Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
File: WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft (raw, json)
Hash identifier: 1152fff9W0WVJG1UEstb7vYBB+nJPghYLhHUvwQqUvU=
Subject key identifier: 9E:C8:E7:87:20:DB:44:35:A2:77:4B:50:78:2F:DE:F5:E5:7D:49:FF
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 01A1762754B0B94123C117A0FBF6AB2F526D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:00:51 +0000
Manifest this update: Mon 26 Oct 2026 03:00:51 +0000
Manifest next update: Tue 27 Oct 2026 03:00:51 +0000
Files and hashes: 1: PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa (hash: jz0AWqz5TrCrCZOL8S5rk8ZUwf9/3LQqBKen3hyQ+JU=)
2: WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl (hash: Kaayt/6s8S7mATAKRywCLCLPj72gVrPiU/9SJAW8kz0=)
3: vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa (hash: kvS6Muny5DxKn7c0ClorB/3JIoMx7iQSiPe4vnhIL2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:54:b0:b9:41:23:c1:17:a0:fb:f6:ab:2f:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Oct 26 03:00:51 2026 GMT
Not After : Oct 27 03:00:51 2026 GMT
Subject: CN=9ec8e78720db4435a2774b50782fdef5e57d49ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:ac:c0:8f:6b:e2:10:95:93:bf:47:6b:80:
7b:2b:a4:e6:0f:9d:63:58:39:db:2a:89:4c:11:92:
15:ab:d6:6c:1f:b4:24:40:7e:85:65:17:9b:0c:ed:
ae:6c:00:c6:1b:71:3e:2e:dc:f1:a9:ab:b0:8c:9c:
ba:40:db:11:57:66:eb:61:4a:3f:ee:ef:d0:ed:fb:
e0:8c:cd:bf:63:54:4b:fd:ec:e4:d7:fb:62:8f:fa:
1b:dc:ca:fe:8f:0d:12:07:7a:e1:e0:eb:00:32:04:
34:10:67:75:5d:97:e7:67:90:e5:2d:4c:a9:11:50:
93:80:6c:f0:d8:72:f6:90:5e:ad:f9:5a:9e:5d:36:
fe:cf:c1:ab:94:e2:17:c9:79:77:91:80:69:da:2a:
65:67:68:60:6f:e0:15:c2:b3:f6:b3:bb:14:f2:1e:
41:49:cd:00:c3:3f:79:27:18:60:2b:2d:42:88:18:
30:bd:37:d9:9b:e2:6d:f0:53:50:b4:86:82:42:4b:
f7:52:cc:0a:ef:c5:b3:bf:7a:03:aa:be:3b:c1:38:
b9:be:63:65:8f:2b:22:a2:16:35:ad:78:4e:55:35:
f8:75:f7:ed:eb:c6:ee:4e:27:6c:65:e6:9b:ef:69:
bc:71:bf:38:7f:1c:19:1e:42:ba:ea:14:81:8e:ea:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:E7:87:20:DB:44:35:A2:77:4B:50:78:2F:DE:F5:E5:7D:49:FF
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:63:5a:1c:0a:2e:20:0e:0e:4e:91:8b:9e:b5:8a:85:7f:73:
22:c0:81:b2:06:b1:51:2d:57:df:46:6d:7f:5d:e3:88:15:bb:
1f:c7:e2:25:0a:1a:a2:4d:40:65:b1:41:26:fc:c2:8f:78:b8:
61:8d:0d:d5:81:68:e6:f3:aa:5c:17:ba:56:7b:5b:5d:a6:23:
a7:c3:07:94:d3:81:4c:f3:a4:2d:8e:a2:da:62:5d:50:6d:6e:
a4:4c:6d:ee:cb:8d:a0:86:6f:c6:ba:ed:c0:9d:3b:a8:27:06:
76:0d:e4:03:98:34:e0:a4:94:49:7a:84:d7:2d:79:15:dc:8d:
a7:cb:8b:25:a7:81:72:ce:e2:c5:fa:aa:5a:f5:3c:69:54:9f:
a0:e5:cf:69:e2:0f:25:ab:cf:ce:2f:50:84:18:21:b8:46:f6:
12:d5:d6:d6:ad:00:0d:16:3c:ed:14:fc:c6:13:98:f7:35:60:
da:36:37:e6:89:b2:7a:7c:2e:eb:01:35:86:cc:a2:2d:02:c8:
cb:f7:a4:79:58:70:fb:39:46:c2:4d:72:f3:c6:b5:51:0b:6d:
39:98:81:78:32:9c:cf:bf:a1:b2:1b:1f:96:0b:cd:a8:c2:b5:
95:32:55:45:d6:06:4d:95:62:bf:e1:f5:77:81:c7:8f:cb:8d:
46:f4:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:03:00 2026 by rpki-client