Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: gJYmZWa2LM4XC3SAuTE84SULFJW4AycLZqQzRg6V1qc=
Subject key identifier: D9:4E:EE:9C:17:98:2E:C4:23:8F:75:61:43:E1:77:25:40:2B:EB:0D
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 01A1065BFFBA6352BB38D4EB38ED3E0A666B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 05F1
Signing time: Sun 04 Oct 2026 10:00:54 +0000
Manifest this update: Sun 04 Oct 2026 10:00:54 +0000
Manifest next update: Mon 05 Oct 2026 10:00:54 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: EJNu9WfX1ElPMKpjJodcKVtC55L51OJzsSfT0I3GcME=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5b:ff:ba:63:52:bb:38:d4:eb:38:ed:3e:0a:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Oct 4 10:00:54 2026 GMT
Not After : Oct 5 10:00:54 2026 GMT
Subject: CN=d94eee9c17982ec4238f756143e17725402beb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:05:4b:a7:26:95:db:93:85:68:69:08:ae:
c1:e3:19:1e:62:33:98:f7:c2:3f:95:96:14:71:92:
77:49:53:43:2e:b0:09:7e:7b:2a:31:43:de:e9:98:
9a:99:12:b9:cd:9b:f5:6a:91:69:a4:32:49:a0:4f:
41:b3:a9:b6:6d:fb:9f:dc:f7:19:32:3a:45:10:a3:
76:2e:35:4e:85:00:ed:75:43:24:cb:1c:55:c8:cf:
3e:bb:af:1f:63:c0:93:ce:68:13:82:af:ef:95:b3:
31:29:99:00:1b:ca:de:44:5c:a0:eb:de:db:b7:21:
1b:37:88:01:70:74:c2:48:60:03:dc:92:a0:1a:3e:
c1:a7:3a:88:b5:96:eb:ae:00:78:ee:2c:fe:c4:e9:
98:71:3f:c8:66:08:55:06:0f:aa:f7:64:a7:f8:51:
b1:8e:5b:8b:6f:94:ab:d5:87:ed:ed:a9:96:60:d5:
56:e4:a6:0f:58:d0:0a:b0:71:88:8b:fe:49:7c:25:
bf:a1:22:87:da:66:5a:c7:fa:1f:9f:e2:34:d3:30:
4c:a1:52:e7:3f:ef:d4:b5:72:b8:0e:59:9c:f9:36:
83:a4:c7:3f:33:52:aa:91:d8:02:6a:43:68:63:2c:
71:79:3b:08:ce:6d:44:5d:23:07:69:0c:40:ed:5c:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:EE:9C:17:98:2E:C4:23:8F:75:61:43:E1:77:25:40:2B:EB:0D
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b9:e0:bd:18:b7:1f:41:33:94:1b:c5:9d:58:8f:62:c6:53:
60:d1:d1:92:bb:00:09:b3:8b:29:b5:49:a5:05:3b:45:53:b1:
c3:c7:da:9d:9b:51:7b:78:6c:df:8a:bb:00:28:f2:2b:36:da:
1a:76:24:5f:2a:1d:d5:c1:63:f7:2a:70:26:82:35:27:7d:7a:
21:23:84:07:8c:e8:3d:15:f5:b3:70:3f:27:f9:56:14:71:4d:
57:73:c9:61:c8:4c:30:12:0e:90:ad:00:06:71:08:b0:ba:64:
4c:fe:01:4f:ca:75:65:b6:23:5d:5d:04:f3:f8:f5:10:17:f4:
31:45:21:50:60:49:8d:e8:2b:d1:44:a5:52:1b:af:45:ae:03:
48:15:73:dd:53:e3:b1:cf:58:d5:bf:22:ae:ee:c3:d2:5f:61:
19:d1:5a:43:cf:da:f5:fd:2a:0b:04:ce:4c:cb:67:d7:3d:47:
e8:8f:7f:e5:ef:ec:ef:5e:72:f0:e2:60:5e:50:8f:e9:31:fa:
0c:3d:4b:46:1d:67:b4:05:89:40:9e:e1:ca:65:69:75:c5:8c:
57:57:77:27:6d:c8:c2:55:04:94:fc:7c:20:ee:60:44:6a:01:
fc:94:ca:8c:4e:9f:1a:97:52:c4:60:58:a1:57:9c:95:fb:0c:
73:23:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:20:04 2026 by rpki-client