Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: 3jfbdM2WGdh2wzcUY/gfKeIRte1Dt8IjG3dakpsfcdI=
Subject key identifier: 3C:48:DD:B9:FE:A4:62:52:89:AC:80:49:F5:E7:7F:1B:4D:A6:57:D1
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 01A16E0090619802C898C6C7344749164113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0B8D
Signing time: Sat 24 Oct 2026 13:01:33 +0000
Manifest this update: Sat 24 Oct 2026 13:01:33 +0000
Manifest next update: Sun 25 Oct 2026 13:01:33 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: F6loalZfrawhkgah2kwNEk66k3q7QyrXn3PkMWtQavQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:00:90:61:98:02:c8:98:c6:c7:34:47:49:16:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Oct 24 13:01:33 2026 GMT
Not After : Oct 25 13:01:33 2026 GMT
Subject: CN=3c48ddb9fea4625289ac8049f5e77f1b4da657d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:28:e7:81:76:f4:2c:d7:10:66:81:32:a4:
e4:23:ce:34:9e:0f:b1:38:65:da:dd:34:f9:91:08:
f6:af:55:06:d5:77:6c:ec:ef:73:17:7c:d0:fc:46:
dc:4a:a4:96:20:43:90:4b:37:a0:8d:29:1f:e7:a5:
4a:3b:6b:43:64:fe:23:e7:da:b4:28:be:63:eb:8c:
bb:d2:bf:f5:d2:7d:06:69:fa:ab:20:16:08:90:96:
66:4b:43:40:dd:c6:6e:b3:fd:a2:e9:cc:54:37:61:
e3:e8:bb:3e:d9:5a:93:0f:21:9e:73:87:e6:a3:78:
d1:3b:e2:63:70:02:d5:b7:19:cd:63:04:0e:42:5c:
e1:56:65:1f:24:ac:7d:a1:6b:05:e8:c0:3c:8b:a6:
d4:30:9d:f4:21:bb:f0:45:68:62:44:7d:57:d7:f3:
76:06:d4:4b:81:6a:7e:aa:3c:54:77:e2:26:16:68:
f1:0a:d4:65:fe:44:f2:3a:9f:d0:4c:48:da:24:48:
9d:c7:c9:d3:c1:b4:2d:83:f7:da:b3:9e:4f:9c:fd:
f0:60:4a:d2:84:5e:99:fa:f7:14:c0:e0:7d:1c:70:
8d:f7:5e:36:0f:df:22:c3:d1:bd:0a:ec:99:f3:fa:
31:a4:b9:d8:46:e0:1b:51:f3:ee:93:b7:05:1b:c6:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:DD:B9:FE:A4:62:52:89:AC:80:49:F5:E7:7F:1B:4D:A6:57:D1
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:73:56:da:7a:ba:9b:2d:19:87:67:ac:f8:1b:36:04:a7:
6e:ff:82:1e:b2:e7:af:d1:3d:a4:34:81:66:08:bf:05:ef:e3:
b4:df:9a:53:0b:a7:8d:11:42:d0:12:f5:84:fc:41:f4:a1:c7:
b3:1d:20:1f:2d:83:a4:9a:6f:87:ab:4c:b2:91:9b:f3:04:1a:
91:08:90:05:85:d2:0e:60:de:59:d0:89:2f:cb:1a:24:46:81:
82:b9:3f:4b:9c:8c:0e:8b:a3:85:d6:73:d0:e9:23:85:f6:92:
29:cc:9f:82:ea:44:ea:4d:5d:4a:f9:47:4b:c8:a4:3c:f2:4f:
91:f2:b3:53:4b:8f:af:3d:ea:f5:eb:a3:f1:ff:26:f5:a7:c7:
db:bf:12:66:3d:8a:93:cb:64:44:a8:e3:8d:6b:5d:70:ea:4e:
8d:0b:2b:24:06:29:34:09:1b:73:21:e0:cd:7e:dc:57:91:30:
f3:d4:4a:9c:55:4a:38:9a:3d:64:db:ff:6c:fa:73:57:ad:4b:
5b:3b:74:29:60:d1:d1:6d:21:be:f2:c3:c7:e3:0c:f2:50:24:
83:9e:e6:d1:17:4c:73:76:48:75:56:41:d5:d8:f2:a4:4a:c3:
14:ec:19:44:ac:e7:2f:4f:8b:1a:3f:bb:c6:03:08:e5:5e:ea:
8a:12:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:07:05 2026 by rpki-client