Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: gwCUcmjWyzXX73bX2qqm+TU85oLz6gRIPWn2zyN/45s=
Subject key identifier: B3:EE:07:36:94:6A:65:7C:EB:4B:5A:31:F8:7B:57:F2:58:FC:9C:79
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019FA2296EDBD624F95B649A5222951C487B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0BDF
Signing time: Mon 27 Jul 2026 06:00:52 +0000
Manifest this update: Mon 27 Jul 2026 06:00:52 +0000
Manifest next update: Tue 28 Jul 2026 06:00:52 +0000
Files and hashes: 1: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: 8hIKqqIMbQNl6rrtJTf5OCoMVZIEe1Re6D/Igpb06f0=)
3: wksYSx05kpG2_m1bA5uuiXnqKFc.roa (hash: k+uDuqacR/yRBvtSsf1I4NfjvCtYBj4iQtFjb6MXywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:6e:db:d6:24:f9:5b:64:9a:52:22:95:1c:48:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Jul 27 06:00:52 2026 GMT
Not After : Jul 28 06:00:52 2026 GMT
Subject: CN=b3ee0736946a657ceb4b5a31f87b57f258fc9c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:63:c9:a2:04:26:bf:24:01:04:77:e4:1e:
8e:cb:ab:eb:f1:66:8c:b0:25:1b:8e:e6:6c:44:c5:
ab:f7:43:5a:5e:a5:ab:43:bc:37:d8:5b:9c:0e:6b:
47:c0:9e:78:54:a0:ca:69:a7:4e:5b:1a:62:70:da:
fe:17:7d:92:94:e1:c2:a7:41:f5:5a:f0:39:8c:bc:
28:7d:78:df:54:fc:5c:a9:98:3b:df:84:17:e5:2e:
0b:13:45:c0:af:3e:b2:c4:35:38:45:33:6f:1f:c7:
29:27:0b:b2:4b:42:cf:da:a3:3f:fb:c7:d6:2d:80:
81:16:ad:f0:27:72:45:4f:fd:58:b9:fe:83:76:c3:
98:c4:7b:14:2d:44:51:54:e8:fe:a8:e8:c9:9d:00:
d5:09:a6:08:bf:42:13:3a:98:6b:a3:2c:c1:5b:fe:
88:1a:3d:96:a0:56:b9:92:a0:bc:26:9d:ec:4e:80:
47:f0:9f:20:82:23:1c:fa:d5:9b:da:b9:25:cd:23:
e9:e6:25:a9:b0:fc:62:6a:0f:e7:19:e0:e5:41:c4:
d0:1e:08:eb:22:6a:71:42:e6:8f:dd:b0:70:3d:2c:
18:92:4c:20:74:ed:90:79:76:d3:90:e6:81:bc:93:
ea:b8:27:f1:6a:b8:94:40:b0:b4:e2:79:60:ea:ea:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:07:36:94:6A:65:7C:EB:4B:5A:31:F8:7B:57:F2:58:FC:9C:79
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:cc:6f:60:43:c2:9e:46:f1:be:cd:3f:a4:23:79:c2:f8:
26:06:71:37:40:5d:74:18:9f:18:56:a8:a9:16:02:ca:14:5a:
9e:85:2b:da:7a:f8:79:a7:81:ec:b4:cb:28:dd:29:60:e4:e2:
e0:17:8d:1f:c4:af:fc:92:a1:56:5e:02:40:4c:7d:63:2d:80:
4e:f2:31:ad:31:26:af:63:b5:7c:cf:62:fc:31:cd:c0:df:0e:
a4:2a:b6:eb:81:a2:12:89:91:84:e7:7b:49:9d:54:19:c7:82:
65:df:ac:a2:8e:31:21:67:9b:65:ca:02:3a:ba:e6:b3:4c:29:
59:6c:28:6c:81:3d:ec:86:c8:78:87:5d:ea:a6:09:f7:bd:9e:
0e:ca:00:00:7f:51:79:ac:f2:a8:e0:f5:02:d3:54:88:75:25:
19:c5:97:41:46:14:a7:cc:3f:c9:e5:31:a9:c4:96:28:65:03:
7d:74:e8:80:0b:54:a8:6e:7e:38:17:1a:ee:31:a9:3a:1d:94:
58:31:d1:01:75:53:65:be:42:85:0a:b3:15:43:e5:0c:46:f1:
7d:ff:e6:f9:4d:24:bd:e9:52:75:1c:7e:26:9e:39:0e:4e:a1:
6c:0f:90:bf:2b:5e:24:34:f6:b8:72:7c:1f:81:e7:81:ed:08:
33:14:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:16:44 2026 by rpki-client