Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
File: WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft (raw, json)
Hash identifier: Re9P2ezKTct4+Fkgdi3oX1plxd2etviIQ0Uvg8LABic=
Subject key identifier: 64:95:34:B5:C4:23:06:18:BD:16:DE:0B:86:54:86:6A:AC:CA:F2:A9
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Certificate issuer: /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial: 01A08C7B4ECCE19B7E62415A9DE3F6C3352C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:26 +0000
Manifest this update: Thu 10 Sep 2026 18:01:26 +0000
Manifest next update: Fri 11 Sep 2026 18:01:26 +0000
Files and hashes: 1: HZsbbCQV184FMKGhunsSvE-BnQg.roa (hash: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=)
2: WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl (hash: rR+0hp+4wQ9x3sQQ2mFwjqfSQ6HmlJPsfdyYYFW62Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:4e:cc:e1:9b:7e:62:41:5a:9d:e3:f6:c3:35:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Validity
Not Before: Sep 10 18:01:26 2026 GMT
Not After : Sep 11 18:01:26 2026 GMT
Subject: CN=649534b5c4230618bd16de0b8654866aaccaf2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:84:03:0d:02:d3:23:36:f3:4c:04:03:d9:
a8:5e:c2:49:48:80:a0:56:4d:06:9e:c2:8b:07:4d:
47:5e:30:8d:f9:70:c2:9f:ba:34:79:6a:23:74:4d:
08:6f:d7:e4:6b:3c:14:db:2d:0b:c8:53:92:dd:1f:
7a:d9:30:52:52:57:6b:df:a5:1a:d6:5b:b6:e9:f2:
ab:25:3e:6f:e9:7a:a9:30:bc:5a:7a:fa:f5:13:83:
5d:0a:08:78:a9:8f:3b:5e:47:a6:25:57:fa:6e:9e:
8d:10:41:81:4c:20:fb:95:3f:6a:86:2d:a6:f7:32:
cb:3f:0b:03:1b:d7:9e:dc:97:23:11:b7:62:15:24:
4e:fc:f0:2b:37:7a:d3:44:60:0e:7b:91:28:0a:43:
d4:b8:d8:e3:2b:6d:ba:5c:f8:6c:42:9f:af:d8:68:
9f:c5:48:c0:2d:e3:c8:4d:6a:9e:0f:e7:8e:a6:ae:
81:cc:a8:e2:52:2d:22:39:4b:ec:81:7a:1b:1b:20:
53:3b:da:1b:60:c7:43:23:c1:7f:3f:5c:65:84:f2:
e8:e9:b7:11:d2:96:77:95:46:70:8d:82:57:28:95:
5b:da:ee:c3:5e:be:18:5d:8c:df:1c:86:15:c0:ab:
d2:38:e6:37:dd:65:26:f7:9e:d8:21:2c:77:e7:16:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:34:B5:C4:23:06:18:BD:16:DE:0B:86:54:86:6A:AC:CA:F2:A9
X509v3 Authority Key Identifier:
keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:2e:71:a0:50:12:1b:cc:82:17:64:62:2a:40:90:d5:97:
63:4c:71:22:4b:40:1c:78:17:5c:fa:cf:90:9a:54:11:60:bc:
d7:b7:5d:4c:6c:0c:58:4d:0e:22:aa:98:88:ae:99:86:55:16:
b5:3d:86:e0:33:4d:09:d1:d4:f7:7e:d7:81:16:1f:17:13:a9:
9c:a8:57:94:0b:69:31:86:4b:76:95:58:67:77:29:fa:64:a1:
89:68:d2:9e:16:b5:2e:2a:6e:14:62:c2:13:bb:06:fc:93:f8:
73:c6:13:f8:37:b4:3d:33:cd:8a:bd:65:a6:a5:52:5c:12:8e:
55:3a:49:93:0a:a9:b4:16:fc:8c:ad:e2:95:e1:39:74:83:8c:
5c:15:23:44:57:23:ed:62:68:0f:25:5b:ca:a7:74:f5:fc:71:
17:af:0a:78:10:42:51:91:c4:d7:61:ef:12:08:00:9f:3a:1a:
af:38:f1:a7:6f:c3:1d:cf:46:d1:5a:c4:1a:26:4e:f2:1a:0b:
42:a4:8c:15:f8:b2:a5:07:ea:f7:c5:bd:b8:f6:80:cb:0e:c0:
2a:10:41:4a:37:c4:f6:9a:ea:fa:56:ee:07:3c:c9:67:fd:ff:
35:0c:15:b0:8a:66:75:7c:c3:22:d8:56:f6:95:3b:dd:37:5d:
a8:45:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:16:41 2026 by rpki-client