Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File: W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier: OWsD+9YXBEGGkIu4Fot/zDKCPOqKjhDgw6EJvQH3s7A=
Subject key identifier: 72:7E:DF:90:D6:31:F6:CB:A5:C4:06:32:D6:D1:67:79:95:93:26:B5
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer: /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial: 019FF83615CEDA6F2AE5A7E4122B8192EF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number: 01AA
Signing time: Wed 12 Aug 2026 23:02:01 +0000
Manifest this update: Wed 12 Aug 2026 23:02:01 +0000
Manifest next update: Thu 13 Aug 2026 23:02:01 +0000
Files and hashes: 1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: m9vQU17JrzXmjVzpL6U4RtYyMPC8zFDpCnbR1t0ERnQ=)
2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:36:15:ce:da:6f:2a:e5:a7:e4:12:2b:81:92:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Validity
Not Before: Aug 12 23:02:01 2026 GMT
Not After : Aug 13 23:02:01 2026 GMT
Subject: CN=727edf90d631f6cba5c40632d6d16779959326b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:6c:cb:dd:60:47:6d:94:f0:1a:eb:a6:7e:
ad:0f:6c:d7:5e:a0:ee:29:9d:4b:fd:16:e0:49:e5:
aa:da:61:45:d9:a9:6d:6f:ca:8e:0a:69:34:ea:8d:
43:1e:49:a0:5c:0a:85:f7:4a:68:d3:25:59:85:99:
5a:f5:bc:56:e1:19:58:d7:f9:f0:85:e0:22:f7:b2:
7b:df:e7:82:00:01:cd:49:c1:7f:2d:e7:17:0a:d5:
fe:c5:ec:0d:ab:b3:dc:fe:e7:48:4c:e1:20:0d:72:
f3:b5:34:c6:66:d0:7c:f2:e8:e9:69:ca:2f:90:84:
18:aa:37:d8:a3:19:a8:da:f8:cc:c3:f1:89:ba:ad:
2f:79:b6:62:ce:8f:2a:57:35:1b:78:3b:a2:7d:56:
af:63:b8:13:98:d9:54:16:f7:56:11:d8:26:6f:13:
f1:ba:3d:b7:88:be:36:c4:80:08:5e:2b:7e:13:07:
18:f5:9d:c1:9b:77:15:b8:71:89:5b:b9:79:a1:17:
b8:09:33:bb:2f:a4:99:8a:da:40:27:a3:17:03:fb:
50:a3:d5:e9:54:d6:a4:38:97:c2:15:4f:31:66:8a:
8f:87:29:43:05:ad:2c:2e:ce:b6:ff:8a:36:65:2c:
c4:b8:78:44:97:e2:84:b3:7f:88:a3:94:cf:66:5a:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:DF:90:D6:31:F6:CB:A5:C4:06:32:D6:D1:67:79:95:93:26:B5
X509v3 Authority Key Identifier:
keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:44:fc:36:a5:85:3c:bb:fd:77:96:1f:b9:98:50:93:db:19:
41:6d:48:0e:9b:ce:f8:57:91:a3:0f:1c:53:04:b2:94:97:f0:
c8:85:42:13:11:d7:3e:44:9f:1e:78:18:a3:97:7e:e5:83:94:
84:e1:f6:c6:61:3b:7b:c5:87:db:7c:f1:52:54:fb:8c:04:b3:
75:e6:ac:34:95:b0:f7:11:5e:8a:0e:d3:8d:67:5b:d7:f8:42:
01:a5:fc:59:69:dd:ae:91:9f:79:9b:8f:ba:43:80:ac:86:66:
2e:e7:06:1f:43:e9:d2:dd:68:6d:fc:51:e4:e7:f9:1f:1f:e5:
71:bd:59:66:9b:f8:51:ff:da:04:53:61:06:29:09:9b:f5:49:
2e:b9:5a:64:65:b1:6d:09:0c:17:af:3b:6a:c9:63:2f:58:af:
c4:b8:78:33:1c:ea:1e:4b:d8:b3:b6:dc:cf:17:00:d1:16:c8:
c3:b7:08:91:a1:78:ca:53:10:9a:3f:9e:5e:55:f1:a9:99:cd:
b0:7d:d8:3c:35:c7:bd:80:af:6e:c6:2f:1a:e7:89:6d:fb:d9:
85:ba:74:62:f9:cc:05:06:0d:14:23:c5:ce:c3:98:6f:31:65:
91:a7:88:e3:d3:f2:28:e9:e7:27:64:36:50:56:a8:e4:78:60:
53:6c:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:16 2026 by rpki-client