Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: UkuZT0dmIabmiNZXzVZyFwhuF75bjdFFjtyx5iHyDKQ=
Subject key identifier: 9F:A3:9B:A4:C5:E7:2C:E0:CA:46:E5:E9:4B:D8:37:BF:7E:DE:8B:6D
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 01A08AFA2D6156C128D1F048E067156058DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 07AB
Signing time: Thu 10 Sep 2026 11:00:46 +0000
Manifest this update: Thu 10 Sep 2026 11:00:46 +0000
Manifest next update: Fri 11 Sep 2026 11:00:46 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: dai+imRzwR4Ck8pMoxVYCthMiHoM/onUNK4Ueu3oXCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:2d:61:56:c1:28:d1:f0:48:e0:67:15:60:58:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Sep 10 11:00:46 2026 GMT
Not After : Sep 11 11:00:46 2026 GMT
Subject: CN=9fa39ba4c5e72ce0ca46e5e94bd837bf7ede8b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:7c:df:66:6c:26:0c:88:16:5a:14:d4:e4:
b8:b2:db:c3:37:f4:5a:47:1d:21:e4:cc:6d:f7:4a:
17:a0:e0:22:9b:91:6a:6d:c5:9d:1d:33:ad:f8:6a:
f5:85:fc:0a:cd:f3:57:e3:d2:d0:e2:ef:e7:90:29:
d7:97:cb:76:4f:08:4b:aa:8e:01:f0:68:dc:68:2a:
e3:c1:2e:16:cf:78:0c:7a:13:3a:07:ea:30:34:3a:
71:59:0c:fa:7c:b1:14:82:65:17:f3:ce:af:19:d7:
96:e6:13:f1:c5:55:d4:4f:46:5f:46:fb:a6:3f:e9:
49:8e:7b:1d:ff:fc:38:56:4c:db:20:a0:bf:03:80:
21:ef:ba:82:54:9a:c6:a9:98:81:dc:a3:a8:42:ea:
5a:a5:b5:7a:6f:d8:61:16:07:98:38:44:75:50:18:
c0:85:6e:0c:99:92:1b:07:22:0f:e7:01:f8:cb:b1:
1f:ce:da:45:9e:8f:c1:0b:71:e5:3c:09:5f:b6:b8:
78:42:4d:1b:78:61:53:e2:92:76:c6:bf:3e:2f:cc:
c8:e7:78:25:42:11:cb:7b:a4:e6:78:c1:06:95:79:
6c:c9:cf:5a:a6:de:6a:fb:35:02:6d:a0:07:63:99:
6a:0b:00:b0:8b:1f:c2:79:ea:93:cb:5e:71:1a:84:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:9B:A4:C5:E7:2C:E0:CA:46:E5:E9:4B:D8:37:BF:7E:DE:8B:6D
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b8:3f:32:83:e4:8d:e0:e3:c5:3b:36:0f:38:60:59:2f:27:
80:ec:7d:13:b0:a0:51:d7:c3:92:86:03:4e:44:7d:60:af:3f:
c6:87:ee:68:1e:d9:ce:34:40:3e:1f:b1:69:a6:e5:8d:40:20:
82:c9:e9:8b:30:57:a8:dc:4e:b5:1c:9d:ce:53:01:86:89:c3:
87:3f:fe:22:fa:55:f3:10:9f:91:92:7f:4d:82:00:42:d9:30:
44:ce:5c:ad:5f:f8:b8:07:0d:f2:fd:57:2c:4d:14:78:02:54:
b8:ef:f8:ec:5b:64:55:2b:ea:0a:68:47:f1:ea:97:c1:52:80:
4f:57:a2:e7:b6:7e:eb:fa:f4:83:63:bc:8f:c1:93:8d:2c:49:
3c:f3:60:b4:c4:63:3e:6b:52:4e:12:ef:61:bc:ed:32:5b:a7:
b8:67:6a:d4:e1:98:b4:fb:b3:97:c4:1a:56:11:40:be:0a:57:
1b:6e:4c:01:58:c7:81:28:ba:6d:82:49:d1:28:95:66:27:fb:
e0:85:08:cc:cf:e3:b5:db:43:87:c6:9b:1e:77:b2:47:20:6f:
2f:13:3a:3b:ad:01:cb:dd:97:55:e5:d2:fd:79:af:0e:90:cd:
2b:37:72:d5:7d:ac:6d:33:71:67:bb:d7:a5:da:bf:8e:d7:54:
62:79:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:32 2026 by rpki-client