Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: Melg7w6fT+4/9XjVeVMLXXKWcr5F5wyiXoQRWQe6RmY=
Subject key identifier: 39:3A:5C:FF:FA:6B:C5:84:0A:81:16:51:25:EA:1A:27:51:34:67:E6
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 01A08189703CA863F1B5898C3B032D7C9156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 1A45
Signing time: Tue 08 Sep 2026 15:01:03 +0000
Manifest this update: Tue 08 Sep 2026 15:01:03 +0000
Manifest next update: Wed 09 Sep 2026 15:01:03 +0000
Files and hashes: 1: EH6JTkEj8PgxyVpnIlOKTmDpglo.roa (hash: WQgY4eaZUDC2F0vcIOyxYmpUq/jhsteUBr1nfEV2moQ=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: QtsOuv2OcAFS+roPfDyKEFG6xsbLRqu7iw6J14mGt1c=)
3: gJeLtFmgE3d1v3yCAL7TcwoLzPM.roa (hash: 6LX6LpEoCHsUbFXvp4i9hm/CKgBcR2pWyTCDwzESf5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:89:70:3c:a8:63:f1:b5:89:8c:3b:03:2d:7c:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Sep 8 15:01:03 2026 GMT
Not After : Sep 9 15:01:03 2026 GMT
Subject: CN=393a5cfffa6bc5840a81165125ea1a27513467e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:a4:c6:e9:cd:ea:f2:43:7d:77:61:99:de:
86:5e:2d:e8:ff:4a:d9:a4:5e:cd:94:3b:be:b9:bc:
ac:95:8e:f4:c5:51:d3:15:7e:3f:55:aa:d4:28:6a:
83:9b:15:75:54:d9:b9:3b:67:9f:c1:01:e4:f2:7d:
c6:4e:92:a4:76:d1:6e:16:51:f1:3d:f3:c3:e3:08:
8b:a5:69:2c:ea:2d:dc:e0:71:15:41:9e:d4:63:3b:
ca:d3:75:72:2b:42:4b:7b:f7:1e:89:b6:07:2e:0f:
5f:8c:a4:ef:7a:d0:2b:27:f1:e2:70:d2:c2:e2:b2:
8d:6d:e7:53:8d:aa:7b:84:c1:7c:7b:df:a7:3c:b2:
9b:8f:09:de:58:8d:c8:ed:83:37:bc:78:fe:07:d2:
17:02:d9:b8:0e:81:16:28:50:d7:23:59:73:2b:ab:
00:94:1c:4b:22:9e:84:13:c2:07:cc:75:a9:78:16:
89:88:13:68:08:7e:b8:4e:5a:2d:b8:d4:af:45:b5:
3e:91:41:47:81:71:c0:dc:43:b4:81:1c:d1:5a:47:
78:dd:98:db:41:9e:9f:92:28:3a:66:07:1c:c5:7f:
c9:c4:6e:d4:e3:0f:fe:bc:c4:97:65:e7:b3:14:57:
e4:1b:aa:e2:5c:16:84:4e:60:14:06:c8:aa:54:15:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:5C:FF:FA:6B:C5:84:0A:81:16:51:25:EA:1A:27:51:34:67:E6
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:25:96:1e:2f:08:b0:72:fb:35:4a:29:a6:df:d1:fe:28:
80:6f:c4:35:dc:00:68:0b:63:df:cf:9e:5f:73:30:0f:b9:c3:
c9:87:e9:60:05:61:4a:38:7e:e2:c3:fc:d7:ba:8c:d3:af:f9:
88:16:1e:11:2f:45:1b:67:0e:e5:84:e0:53:21:e7:16:c0:24:
7c:1c:57:e8:f1:8e:3c:22:69:e3:b5:f9:04:0b:5b:bd:d5:14:
d8:ad:31:7b:6c:bf:e4:14:12:22:45:c0:fb:fb:8f:03:37:4b:
ac:2c:1a:16:66:f8:9a:8f:bb:64:ee:19:92:c1:77:52:f9:fc:
f8:48:40:61:09:b6:f8:dc:8c:84:ae:11:70:a6:64:c7:fb:5e:
14:3a:1c:7c:90:08:78:3f:44:a6:f6:d7:32:5d:d8:cf:84:ee:
d4:64:c7:21:27:cb:37:4a:31:3a:d6:77:aa:99:6f:5c:fc:7b:
e2:52:b4:5e:74:ca:7a:42:87:5e:ba:07:15:ec:83:de:c7:da:
96:6e:c6:b0:cf:3b:c4:3a:ed:a7:10:20:91:f2:b7:80:df:d5:
9a:ce:c6:21:c0:bc:6b:f1:9a:cb:a9:48:9b:51:e5:a8:87:4e:
99:ef:39:aa:f2:b1:0b:35:2c:26:c2:85:14:15:00:3b:64:f8:
45:7f:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:36:14 2026 by rpki-client