Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
File: Wrwbfji657xjxdrqq71J5yKJX_8.mft (raw, json)
Hash identifier: p9X3SaPelsEOkfLbYD2K7gObSwxcn8rUjUBV+DlogAM=
Subject key identifier: 5F:45:BC:5D:23:38:FC:4D:A0:5E:88:50:70:F4:BA:A0:6D:23:B9:C1
Authority key identifier: 5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
Certificate issuer: /CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
Certificate serial: 01A0E36314794EB546CAB5FB36BBBE251DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:56 +0000
Manifest this update: Sun 27 Sep 2026 15:01:56 +0000
Manifest next update: Mon 28 Sep 2026 15:01:56 +0000
Files and hashes: 1: LCoUEax47kGqGiCuqcBQi2GTesU.roa (hash: IJOb0EvYMFxU2/6v/RPKM6efNRAz/BdqHodx1dKoF9M=)
2: Wrwbfji657xjxdrqq71J5yKJX_8.crl (hash: idD+YAHx6vpC61nTpgywpuHQ6Ze0et+nYGV7ZOhFe1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:14:79:4e:b5:46:ca:b5:fb:36:bb:be:25:1d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
Validity
Not Before: Sep 27 15:01:56 2026 GMT
Not After : Sep 28 15:01:56 2026 GMT
Subject: CN=5f45bc5d2338fc4da05e885070f4baa06d23b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:c1:22:dd:d3:fc:e6:26:b8:39:f8:80:40:
7b:c5:23:9b:a5:12:0d:2d:20:04:b5:89:b2:b1:35:
cd:c0:2c:53:11:14:c8:7d:71:2a:54:56:e3:bb:9f:
ce:ab:d8:42:fa:6d:30:71:49:20:ce:60:34:91:94:
8f:8c:29:dd:c1:9f:fc:93:f9:b4:28:bb:5f:79:dd:
08:56:5b:b4:a2:f0:c4:dc:e5:81:ac:51:99:86:42:
6f:18:5a:5f:a4:7f:13:2a:0b:a1:94:69:38:9d:f6:
ca:e9:11:3c:f2:c9:ba:32:a8:77:99:9b:4f:9e:a4:
7b:8c:a5:3b:9b:b9:df:33:35:a8:16:a9:9b:1e:9f:
8c:a9:1d:39:48:e8:f9:ea:52:09:b4:30:c6:a0:31:
52:eb:98:ab:f1:f0:66:91:27:0d:a2:a5:1d:2f:fe:
01:17:f7:ad:a6:bf:1c:c6:d9:2d:6b:fd:e9:79:9b:
58:f8:aa:06:00:84:8d:61:2f:bd:d1:92:2e:7f:21:
49:57:e7:c4:9a:a7:9e:2d:29:3e:86:da:f6:59:eb:
6d:5a:95:59:ae:90:f9:74:1c:d0:ed:f5:45:93:65:
ec:7b:de:01:23:fb:b3:98:4e:1a:cd:67:0c:e0:04:
14:09:e2:2a:00:6d:3a:c1:70:b6:22:b3:a8:8c:0d:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:BC:5D:23:38:FC:4D:A0:5E:88:50:70:F4:BA:A0:6D:23:B9:C1
X509v3 Authority Key Identifier:
keyid:5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7a:3c:c2:d8:4f:1b:26:be:45:52:af:72:39:99:29:b0:c4:
bb:df:62:dd:65:5a:1f:9b:a9:e7:1c:7e:bb:f7:58:4c:74:64:
cd:c7:e1:38:b9:e6:7f:7b:83:d5:3c:4d:f0:54:62:cc:b8:3c:
de:f2:1c:89:4b:54:9a:1b:c3:ea:bf:3e:99:68:17:d1:89:9e:
aa:01:3e:34:f7:2f:5d:63:10:a3:08:60:eb:c8:dc:2f:35:ec:
d3:d8:bc:57:f8:7c:d1:86:32:05:5e:ae:70:eb:f8:c9:aa:56:
c9:df:9d:8a:78:2e:25:f2:04:b9:3b:dc:10:77:46:07:a0:ad:
a8:a9:1f:b7:c9:b3:f0:e0:41:0d:e9:e1:c4:6b:9a:5f:72:29:
3a:27:9e:45:fd:ae:f1:bf:d6:29:c3:df:f9:55:21:4d:d0:b8:
b3:c6:4f:f6:df:b8:97:e6:dc:81:75:09:72:96:d7:38:4c:20:
89:f8:11:c9:6e:6c:4a:bd:14:67:3b:f8:4c:e4:1a:a4:63:9a:
bc:d3:2b:40:b0:74:53:c0:42:35:9c:09:cf:13:35:6f:96:b7:
88:19:5d:98:65:41:04:b7:f4:c0:42:a6:54:c9:47:19:40:66:
a7:6d:a8:d6:99:7a:bb:23:45:66:ee:97:8c:6d:92:a3:a5:b1:
18:a3:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:32 2026 by rpki-client