Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: NbJlMBL+i84moDm7AHqV8nBoGgGdPj/Hm2DPuiKul7o=
Subject key identifier: 5D:C0:EB:CB:00:6E:67:69:32:FB:7C:5E:9D:02:43:98:F8:8A:0E:24
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 01A0016F37C03EC9666C19A9B83FE9CBF232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:01:01 +0000
Manifest this update: Fri 14 Aug 2026 18:01:01 +0000
Manifest next update: Sat 15 Aug 2026 18:01:01 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: edf1b7JZRJlRbgsbFJcnezIs6DAo7j3mohUgLsRlUgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:37:c0:3e:c9:66:6c:19:a9:b8:3f:e9:cb:f2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Aug 14 18:01:01 2026 GMT
Not After : Aug 15 18:01:01 2026 GMT
Subject: CN=5dc0ebcb006e676932fb7c5e9d024398f88a0e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:45:45:0b:eb:4d:46:47:a0:08:c2:b3:d4:
53:50:cd:18:45:2e:36:1f:01:a4:cb:ce:81:8e:d2:
23:7c:1a:9a:8e:a6:29:a7:a8:ec:79:c5:b1:1c:33:
cd:b0:84:0f:cc:ef:6e:41:7c:4c:65:bb:de:6d:c6:
83:5f:05:5e:55:ab:19:b5:f8:92:2f:6b:53:8b:fd:
51:e6:23:67:46:d4:49:84:8c:fb:eb:9a:fc:97:eb:
a1:b3:e6:7a:eb:8a:cd:1f:b9:22:42:8e:86:83:0a:
c3:ec:f7:4f:f0:32:0a:d9:64:3a:2c:83:cb:be:5c:
1d:6a:bf:07:53:82:d4:5c:f3:e8:94:a3:92:20:ab:
77:19:2f:b8:9e:5c:5a:3e:f9:35:10:56:fb:e8:f5:
84:4a:f8:74:66:e5:27:45:9e:96:07:6f:10:d4:b0:
f5:68:d4:e5:8d:d3:92:69:52:ea:f9:77:d9:2d:13:
ef:f1:56:4a:03:23:e7:7a:4f:e7:d6:1d:9f:61:6c:
57:b7:28:0b:35:79:40:6c:6e:74:5c:2b:2c:48:81:
12:67:ec:98:59:6f:69:79:8b:a5:8a:02:4e:ba:d6:
ba:b4:cf:ad:56:1d:e7:97:e6:37:38:01:2c:0e:18:
0e:20:29:64:e7:a5:91:97:16:ee:dc:c6:d2:17:ed:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:EB:CB:00:6E:67:69:32:FB:7C:5E:9D:02:43:98:F8:8A:0E:24
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:53:73:61:9a:cf:85:c9:56:c8:c1:63:c4:42:4a:16:16:3a:
f2:a5:8f:1d:a7:e5:da:62:81:d7:c0:e3:cf:35:93:76:d8:cf:
d4:d6:d9:9d:7e:d5:08:63:9b:b9:8c:f6:8e:56:01:b4:38:5f:
e8:52:7d:9a:37:db:a2:ba:c6:ac:f9:e6:b8:16:74:02:90:fc:
ad:9e:06:fd:ae:36:93:51:b8:69:87:95:16:e7:c8:aa:1c:e3:
f7:0a:3f:59:2f:6c:22:43:ab:f7:b3:6a:9e:e4:66:a8:e4:95:
14:52:16:23:2c:3f:47:cc:8b:75:55:ad:9a:7d:3b:3b:c1:5a:
c9:b7:61:9c:e2:35:c4:86:c9:72:fe:9d:0b:9d:4a:73:05:6c:
92:c3:13:d2:af:53:2e:d5:c4:91:19:e5:b1:52:4a:e1:a9:be:
f9:b7:98:9e:49:fa:f6:42:0c:e8:8b:2d:d7:12:8d:91:ad:43:
64:40:df:a9:a0:e0:79:8f:9b:3d:4e:b4:29:38:3d:16:0c:fe:
30:34:86:d9:90:24:98:6f:89:b1:a1:c9:ae:13:9b:bd:2f:6c:
5d:d1:c4:3d:a5:7a:33:a1:9d:9a:a2:c6:ac:ee:a3:2e:17:7f:
ec:68:c1:d6:94:20:6f:14:3d:8f:36:0c:80:51:eb:fd:c0:bc:
7f:c8:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:11 2026 by rpki-client