Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.mft (raw, json)
Hash identifier: kNpy45ibUye0VJAycgco4awnvMdTvr7CAVCW4DWeDPw=
Subject key identifier: 89:84:2F:77:BE:72:F3:AC:93:ED:02:92:E8:8A:12:14:85:07:BA:53
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 01A0E4ABC1267A20893C4EBCF65B54AB504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
Manifest number: F1
Signing time: Sun 27 Sep 2026 21:00:56 +0000
Manifest this update: Sun 27 Sep 2026 21:00:56 +0000
Manifest next update: Mon 28 Sep 2026 21:00:56 +0000
Files and hashes: 1: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (hash: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=)
2: WvxA0kCVgUP3KaGOLDVOucQ_E68.crl (hash: MsGde3kXS/QenrDbvsY7Cz1j9K9nCr73cooJvHpXvhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ab:c1:26:7a:20:89:3c:4e:bc:f6:5b:54:ab:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Sep 27 21:00:56 2026 GMT
Not After : Sep 28 21:00:56 2026 GMT
Subject: CN=89842f77be72f3ac93ed0292e88a12148507ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:00:0d:f7:3a:9d:3f:70:eb:56:a9:a9:dd:
77:18:af:34:ef:72:d0:31:ad:c6:9b:7f:5e:20:54:
19:cd:d9:5f:27:8e:e3:a2:72:73:0a:5b:4e:5a:6d:
98:1a:22:f2:27:e8:24:0b:d4:47:f5:0b:54:96:05:
f1:b1:0c:56:71:f7:19:b0:72:4b:92:62:95:e4:28:
40:9a:0a:34:0a:af:05:bc:10:f9:1a:1f:a9:d7:5b:
35:a8:7c:e2:6c:9d:9b:d3:cf:f7:34:f6:64:63:3e:
fb:17:a6:2e:92:9b:b1:44:49:72:a6:f5:22:5e:b9:
14:3f:34:d2:9a:43:af:ba:ab:35:5c:27:21:a5:ee:
88:51:f9:c5:0a:17:e3:54:4f:c1:bd:14:a2:33:49:
b4:1c:8a:a0:59:21:0a:f1:22:1f:9d:a2:95:5c:d4:
29:07:37:f9:08:46:7f:25:16:08:f1:eb:a2:1d:0d:
68:c9:9b:79:be:84:79:6c:53:54:3e:2f:a2:a3:47:
4f:0e:99:b0:f8:d0:1b:7d:c9:0d:47:ab:a3:20:ff:
a2:12:87:24:b1:69:78:e9:5f:ba:98:b1:74:d3:41:
00:92:4b:f2:30:a4:70:b3:5a:ea:b1:ba:58:d2:30:
58:95:0e:f0:89:08:c6:5d:8b:a3:71:df:38:72:68:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:2F:77:BE:72:F3:AC:93:ED:02:92:E8:8A:12:14:85:07:BA:53
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bd:fb:f1:9e:ef:8d:29:0c:78:81:1b:ba:f5:da:a5:6d:96:
84:ad:63:4d:6a:28:51:58:2c:1d:91:df:bb:dc:c3:5d:2d:b9:
6b:36:77:9b:41:5f:6d:57:7a:58:80:1f:e1:b2:16:2e:25:d6:
2b:96:fc:4d:a2:1c:d3:9e:b4:ed:79:87:88:76:fd:fd:11:c2:
b7:7d:4d:20:4a:74:94:06:87:45:63:57:e7:bf:09:97:9c:0c:
48:0c:b8:b0:ee:69:67:57:33:f8:ee:f2:51:6e:f5:d3:42:45:
24:c7:f8:09:24:5e:6e:c6:d8:3e:38:a6:1a:eb:7a:7e:6d:4d:
f7:23:7e:fb:d3:3f:89:97:56:a6:dc:e4:0b:d7:7d:92:37:c5:
7c:8c:24:dd:be:ee:37:63:c2:b1:c1:13:df:83:20:e4:e4:f7:
f7:e9:09:23:70:fa:9e:bf:2b:b7:53:4c:be:30:f4:0e:a8:ed:
66:7c:97:a2:45:cf:25:4d:09:7b:fb:fe:ec:b0:b5:f6:8d:11:
81:f9:cb:0d:9f:ea:f9:bd:01:db:e3:49:cd:00:ec:f6:fa:b1:
53:73:b2:f2:94:46:ed:45:20:32:32:59:dd:16:6c:7d:35:a9:
b7:be:ab:61:2f:ed:cb:2d:8e:19:f6:62:99:37:87:ec:36:79:
98:85:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:03:57 2026 by rpki-client