Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: yLZsyjjM5l6prT2VdgE607QNDgNrj0e5CEZ1ICx2Yv0=
Subject key identifier: E6:C0:97:7E:2F:BC:E9:00:1C:65:7A:67:F2:4A:0C:2C:66:F2:7A:06
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019F916C8F65FA5ED2215EB51F3BFE6D41DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 03D7
Signing time: Fri 24 Jul 2026 00:00:38 +0000
Manifest this update: Fri 24 Jul 2026 00:00:38 +0000
Manifest next update: Sat 25 Jul 2026 00:00:38 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: 8mnJBFlMO2dmQ2V2zDK5qb8i3AG8bwo1+yiufD/V11M=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:8f:65:fa:5e:d2:21:5e:b5:1f:3b:fe:6d:41:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Jul 24 00:00:38 2026 GMT
Not After : Jul 25 00:00:38 2026 GMT
Subject: CN=e6c0977e2fbce9001c657a67f24a0c2c66f27a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:16:9a:e1:07:9f:0c:ac:7f:b1:15:45:75:
e2:ef:c5:dd:42:ed:6d:2f:59:53:07:e2:04:eb:0d:
2f:4b:b4:15:90:bb:f0:f6:da:e1:31:f7:83:85:61:
7a:2a:d3:ea:9b:02:40:b2:f6:c9:62:c1:38:4f:e5:
ce:ed:32:7f:28:8f:19:b3:33:62:72:8d:81:e0:fd:
91:14:4a:b1:13:b9:af:9a:17:f7:37:ca:99:f6:b9:
9b:bd:42:fd:24:6c:ce:47:4b:66:73:63:55:f5:c2:
0c:45:87:e3:dd:62:7b:d1:6c:70:d3:5d:34:45:68:
54:49:a7:9a:e8:4a:0a:c5:0d:ec:0e:d5:d0:8d:44:
60:6b:e2:ef:bc:5b:4a:9b:85:9b:30:c0:ee:ab:31:
90:28:b9:49:ed:1d:59:f9:5b:68:b5:e8:52:49:ee:
20:85:34:8d:66:38:10:8c:cf:80:29:70:7d:cc:15:
3a:ee:f6:fc:c0:94:7a:4f:24:8b:f7:3c:fa:92:c4:
60:b1:46:d7:52:04:52:3e:af:0e:48:d1:13:4b:3b:
ed:a6:5c:86:a9:e1:25:5b:e3:37:c3:11:84:ea:1b:
4c:1b:30:1e:4c:09:17:20:af:cb:07:86:16:5d:07:
ac:4a:64:2f:cd:5f:dc:bc:1f:0f:a3:69:e4:6a:77:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C0:97:7E:2F:BC:E9:00:1C:65:7A:67:F2:4A:0C:2C:66:F2:7A:06
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:2c:ab:d5:de:28:ba:e3:40:ae:c2:f0:6b:71:a6:8f:95:
93:57:7a:89:07:02:8e:e5:0b:e3:ab:32:f4:38:1a:aa:b5:17:
c8:0c:6c:09:f4:96:34:90:0a:f2:9a:0b:6b:58:b7:36:43:59:
63:e7:32:78:b1:5b:2c:50:19:dc:a7:8a:63:19:45:31:5c:0d:
f8:62:b1:d9:00:65:b3:04:4d:51:99:f9:2e:04:9a:58:b2:a8:
1a:6f:2f:ed:c4:e3:57:1b:0f:10:f6:91:c0:d1:84:8d:0b:dd:
1a:f0:d2:10:39:9c:34:12:2f:ce:45:48:03:82:c5:6c:61:81:
fa:7b:17:96:22:8c:da:ea:01:10:58:bd:9b:9b:dc:c5:d8:87:
78:6a:ef:8a:0e:d5:7b:d6:9a:2d:0d:dd:7a:75:43:a8:8d:14:
b0:a5:25:80:d0:65:ac:c9:89:0b:28:88:31:69:67:d9:98:b6:
ee:b9:da:c4:a9:6d:74:2b:ba:cf:32:97:b3:43:5c:79:fb:61:
73:36:a8:96:89:eb:db:b7:20:de:15:80:be:10:72:74:05:a8:
af:63:00:a4:34:e5:4f:f7:8f:e6:4a:30:46:e9:6d:a2:34:21:
bf:76:97:2b:da:86:15:23:0a:45:8d:5a:fc:66:c8:16:24:98:
14:d7:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:15 2026 by rpki-client