41 +0000
Manifest next update: Thu 27 Aug 2026 08:00:41 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: dE0iL3Im0qAhUWtI/n0NtjWNvwF56xm45HSorXxBTzs=)
2: uOMEY1CfkmC36r0f9f4bgECHg2c.asa (hash: 8uoM6/FqhEm2cMD7oAzd60368BQDHqi/zjzPTgoPbLI=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:15:ec:fa:ec:34:89:03:94:ee:01:8a:36:26:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Aug 26 08:00:41 2026 GMT
Not After : Aug 27 08:00:41 2026 GMT
Subject: CN=8b383914d7079c37aea6e6d39676bb7ec8758725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:66:8c:69:93:8e:b5:89:65:c5:70:f9:a2:
89:33:e2:93:32:99:aa:71:7d:cb:94:51:a0:94:6f:
00:f2:bd:43:a2:dc:6b:e8:01:40:70:c4:4c:da:d4:
3c:82:8d:9f:ef:ea:3b:91:4a:87:5d:91:1e:7a:ac:
6e:6f:59:ff:ba:43:e8:b4:75:75:10:0e:8f:b9:0f:
63:e8:91:22:d9:e2:70:c2:e8:8a:1c:46:d4:f5:97:
1d:3e:a4:32:2d:ab:dc:e6:b2:a0:01:6a:2a:11:98:
b6:2d:6d:83:90:7e:c4:2c:6b:da:14:a3:5b:95:8d:
e4:a5:a0:c1:20:96:58:c2:7b:9e:8f:77:04:74:04:
ab:8e:39:64:09:a5:5f:41:ac:6b:05:d9:6a:b8:b4:
7f:ea:62:f0:6f:8f:3d:6d:86:b0:86:fa:84:2e:71:
38:e8:cc:66:43:f6:29:58:c0:31:14:86:18:cb:ff:
7e:74:4d:4e:bc:57:1e:5f:14:77:53:9c:5d:aa:9d:
36:35:26:12:32:97:a9:02:03:de:30:23:ac:a1:89:
00:f0:59:ea:f4:08:ac:3d:e4:ed:f4:84:30:94:a4:
18:d5:13:76:f6:f3:a6:eb:ee:38:ef:c2:93:0e:dc:
d8:c3:fc:99:c0:ca:f6:8d:93:34:80:16:a1:8a:30:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:39:14:D7:07:9C:37:AE:A6:E6:D3:96:76:BB:7E:C8:75:87:25
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:1f:c2:4b:b1:6d:27:4f:1f:ff:3a:5b:bf:1f:bf:4d:4c:
b4:8a:55:63:78:b0:93:eb:bb:48:e6:7a:5a:f4:e0:69:13:60:
64:e2:f2:4b:76:6a:49:10:17:52:98:fc:da:3f:cf:c8:ad:7e:
14:70:29:54:31:95:e1:69:21:9b:c6:db:d3:35:a0:b8:a7:ea:
47:09:5d:35:cc:06:8b:a6:d5:61:93:b1:cd:4c:51:5b:80:be:
ce:7a:99:fa:9c:c0:df:ba:13:eb:4c:71:60:34:02:4a:22:6a:
26:2b:84:4d:4b:50:1b:e1:b8:ff:22:9c:8d:a5:b1:d4:4a:41:
e7:86:d3:b9:6a:89:a3:d3:72:f0:bd:e8:95:1c:fe:e4:f2:08:
66:6d:7e:a1:c6:4c:5d:98:8c:2f:26:54:1d:4d:70:bc:ce:26:
d9:96:ca:73:c5:9e:a4:92:a2:9f:7b:c0:06:08:24:5b:ca:aa:
7c:ef:dc:6a:31:95:ba:61:8e:0a:5d:01:fe:91:46:8e:e5:2d:
b2:d9:ee:e5:76:5b:ea:4d:98:4d:e1:cc:b1:65:a9:7f:d0:75:
c4:15:66:01:21:93:f4:c4:2e:27:cc:11:46:17:fc:b6:a9:c1:
38:fc:70:13:be:20:2e:78:76:65:e8:07:2c:9e:d9:13:d6:0c:
35:e7:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:00:36 2026 by rpki-client