Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: NZAm3Onn9E+ptobiOBi0Ea0dN34cAJ9Ehve+2Owdwso=
Subject key identifier: 86:55:0E:79:CD:C6:74:7F:E2:37:B8:17:37:12:E7:63:FF:43:EB:31
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 01A08C43F44613881FB5C701AB2FAEE68764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 19B8
Signing time: Thu 10 Sep 2026 17:00:58 +0000
Manifest this update: Thu 10 Sep 2026 17:00:58 +0000
Manifest next update: Fri 11 Sep 2026 17:00:58 +0000
Files and hashes: 1: HHKPepyJHyyJmRpg5BdW85bx7Rg.roa (hash: leRatzJU0XPm4R4WH9CK8QwowVlDLVOizoSP6t+BnUo=)
2: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
3: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: V4bnYeEpIrGm4DMhztBgm9pi9Lc9eogxB0uyxY9jGeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:f4:46:13:88:1f:b5:c7:01:ab:2f:ae:e6:87:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Sep 10 17:00:58 2026 GMT
Not After : Sep 11 17:00:58 2026 GMT
Subject: CN=86550e79cdc6747fe237b8173712e763ff43eb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:31:fe:82:b4:11:ca:c4:99:b0:ca:17:c2:
70:bd:07:1b:bb:e0:ed:93:76:7c:92:46:bf:f9:22:
d7:1d:7b:6e:2d:dd:db:bc:b1:8d:e2:18:43:f3:cb:
07:85:94:7b:82:2f:75:cb:98:86:73:cb:48:ac:3c:
6d:03:5f:cd:88:20:33:74:a8:42:2e:62:8c:fb:af:
23:3d:ed:59:49:f3:6f:55:66:91:5d:df:fe:b6:9c:
98:82:e9:2b:eb:32:b2:08:d0:c7:0c:f1:1c:50:40:
db:c9:9d:49:7e:42:a8:d4:c7:d7:65:0a:50:97:e5:
1a:4a:0f:8b:e1:9d:9d:c7:9a:95:a2:d8:89:49:55:
b8:98:cc:fc:99:3a:84:d3:e3:3a:f2:1f:94:9a:8f:
db:f5:85:fe:7a:57:2e:91:e9:d8:7b:52:5e:95:3b:
fc:2f:61:64:75:d8:bf:3e:92:ec:9b:39:97:92:35:
ee:7d:48:4b:12:51:ce:a6:54:e9:01:89:4c:09:31:
a6:87:bb:6f:13:85:35:22:15:02:b8:ab:89:8e:c1:
52:c1:56:52:03:69:85:22:2d:6f:1d:cb:df:8f:e9:
da:58:37:a9:e9:44:ad:2d:ac:8b:a4:27:62:8f:76:
19:43:3d:9b:9d:60:5a:81:d8:03:a8:4e:a1:f0:18:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:0E:79:CD:C6:74:7F:E2:37:B8:17:37:12:E7:63:FF:43:EB:31
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:94:2e:a7:3d:9c:ef:ce:7f:53:01:0d:95:04:59:4d:6a:
ce:0a:9e:13:f6:8a:03:2f:ad:e8:0c:ab:2b:db:87:09:65:5b:
c1:cd:60:5d:88:d3:b3:8a:ff:02:1a:f3:ec:6f:1c:6a:50:bc:
95:16:d3:f9:5a:b9:d2:8c:b9:ee:df:08:ef:20:cc:50:8d:86:
86:33:55:11:d3:3e:16:7d:1a:40:78:bc:bf:b2:19:2e:1f:1f:
0d:ab:32:73:8c:7e:bc:fe:e9:98:18:99:7d:c9:64:78:2f:a5:
cb:dc:d7:ac:04:9f:02:c9:9d:f6:ee:5e:be:63:d7:ee:65:5c:
65:99:44:d3:a9:d2:b7:cb:cb:5a:5d:52:16:b6:51:3b:b2:25:
70:96:25:04:00:63:49:e1:4b:61:40:30:27:29:66:73:0d:3b:
e5:56:13:ba:7d:18:09:7b:c9:23:9c:29:a0:c9:1c:36:c7:a7:
d9:8d:06:35:dd:51:91:89:76:0f:85:19:91:1b:d5:fe:04:cf:
37:12:b8:e8:87:52:17:40:84:85:a4:d8:7f:b3:6f:77:b7:ff:
ef:3c:c0:4b:6f:cd:eb:50:92:17:4c:24:9c:4d:3e:a5:a9:26:
b9:bc:ce:a9:8d:a7:7c:65:50:dc:64:fd:f6:4b:b8:ab:bf:0f:
47:a7:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:08 2026 by rpki-client