
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: Puag/T5ai8cr0lNHX6V7gQ2yOoGqYjV+tJCTckrc9c4=
Subject key identifier: 8F:9D:01:3A:9F:FF:12:10:53:60:A8:80:CB:69:9B:F8:14:E2:8C:B7
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019F333A0C5C2B450D5362C7DDC2785F6563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 13CC
Signing time: Sun 05 Jul 2026 17:01:10 +0000
Manifest this update: Sun 05 Jul 2026 17:01:10 +0000
Manifest next update: Mon 06 Jul 2026 17:01:10 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: fdTtGs4iVo/K91U/8esTu6IkSN7HWB/tctIlOBmDXwc=)
2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 15:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:3a:0c:5c:2b:45:0d:53:62:c7:dd:c2:78:5f:65:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jul 5 17:01:10 2026 GMT
Not After : Jul 6 17:01:10 2026 GMT
Subject: CN=8f9d013a9fff12105360a880cb699bf814e28cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:0e:e1:e6:e6:ec:a6:d2:91:ef:65:b0:30:
5f:1c:4e:f4:c6:e7:95:fa:cd:28:d4:0c:67:94:f3:
47:78:4f:28:25:45:56:83:a6:ed:79:d2:c4:eb:c4:
1d:da:e1:82:d7:de:be:28:cd:7c:2d:01:e2:11:f7:
11:ad:d2:91:19:dd:df:d9:ab:f6:93:a9:0a:35:91:
c3:1a:31:74:44:8d:ab:d9:cf:e2:10:6c:ba:b2:ae:
3a:64:16:1c:61:c4:8c:ce:42:8a:70:ba:5a:bd:5c:
01:a3:33:a4:ce:46:d6:45:b7:a9:f7:4f:1c:3f:2c:
6f:06:9c:b3:fa:c1:2b:12:b9:86:dd:1c:a4:98:2c:
f4:c9:aa:a0:4e:37:51:ee:8b:6f:db:85:07:f2:8e:
bb:5c:ab:2c:a1:39:c1:02:37:ef:57:b6:f6:91:7d:
19:fb:76:b4:a7:2b:b9:f6:ef:60:04:fe:20:df:2d:
eb:c3:7d:6a:fd:69:12:74:10:05:66:e3:20:2d:0c:
95:34:6c:80:2d:11:5e:37:78:ff:b7:69:67:6c:f9:
a7:43:f2:cc:ba:fe:a6:28:ab:7a:19:b5:24:bd:60:
62:0f:cb:79:51:9f:57:6e:37:82:13:41:99:1d:ae:
39:be:f3:c9:35:0a:b5:10:e0:04:48:fc:ca:b3:7f:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:01:3A:9F:FF:12:10:53:60:A8:80:CB:69:9B:F8:14:E2:8C:B7
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b9:4a:f4:39:78:d9:b2:cf:77:4e:e8:b5:9c:a4:96:3c:dc:
d7:5d:04:99:93:18:34:fd:16:28:22:6b:70:6f:e4:f8:ad:67:
00:a3:d8:65:bc:69:9b:81:8a:a9:3f:5c:66:4e:28:93:cd:40:
ef:72:43:27:d2:1a:fe:31:22:c7:49:f1:03:aa:a5:48:a2:5f:
aa:cb:6c:50:59:f4:77:f0:6b:4c:e6:c0:a6:a7:25:a4:19:f3:
63:24:dc:85:86:ae:a0:59:e3:90:8d:3e:58:a1:22:20:ab:85:
0a:ba:29:18:be:9e:66:56:71:e4:58:6c:06:6e:c0:d5:13:02:
c7:19:3f:d8:99:83:82:98:a0:95:00:20:da:6c:83:77:53:ff:
9b:b7:8e:63:79:fa:3c:4f:c2:b0:86:fc:e5:70:9c:75:7a:05:
12:49:d7:2d:53:59:34:c7:5d:cd:2e:6b:c6:9c:0b:7f:77:c0:
34:06:ad:3a:cb:a9:96:48:f6:7a:bf:7b:8d:8c:b9:f6:84:85:
ec:9c:68:b5:99:7d:88:dc:35:42:db:28:66:5a:9d:f8:03:cd:
04:87:69:04:f8:5f:be:ac:c8:d6:ba:d8:02:b4:9c:69:7d:44:
ab:47:cc:17:01:51:72:34:43:bc:12:63:c4:e3:c5:d6:40:c2:
d2:10:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:58:43 2026 by rpki-client