Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
File: WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft (raw, json)
Hash identifier: pL1HHIethdwuZVUnBKZTXIcxLFjY3WHBqwNItwbvWF4=
Subject key identifier: 35:50:FB:AA:E8:29:72:24:C3:38:9F:F2:67:8F:63:6B:67:8B:95:1A
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Certificate issuer: /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial: 01A178163F689894A0CB57B47D514F691599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:01:26 +0000
Manifest this update: Mon 26 Oct 2026 12:01:26 +0000
Manifest next update: Tue 27 Oct 2026 12:01:26 +0000
Files and hashes: 1: HZsbbCQV184FMKGhunsSvE-BnQg.roa (hash: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=)
2: WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl (hash: Lb1Qq/jKu/pTDmk4etTL1Mo8UUZbI8CHYRucCjllruU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:3f:68:98:94:a0:cb:57:b4:7d:51:4f:69:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Validity
Not Before: Oct 26 12:01:26 2026 GMT
Not After : Oct 27 12:01:26 2026 GMT
Subject: CN=3550fbaae8297224c3389ff2678f636b678b951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:8b:e5:f9:ad:ac:d8:24:77:f2:d2:27:51:
39:0e:30:27:4b:71:9a:69:3e:7a:2f:11:33:76:ae:
21:bc:9f:90:3e:e1:84:a5:40:e3:c2:8f:73:bb:93:
2a:17:6e:b8:5d:e4:be:94:87:4c:38:0e:2f:34:de:
6d:ed:2c:0a:09:5b:ee:c5:5e:27:cd:44:da:cd:a1:
e2:39:df:72:61:c3:87:8b:45:02:8b:db:55:bf:1d:
bf:31:d5:c4:cb:27:b4:dc:2f:70:d2:a3:f6:a5:31:
15:40:94:26:8d:da:fe:ea:da:2f:89:f2:1f:1f:10:
39:70:01:03:cc:6b:24:c6:77:13:b4:39:0c:d1:7a:
b4:88:cf:ab:6e:82:bd:2d:f0:a2:68:f6:18:41:18:
bb:60:9b:6c:0e:2b:95:03:87:51:2e:f5:94:49:f9:
43:08:0c:94:9f:eb:6c:93:5d:fc:55:19:18:3a:8e:
a8:73:4b:90:3f:71:10:a3:4b:1a:77:32:a2:83:82:
08:eb:49:e9:f8:cb:2c:f2:da:88:8b:7d:8a:5c:a1:
30:62:6f:3e:ea:fc:86:8d:6e:1a:0c:68:a9:c0:d2:
d3:82:d4:65:9f:b1:48:d3:6a:fb:f5:7a:b0:69:ad:
9b:a6:a9:89:c1:cc:7d:08:73:54:d2:67:8b:35:87:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:50:FB:AA:E8:29:72:24:C3:38:9F:F2:67:8F:63:6B:67:8B:95:1A
X509v3 Authority Key Identifier:
keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:c0:99:3e:76:40:7c:cd:7f:dc:dd:b5:3a:86:44:d6:00:
dd:32:25:43:70:e4:53:3a:6e:54:a2:d3:3c:eb:0e:78:25:c5:
41:86:0f:12:bb:60:ee:e1:1c:5a:61:26:8e:bd:f4:09:19:2f:
f7:1a:04:f0:fe:8a:6f:be:86:6d:c4:29:0b:e9:6d:b9:6b:04:
da:41:e1:19:9d:1e:7c:93:7b:ff:2b:19:94:7e:3b:37:3e:d3:
db:fd:31:cf:cf:92:ed:4a:9c:08:cf:4d:0a:f2:b9:8f:c8:80:
69:c1:29:67:80:52:90:fa:d1:d4:97:91:5f:7e:26:e3:62:83:
cd:04:f1:40:e6:4e:ba:11:c8:75:28:1e:a2:38:2d:9c:a5:d4:
c2:a0:46:e4:7c:87:1a:30:e0:23:aa:52:d7:53:2f:bb:7e:d7:
fc:3d:9d:d3:60:79:51:25:14:1b:73:99:f1:84:2b:64:19:36:
26:ac:55:6d:bf:98:41:19:e9:31:6c:ea:ba:fa:90:18:a9:b5:
8a:aa:a9:98:4e:5f:f0:e7:69:cd:c5:65:db:96:7a:04:a1:14:
61:82:36:41:75:56:56:4e:39:cd:67:cb:48:ec:da:bc:da:1a:
86:ac:a6:8d:03:e4:41:69:1c:3a:88:36:fa:0c:3b:8c:ea:cf:
b5:7e:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:53:29 2026 by rpki-client