Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: 9RX8ZYiXPBKDL7AghWKh0+o/UCmhCqE99ZCAhqjy1fg=
Subject key identifier: 5D:62:2C:E1:6B:22:E5:07:44:BB:5D:8E:F9:21:75:4F:CF:B6:DF:6C
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 01A03E5FA62F1BA959DA650C09BE35468DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 058E
Signing time: Wed 26 Aug 2026 14:00:50 +0000
Manifest this update: Wed 26 Aug 2026 14:00:50 +0000
Manifest next update: Thu 27 Aug 2026 14:00:50 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: cLf73zW690a2cw5C9m/Kgfrzo/kZMQe+vPcpUH22MHE=)
2: _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (hash: /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=)
3: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:a6:2f:1b:a9:59:da:65:0c:09:be:35:46:8d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Aug 26 14:00:50 2026 GMT
Not After : Aug 27 14:00:50 2026 GMT
Subject: CN=5d622ce16b22e50744bb5d8ef921754fcfb6df6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:86:4c:23:a4:a3:f2:3c:b3:97:54:c8:cd:
a6:cb:24:bb:0a:4f:86:74:58:69:24:d6:e3:6e:3d:
27:08:f8:30:97:15:94:bb:23:a2:de:ef:a3:fe:25:
79:84:47:ec:a2:4a:91:1f:9e:ae:ef:40:3d:f7:71:
d1:d5:c3:d6:09:33:e9:03:89:4c:98:d3:ab:f3:57:
58:58:9c:28:29:3e:6d:92:e6:38:85:05:e7:a6:93:
05:42:05:79:cd:5e:32:91:4b:04:f4:a5:7a:05:e0:
74:39:ff:41:21:50:fb:47:f5:f1:d6:44:3f:b0:f0:
52:b6:e8:69:08:32:5d:54:fa:dd:82:88:71:64:2c:
46:66:0e:05:18:d0:7b:ac:8f:35:02:35:71:1c:55:
30:9e:d0:a6:7d:41:e4:f2:aa:1d:13:90:86:02:89:
30:02:38:b3:06:7f:90:3c:83:0b:f3:be:ce:43:e0:
df:47:7e:20:b2:8d:d0:1a:aa:5a:25:8f:f3:aa:95:
10:b2:d0:44:c8:10:16:30:0f:c7:31:29:7c:46:fa:
3c:1c:10:b5:48:51:79:8d:50:97:3c:c5:c4:cb:10:
61:1a:8c:3f:ce:4c:19:36:4b:7a:60:c2:0a:cf:86:
55:ae:4d:e0:d6:d2:1f:5a:dd:68:03:76:8e:0f:d9:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:62:2C:E1:6B:22:E5:07:44:BB:5D:8E:F9:21:75:4F:CF:B6:DF:6C
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4f:91:f2:4d:29:d2:79:9f:f9:5e:d4:3e:a6:e8:bf:d6:42:
98:89:e9:ed:03:29:41:56:27:a4:d8:09:c5:cc:2a:2e:e4:56:
4b:90:e9:da:d3:7f:13:5c:fe:01:c1:f5:a8:2a:fe:e3:30:89:
c6:b7:33:75:2b:f5:56:ac:f8:7c:59:7c:fe:51:b0:ff:7e:b4:
29:5f:3d:0e:6e:7b:c3:3e:10:c1:b4:06:30:ad:84:24:54:f1:
92:91:33:83:0f:4c:e8:0f:67:d9:ca:1e:a6:37:d3:c9:de:bf:
57:99:07:db:dd:9b:2e:20:8e:61:89:42:8b:e1:11:30:a5:33:
ae:d7:67:f8:ac:b0:db:15:65:7b:b0:a7:15:e3:c1:74:b2:57:
d1:fb:64:fd:a4:4d:d5:2e:18:a5:1b:af:bd:e6:a8:0e:93:54:
29:8e:a7:a3:6d:a5:6a:3c:f1:de:f5:93:fb:0c:8b:e8:31:d9:
2f:83:cd:f1:ed:7d:ba:58:75:af:28:f6:fb:d9:cd:c8:79:a5:
7e:51:59:df:07:8f:74:35:6f:cd:26:5e:8c:4c:54:4a:c1:64:
4e:77:c8:fe:29:16:c4:74:14:d8:6f:47:6d:56:d5:b1:7f:2a:
94:80:bf:ed:40:e5:33:c6:e0:3e:25:e3:39:91:c4:97:15:39:
be:f1:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:08:45 2026 by rpki-client