
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: d9Kamml9jwAeHb4hDE4QDnTM/DDHdg0iNn9ApXBcPyM=
Subject key identifier: 06:26:6F:0A:61:BA:79:86:B1:72:59:66:25:BF:A1:4C:28:09:31:44
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019D27729C56E754226B95B6F8FFD7A4604F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0DE0
Signing time: Thu 26 Mar 2026 00:01:55 +0000
Manifest this update: Thu 26 Mar 2026 00:01:55 +0000
Manifest next update: Fri 27 Mar 2026 00:01:55 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: J7/8C9UdIGs2oFT5emFtbqUsok05REuk7luDGXSNhWc=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:9c:56:e7:54:22:6b:95:b6:f8:ff:d7:a4:60:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Mar 26 00:01:55 2026 GMT
Not After : Mar 27 00:01:55 2026 GMT
Subject: CN=06266f0a61ba7986b172596625bfa14c28093144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:5a:4d:1d:bd:64:ca:27:62:33:b8:7e:eb:
8b:85:0b:c6:e2:c3:8d:82:28:a6:5b:87:e0:c9:2b:
b7:b1:77:ec:81:5d:06:a4:d4:7b:25:6c:3e:cd:40:
33:2d:8e:58:50:08:d1:a8:2e:70:ba:2e:f2:4c:7b:
b2:1b:17:75:76:90:d2:96:4f:41:a3:8a:a3:c2:76:
2c:b1:a3:8c:bc:11:fb:61:8e:72:36:26:ae:5a:2a:
b0:d0:c5:b0:cd:bc:0c:34:a6:09:47:bc:6c:10:4e:
fe:0c:20:a2:f8:d4:9a:55:72:47:32:51:9c:01:49:
10:d2:93:bc:bb:54:0e:24:6d:fc:39:26:59:f8:f8:
cc:2a:93:70:99:68:c4:6a:6a:5e:c2:a9:09:a7:f1:
3e:2b:8c:f6:06:ba:8e:ba:72:b6:a7:13:2a:a5:8b:
1b:5c:d0:a0:bf:ed:dc:a4:a3:54:a1:6b:e5:a4:06:
6f:32:68:ba:cf:b3:db:32:38:8e:11:20:36:e5:bb:
4f:d7:3d:f3:f6:48:72:60:4a:d5:25:03:76:61:7e:
43:d4:f5:fb:d1:54:6e:8b:f5:d0:9b:6e:da:24:84:
c0:d6:8a:1e:92:a0:04:3a:78:e0:0b:10:05:f4:c8:
a8:83:e7:ba:f0:46:e3:c7:db:4c:09:8c:4d:bb:67:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:6F:0A:61:BA:79:86:B1:72:59:66:25:BF:A1:4C:28:09:31:44
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:5c:a0:d2:4b:fc:cf:36:df:05:76:40:82:1b:78:0b:8f:
a9:e9:b5:05:df:60:67:39:12:22:0f:18:d6:1f:63:c5:cd:93:
36:62:d5:55:86:44:af:82:41:ce:f3:9d:0c:11:4b:9b:0b:8e:
e7:f5:43:6e:ba:04:40:5a:da:41:ad:3d:a8:4e:b8:f0:9e:67:
3e:5a:34:ac:e8:13:aa:65:15:ca:5d:bf:f5:27:e2:be:ee:5a:
54:7a:88:68:4e:cb:88:60:a5:1c:ab:93:2b:12:5f:97:d9:4e:
cd:ff:f1:51:44:34:83:3d:5f:f4:c0:f6:43:6b:05:7f:fd:9b:
d9:32:d8:8c:a4:ab:1a:16:72:7f:09:33:03:22:cf:69:dc:d0:
b3:4a:44:4e:d4:69:f7:e6:10:89:c3:95:5b:b2:55:47:a8:27:
8a:1d:34:7b:46:39:43:21:d1:0f:5b:59:1c:07:1e:7e:83:78:
3f:82:0a:6f:32:bd:06:45:4a:b8:0e:57:71:97:8e:1d:4e:f4:
c2:92:2a:87:9a:ed:08:1a:8d:6e:bf:e6:e2:51:20:0c:1e:f1:
1b:12:36:bd:b4:84:9f:b2:05:ae:e6:a1:2a:5f:ea:a9:69:a5:
77:3f:b8:a9:72:52:2c:0e:6a:14:26:b1:5c:0a:c3:bc:eb:b3:
8e:29:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:06 2026 by rpki-client