Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: +4J8D461WYuRqlm/GJ3gun0QyVDupLdFrkq50DfYLyQ=
Subject key identifier: 8E:42:88:81:C1:F1:BA:CF:CC:AD:D9:BD:4E:DD:0C:41:37:58:2A:4D
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 01A117F40C2C72DC9D19EAE07718BE505349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0FE2
Signing time: Wed 07 Oct 2026 20:00:32 +0000
Manifest this update: Wed 07 Oct 2026 20:00:32 +0000
Manifest next update: Thu 08 Oct 2026 20:00:32 +0000
Files and hashes: 1: BDv1bnHvaLtWajfUeKcw3pIG_Ok.roa (hash: 69EUlopn2Prmu5cUFMolg4m3eko2E4egAqnT2et0qIE=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: i1zmSujhftigmdepPS/l3F3qcFmtRHCc8r+eMJ9xesY=)
3: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (hash: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=)
4: r_8bT90UjcZl-MvxK-5tmdznS1I.roa (hash: +kBFEQDnTe7FZB/GY9jWIpmDn/+p706IcANeKk3b/o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:0c:2c:72:dc:9d:19:ea:e0:77:18:be:50:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Oct 7 20:00:32 2026 GMT
Not After : Oct 8 20:00:32 2026 GMT
Subject: CN=8e428881c1f1bacfccadd9bd4edd0c4137582a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:51:1c:81:7a:38:bc:7a:42:11:dd:db:ed:24:
9f:71:59:31:20:09:fd:ad:00:0a:14:ec:51:df:3e:
70:16:26:93:3e:98:f8:5f:5a:9a:d7:ea:6e:2a:e7:
07:37:65:86:4c:bf:80:9a:89:1e:d1:a3:bf:68:c8:
76:13:a8:f4:62:d4:58:75:0c:25:6a:1b:a4:14:a7:
fb:69:e5:18:28:0f:e2:62:e9:15:18:75:7d:00:6e:
7e:a7:5e:43:04:55:73:d5:57:85:96:17:27:9f:f8:
78:1f:ad:bd:43:93:96:d7:4e:3d:37:60:78:dd:b2:
a0:e1:fc:08:be:cf:59:88:c8:30:6a:45:91:8d:c6:
7b:74:92:b5:ab:b3:79:21:19:45:53:77:ad:a1:7b:
20:24:85:fa:da:b7:35:78:31:2d:48:4d:aa:4c:8a:
3e:f4:45:6c:d8:45:54:97:7a:10:34:27:05:db:31:
46:ba:0e:6d:93:71:d4:f7:55:26:2e:d4:4d:74:ad:
8c:2f:56:28:0e:f7:c9:41:ca:e7:9a:76:2c:3d:d1:
db:b2:57:e6:0e:ad:ff:82:27:29:4f:37:55:54:70:
2c:71:e2:e6:a0:84:6e:5b:5e:41:39:33:5f:a2:28:
27:0b:f2:b7:8a:6c:82:e6:93:7a:87:48:68:53:d0:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:88:81:C1:F1:BA:CF:CC:AD:D9:BD:4E:DD:0C:41:37:58:2A:4D
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:b7:8b:9d:fc:b6:fe:2c:df:56:95:c8:e3:25:9f:0e:a2:
7b:92:60:e2:82:cc:f3:46:df:b3:7a:e3:4a:9f:3f:b4:12:16:
b0:18:c7:79:9c:2e:23:3e:c4:c6:e2:66:66:b9:a1:9a:18:8b:
ac:62:16:56:f6:e0:1f:41:0c:69:40:3c:3c:c3:8c:0f:d2:d9:
3f:3a:b2:c8:d0:89:ec:e3:33:1b:71:cf:af:8f:e8:81:93:18:
35:1a:02:33:43:67:34:ba:b2:c7:d2:c3:a4:2d:ff:b5:f3:be:
e0:39:70:67:ba:4a:06:a9:95:9e:5a:a7:a7:4a:29:bf:fa:0b:
31:79:35:ab:78:77:b3:b0:e9:c1:fa:23:34:ed:6f:66:d7:db:
00:c2:fc:d4:56:b6:45:58:ea:8a:47:de:a8:bf:e5:e3:0d:e4:
1a:a9:9d:cc:db:6a:2f:bf:f4:b3:75:fa:b2:83:42:8b:d6:30:
d1:60:e5:c7:aa:d3:c1:0d:07:97:46:5e:42:da:64:61:a0:42:
30:15:18:05:e0:f6:fb:65:e4:f2:ee:ea:f1:d6:60:fa:02:8e:
1c:05:b5:c7:dc:f7:81:5b:92:9c:bc:4c:fa:32:10:6c:bc:2d:
49:97:f8:58:bc:12:9a:21:15:d9:10:8e:db:7d:f8:ce:15:1c:
da:cc:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:44 2026 by rpki-client