Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File: W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier: UH02FTQ4DhEs7Nt2WbqzHCGPz0o8f+kwJN2Mm1UVgqg=
Subject key identifier: 86:EF:72:45:DC:C2:EA:B0:DC:1B:2D:28:BF:2F:B4:7A:20:99:15:AB
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer: /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial: 019EFD27088F277AAE47856DE01E376EC222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number: 0128
Signing time: Thu 25 Jun 2026 05:00:54 +0000
Manifest this update: Thu 25 Jun 2026 05:00:54 +0000
Manifest next update: Fri 26 Jun 2026 05:00:54 +0000
Files and hashes: 1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: vghVAWtz0gS62Kzcc0TqsIFfEGFFJGV2x8E9UGnbXDc=)
2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:08:8f:27:7a:ae:47:85:6d:e0:1e:37:6e:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Validity
Not Before: Jun 25 05:00:54 2026 GMT
Not After : Jun 26 05:00:54 2026 GMT
Subject: CN=86ef7245dcc2eab0dc1b2d28bf2fb47a209915ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:7d:ea:87:b2:5a:1a:e7:94:be:fd:8e:78:
ee:95:31:37:31:18:06:50:64:e4:19:f0:56:8c:39:
53:a5:aa:75:4e:43:3f:14:19:5e:56:85:27:f5:e9:
f4:4a:c2:17:4c:b5:51:e3:0b:50:51:10:1c:5f:53:
81:4c:a9:1d:c6:37:11:f2:d0:87:ce:aa:59:2f:f4:
5b:a1:de:a5:3d:e4:30:00:cf:6b:b2:56:d5:d0:c3:
7f:6c:f6:4a:e2:d0:42:0a:90:d9:8b:8b:c5:91:46:
2e:d9:21:7b:ff:e8:57:e6:50:35:06:0b:ba:58:bf:
29:59:28:41:14:de:7c:98:0b:6b:0c:40:53:fd:01:
15:75:d3:87:6c:da:12:f4:8e:9d:7c:fa:e2:1b:be:
62:09:1f:5a:c4:f1:8e:b0:ff:8a:48:7f:2f:a8:e0:
78:75:bd:b0:3e:d0:d4:eb:cd:bb:03:f5:da:28:a5:
e3:c9:d1:22:1f:01:6f:b0:f3:6b:16:75:58:f4:db:
8a:cb:b0:63:c0:6b:ff:4e:c2:d3:0b:ac:64:ab:ed:
be:d2:c3:ed:c8:32:56:80:c1:dc:f4:51:24:fe:a1:
f7:55:9d:a9:b7:9c:37:fe:e6:e0:dc:38:1f:d1:97:
62:1c:27:7f:ee:a8:01:e6:93:3f:62:b2:5a:a8:d2:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:72:45:DC:C2:EA:B0:DC:1B:2D:28:BF:2F:B4:7A:20:99:15:AB
X509v3 Authority Key Identifier:
keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:54:29:60:da:75:f0:45:11:d2:7e:60:09:f5:ac:8f:c4:98:
d7:57:b0:e8:96:67:5f:6e:78:ed:b6:84:e1:33:c9:d5:bc:13:
f3:5a:34:8c:2f:52:2d:e8:04:6d:40:34:5a:6f:54:f3:ac:60:
72:68:aa:1b:a1:66:ec:4f:93:18:7a:b3:c9:e8:62:17:c6:f0:
7b:e4:6d:0e:c6:d7:c1:57:a9:ff:af:b7:6c:df:78:14:0b:40:
b8:da:b8:61:8e:3e:aa:36:43:e6:9c:7c:3d:b2:57:97:73:41:
08:6c:d6:5b:d9:77:6d:d6:a8:37:8c:69:04:d1:31:ce:d5:17:
e1:e0:e0:a3:66:0a:9a:6d:30:c3:98:78:7f:d6:67:ea:17:40:
63:89:42:21:22:e6:a6:17:07:b6:a0:8d:83:f7:67:b1:c4:db:
81:c2:a8:72:0a:ef:be:29:f1:42:8e:01:81:79:aa:f6:34:04:
da:02:f6:44:fc:56:12:bd:26:31:65:b8:6e:71:d5:8b:0d:aa:
2d:0c:d1:cd:9f:39:c8:99:60:10:af:81:83:99:3b:55:0b:d8:
6f:7a:e5:1a:8b:a7:f1:42:62:12:33:d8:cf:0a:56:a3:44:59:
94:f7:34:5e:ac:ee:45:28:21:a3:f1:35:35:60:ff:45:57:a7:
dc:03:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:22 2026 by rpki-client