Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: 9xxs8w6pPlcxzUTfaec9y15PLuCyulXRE851hr5RqGs=
Subject key identifier: D2:D2:9C:F5:45:63:60:05:18:B1:C0:8B:AF:AC:63:26:8E:6C:62:8F
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019F94DC77E7E916D93447661790EA718E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1545
Signing time: Fri 24 Jul 2026 16:01:44 +0000
Manifest this update: Fri 24 Jul 2026 16:01:44 +0000
Manifest next update: Sat 25 Jul 2026 16:01:44 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: eP8CqJKuKCHiI2cv1FyW8KU/bM5DXDO6mswnCxUpkrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:77:e7:e9:16:d9:34:47:66:17:90:ea:71:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Jul 24 16:01:44 2026 GMT
Not After : Jul 25 16:01:44 2026 GMT
Subject: CN=d2d29cf54563600518b1c08bafac63268e6c628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:2f:77:a6:92:02:54:48:0d:41:76:6f:b9:
bd:bc:69:f6:a9:32:7b:12:5a:3b:e5:bf:ed:18:c9:
89:88:20:3e:d0:53:73:ea:22:73:53:23:ed:6c:8a:
0e:1f:db:6a:4a:cd:2c:81:f7:ea:67:68:90:6d:ab:
e7:41:80:c5:c0:2a:10:ca:aa:ba:b1:80:57:54:73:
fd:12:53:0c:7c:09:c4:3e:b2:d3:08:d0:8a:73:53:
f1:b7:b2:05:a6:6f:15:88:dd:78:88:91:f1:91:31:
bd:d3:c8:36:6d:48:72:6b:45:0b:fe:14:eb:bf:db:
ec:e3:a5:f7:b8:32:34:72:b4:33:11:df:ce:2e:6f:
2f:74:a7:5a:39:63:e4:cf:5d:0b:eb:b4:04:df:fc:
33:a1:22:8c:79:08:48:bf:96:3d:9a:65:83:60:08:
fd:89:71:b0:e8:b9:35:fc:30:df:0f:3a:9a:72:05:
bc:67:07:8a:c1:06:61:89:09:b7:c1:0c:e8:2f:83:
e3:52:0b:24:0b:cc:cf:74:b0:9b:80:f6:18:9d:9c:
52:f3:21:39:7c:02:2a:32:db:86:59:74:0f:f7:e1:
4c:54:40:bd:fe:c5:e7:fb:d3:8a:1c:d5:d8:bd:b1:
df:02:d2:91:14:c6:51:a8:bd:db:2a:a3:2e:4c:f8:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:9C:F5:45:63:60:05:18:B1:C0:8B:AF:AC:63:26:8E:6C:62:8F
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:cd:4a:3f:99:20:58:6a:88:48:6d:23:d3:7e:54:d2:b5:
7d:8d:07:9e:5c:76:f6:0d:67:8c:6d:a7:34:3f:f3:c1:12:05:
57:0c:62:a5:4a:87:4a:94:e9:65:ef:25:ec:bc:dd:b6:c9:88:
0c:3b:6c:c2:30:95:56:c3:47:71:48:fc:71:44:42:51:5a:77:
cf:eb:e1:7d:ba:d3:a1:11:61:72:aa:06:01:28:1f:7a:77:8f:
55:aa:c2:36:fc:4c:9e:a8:1b:21:5c:19:c5:69:f4:11:a4:3c:
48:54:06:19:2e:99:76:7f:53:77:48:6d:b9:c6:95:35:de:07:
45:d5:d8:15:3a:7d:3f:f3:c0:d3:e5:62:65:a9:f2:c5:c0:25:
55:fe:40:33:05:6e:e7:11:72:2e:da:84:d2:92:be:30:5b:4d:
ec:18:6f:69:17:ad:96:80:f1:de:25:2c:22:ad:a6:9b:6a:57:
7c:36:4c:d0:0b:28:47:43:49:2c:08:2d:73:49:97:08:ee:3c:
b6:5b:60:02:2b:e0:38:ee:d9:5d:ea:81:6f:0f:1c:b2:90:64:
a7:41:bc:e7:0f:ca:9f:76:41:56:70:30:9f:7c:a5:c5:79:d8:
a6:0b:a5:c5:08:00:4c:8c:b2:2f:34:cc:59:f5:15:69:eb:d7:
e1:13:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:09:49 2026 by rpki-client