Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: Qrd+iijerO/1hKJv8DEGoPa2Dn5URc3pXHdI6huEszU=
Subject key identifier: 3A:EE:B5:CD:47:9E:D6:F0:FC:A6:99:F2:1C:CD:27:AD:9B:39:B9:E8
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019F935ACB7DA63887C457B8ABAB79ABD8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0AD5
Signing time: Fri 24 Jul 2026 09:00:28 +0000
Manifest this update: Fri 24 Jul 2026 09:00:28 +0000
Manifest next update: Sat 25 Jul 2026 09:00:28 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: cMqgter6cetzW2azMdazqk03sD8xp1d8mgkamNziO5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:cb:7d:a6:38:87:c4:57:b8:ab:ab:79:ab:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jul 24 09:00:28 2026 GMT
Not After : Jul 25 09:00:28 2026 GMT
Subject: CN=3aeeb5cd479ed6f0fca699f21ccd27ad9b39b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:5e:13:e7:c4:83:e6:23:49:33:2a:d4:81:
97:af:e1:ab:4d:a9:d2:f1:07:dd:c1:76:21:6f:37:
fb:9a:df:f2:2d:b0:de:57:c6:fb:0a:7a:5c:e4:5c:
fc:2f:9d:f6:f8:c7:a5:f5:41:e2:f8:c9:ac:b1:f5:
eb:67:79:cf:67:fa:a1:8c:7b:dc:8f:24:8d:58:74:
6d:88:7e:5f:0c:c4:da:17:60:18:ff:8a:39:7b:08:
d7:a9:15:85:0e:60:8e:55:a8:ec:e9:51:b7:63:4d:
13:e3:ac:20:5f:45:b5:ba:5d:51:d3:88:b8:6c:1a:
33:db:06:4c:7a:a2:a1:58:d6:f7:fc:79:e3:a8:cc:
38:ac:4d:c1:86:87:ba:4e:34:be:65:e3:d4:64:3b:
c5:09:2b:ce:1f:3e:a5:dc:99:fd:7c:fe:79:23:36:
a3:6d:a0:2b:68:eb:bc:e5:56:13:9b:7f:c9:65:9c:
7d:ae:15:90:79:6e:c9:94:4f:5d:35:d0:62:91:08:
77:b0:9d:de:d3:55:6d:a7:4e:d8:95:92:ee:9a:95:
5c:36:53:ad:d4:7b:6d:83:98:ce:33:fb:44:fa:8f:
42:45:87:e4:f7:46:73:48:60:54:c5:6e:66:f3:0a:
30:91:83:c2:26:43:be:4b:f6:6a:64:97:93:06:1c:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:B5:CD:47:9E:D6:F0:FC:A6:99:F2:1C:CD:27:AD:9B:39:B9:E8
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:27:67:1c:f5:be:e2:0b:0d:b6:9c:4c:71:a1:9d:fb:60:
b4:f8:11:fd:b2:08:3e:36:f6:45:bc:8e:98:5d:74:0b:ed:68:
2e:75:23:1c:ac:5c:f0:07:bb:27:eb:87:8c:5f:22:31:2e:9e:
e2:e6:78:04:fb:71:51:f9:49:66:d1:1e:f6:1d:2a:5b:19:99:
d9:70:5a:7a:3e:25:6d:31:c5:de:8b:79:ad:56:62:ed:44:df:
aa:31:a9:7f:90:6e:e6:d6:84:fe:39:9e:13:81:c5:80:85:20:
a3:cb:00:0a:70:6f:9e:56:15:ff:de:d6:ba:8f:0a:b9:b8:f8:
45:c9:e7:bb:e9:63:d0:40:51:40:41:c3:c2:21:aa:80:12:17:
f7:fe:fe:78:8e:49:84:25:49:07:14:14:36:2d:ca:eb:e7:d0:
6f:60:87:4f:fd:50:24:cb:1e:75:0a:3e:21:1d:3f:c5:82:93:
cd:5f:a1:34:86:9d:b0:1d:9d:82:be:e3:c1:88:a4:cc:3e:36:
fd:93:14:3c:1f:70:08:2f:00:a7:44:85:1d:f5:b4:9e:09:df:
6b:2f:df:6d:a4:b1:84:21:21:32:38:75:70:24:9e:02:b7:5a:
e8:13:1f:7c:74:48:be:4f:47:c3:70:3d:91:da:e2:74:bc:c7:
04:31:9b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:24 2026 by rpki-client