Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
File: W2fkuRJYp4VpukUKXno0e0MR1FE.mft (raw, json)
Hash identifier: jSUt1Z3zx0X0cl4PsTctU7BmxuPJ3tvXu1RXjv2c5dM=
Subject key identifier: 5D:21:DB:A7:C7:41:2F:B4:11:6F:01:56:D2:E6:7E:EB:0A:D4:F5:41
Authority key identifier: 5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
Certificate issuer: /CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Certificate serial: 01A12E7C07AE6041092BB595A77F7D94333A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
Manifest number: 015B
Signing time: Mon 12 Oct 2026 05:00:42 +0000
Manifest this update: Mon 12 Oct 2026 05:00:42 +0000
Manifest next update: Tue 13 Oct 2026 05:00:42 +0000
Files and hashes: 1: W2fkuRJYp4VpukUKXno0e0MR1FE.crl (hash: 90wZfuf1DLb0EgA3w05CLs37erDXsR4AVvPPmIcupjo=)
2: yBxwaW11AdzCtD2abIPzlUZyrb0.asa (hash: sgvoWb8Eg0fLOeE4h8rR/2GP62YHBrZ5DZ553gmHgZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:7c:07:ae:60:41:09:2b:b5:95:a7:7f:7d:94:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Validity
Not Before: Oct 12 05:00:42 2026 GMT
Not After : Oct 13 05:00:42 2026 GMT
Subject: CN=5d21dba7c7412fb4116f0156d2e67eeb0ad4f541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:2d:28:f6:67:72:01:9b:cb:0e:65:a0:14:
2e:d5:72:db:de:82:c4:85:22:ed:73:c4:fd:d4:5d:
6a:64:80:74:95:7a:70:1e:c5:ec:63:82:fe:81:2f:
34:77:c9:c2:22:2b:43:2e:37:87:19:e0:7f:d9:37:
69:76:a9:ff:0b:c1:5e:fa:30:a7:29:fc:b6:f3:38:
be:30:0c:5b:bc:bf:b3:0b:cb:e5:a1:83:cf:0f:72:
55:d3:b4:25:32:17:99:53:18:1b:40:4d:b1:a9:76:
72:eb:a3:f6:e1:d4:da:97:4c:45:cf:2e:ba:34:fd:
5d:1f:cc:b3:c0:e2:2e:7d:98:65:52:1c:50:bb:33:
2c:6f:8b:01:77:94:ce:47:b1:7a:55:32:b0:ec:af:
9c:d8:da:30:80:50:a4:59:c3:85:1b:9e:c9:e1:1d:
b3:52:69:5d:77:b1:13:47:49:6a:e8:f0:fa:32:74:
86:2b:43:29:5d:ac:e7:d0:9a:ce:7e:90:81:87:5d:
84:65:c9:49:41:a1:c0:7d:e8:2d:03:19:c8:05:20:
fd:eb:bc:03:fb:54:0b:2d:0c:15:6a:00:7d:db:12:
5b:93:f7:a3:92:28:39:54:56:80:67:15:7c:dd:89:
a0:19:13:49:b3:cb:a2:b0:b0:b8:a5:b8:38:54:d6:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:21:DB:A7:C7:41:2F:B4:11:6F:01:56:D2:E6:7E:EB:0A:D4:F5:41
X509v3 Authority Key Identifier:
keyid:5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c4:dd:5e:ad:0a:fb:f3:0f:a4:fe:0c:59:dd:4d:14:fc:d9:
c4:e2:09:2a:3a:4d:44:cb:b8:6f:98:f3:b5:1f:d0:e0:e4:db:
33:35:4d:d6:7d:42:83:98:33:b3:37:36:25:27:d6:59:d3:2b:
c7:23:35:a1:6a:59:ce:c2:c1:7b:ec:31:55:81:24:27:b1:e2:
b5:b2:f8:b6:c7:e8:3e:f5:65:0f:86:87:de:3f:78:3a:ed:40:
e7:08:42:b3:bb:ad:cc:0b:9e:11:af:0f:26:3f:0a:d2:83:01:
05:2b:5f:88:a7:44:48:96:dd:43:bd:49:8d:63:65:f4:4e:a5:
1e:45:0b:49:37:45:fc:b5:8f:fc:bd:6d:cf:70:2c:1e:15:11:
4d:fc:fc:00:9d:0c:40:33:2c:58:5c:0e:b3:9c:b4:4a:f4:d8:
87:1f:2b:5d:c4:44:93:02:51:2b:79:f0:f4:96:0d:6d:58:dc:
75:d7:ff:05:6e:37:1a:df:60:de:80:89:b0:19:fe:6d:45:f2:
05:5c:80:5b:84:b1:79:f2:be:33:07:f6:aa:f3:39:87:f5:27:
e5:55:3e:de:7f:42:8c:b9:88:d0:fb:5e:37:29:a9:39:8f:de:
42:ea:0e:42:18:de:24:a6:16:27:5e:bf:fe:fb:33:aa:3d:d9:
7a:b8:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:53:34 2026 by rpki-client