Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
File: WlCmmsOzTfXy2LiMe0EEMux3c7s.mft (raw, json)
Hash identifier: X9V2H7KSAzI+ekuzbJtMAgNAop+k4VpiL8cS0QUjkKQ=
Subject key identifier: DF:F2:14:71:E8:B6:39:10:50:1A:2A:4D:6D:A2:30:A0:98:23:49:15
Authority key identifier: 5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
Certificate issuer: /CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Certificate serial: 01A0D048FEE4FAA4C862E0682FAAF0396648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
Manifest number: CF
Signing time: Wed 23 Sep 2026 22:00:39 +0000
Manifest this update: Wed 23 Sep 2026 22:00:39 +0000
Manifest next update: Thu 24 Sep 2026 22:00:39 +0000
Files and hashes: 1: WlCmmsOzTfXy2LiMe0EEMux3c7s.crl (hash: JEuIaG5J2ZnWWBwoCV2o2L84bjgdac+rjjpl0rJGf2k=)
2: Yst5Qj-zvcPEq30_qzvGF3COwE0.roa (hash: Sh7bkfErjwAbJ1zwX6e1hPa7oSiv2lwYiU1nZ2j65uM=)
3: aOgrnkONLZhAf5Y_FGg0Jrz8A_c.asa (hash: xc1tL2LgrybTpJU3OwT3V3UJxQkXyAwBQmIN99tp03c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:fe:e4:fa:a4:c8:62:e0:68:2f:aa:f0:39:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Validity
Not Before: Sep 23 22:00:39 2026 GMT
Not After : Sep 24 22:00:39 2026 GMT
Subject: CN=dff21471e8b63910501a2a4d6da230a098234915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:a1:46:20:24:58:43:0e:10:63:f2:e9:18:
17:f0:25:00:ae:f2:a8:5a:50:0e:e5:b1:e7:98:9c:
1b:8e:5a:ad:fe:e6:da:94:bd:d7:81:49:90:52:e9:
5d:1e:79:4b:cb:d7:82:c7:92:f1:63:7a:ba:fb:ea:
96:52:60:91:f9:16:64:04:7f:21:b3:95:83:90:de:
4b:6d:fb:d7:f1:8c:9c:27:98:95:eb:a1:b3:0f:8c:
68:93:83:1a:46:b5:81:7f:0b:49:3e:c6:18:f8:28:
e9:13:33:f2:43:9e:83:eb:af:13:ce:e7:7b:6f:c2:
6b:a5:e5:83:07:93:e7:e4:77:6c:d0:c2:e1:09:bf:
ac:64:cb:4f:22:1d:af:8c:5b:6e:8d:c3:f1:ac:91:
ab:19:0a:bf:c3:fd:63:4a:50:88:92:e3:fd:8c:a5:
9a:04:8d:61:45:b4:d3:2f:fc:69:25:78:a7:d1:59:
e4:a5:a8:27:bb:b1:7e:ad:85:a8:85:4c:65:23:ec:
f8:18:8d:0e:6f:7a:39:b4:0b:a4:e8:e6:15:5c:88:
23:fa:86:ff:a0:b0:ee:61:b8:cc:a1:79:19:7d:d4:
5a:b7:ea:10:cc:6d:4c:33:9d:d1:2d:e3:3f:ab:d5:
24:c7:1a:66:7f:c2:73:65:a6:9f:e9:be:c6:1a:10:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F2:14:71:E8:B6:39:10:50:1A:2A:4D:6D:A2:30:A0:98:23:49:15
X509v3 Authority Key Identifier:
keyid:5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:f4:57:fc:df:ac:60:ee:79:96:6e:2a:2d:63:af:21:ba:
c2:81:e3:2a:6b:89:cb:9a:f3:8d:e8:5b:e5:e0:c3:be:3f:1c:
64:cb:31:b7:36:92:36:48:66:e9:25:c9:52:17:d9:9f:e8:9d:
79:82:e6:d2:6e:a5:de:bf:5d:83:ac:39:cc:6d:c4:5a:80:6c:
9a:0d:b1:cb:24:2e:45:1c:ac:1b:3c:63:8f:4f:75:b5:d9:bd:
e1:f4:18:7a:22:b3:d5:9e:56:30:6b:29:8d:bf:ed:96:09:85:
6e:6d:23:e1:3f:ff:15:9d:c8:a0:f5:a8:26:38:85:04:1a:32:
70:90:d5:91:9a:7f:bf:02:37:19:ea:d3:2a:a5:13:ac:1e:e3:
04:41:a9:44:cb:ce:e6:74:df:4a:af:6d:2d:78:bf:c8:fd:25:
d6:34:5c:20:e0:30:f9:0e:85:c0:f8:31:c0:ff:91:61:ae:2c:
98:f4:43:65:e3:ae:aa:43:63:77:3c:53:29:2c:3d:54:38:65:
82:19:10:61:3c:75:63:cb:78:9a:be:04:ef:ba:6b:f7:f6:d7:
19:32:7d:77:6f:94:b0:40:75:48:78:d8:ba:c2:b9:df:a8:e9:
0d:b9:ce:bb:f5:c8:dd:63:19:be:8f:3c:7b:e6:75:95:f0:42:
69:25:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:55:29 2026 by rpki-client