Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: XM/IoDHwRsgdKScJh8M34CM8yYUPV1Li4cVK6DvXcl8=
Subject key identifier: 9A:19:1E:44:8B:8C:C6:74:6D:BC:84:D0:29:1B:09:2F:9C:5A:DD:86
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019F935C4E90B1C79B396468F0AAF4884819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0F21
Signing time: Fri 24 Jul 2026 09:02:07 +0000
Manifest this update: Fri 24 Jul 2026 09:02:07 +0000
Manifest next update: Sat 25 Jul 2026 09:02:07 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: PsQCTKORSXUHj55VKDM0OcwbsUVhmELLZoHkW27hWug=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:4e:90:b1:c7:9b:39:64:68:f0:aa:f4:88:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Jul 24 09:02:07 2026 GMT
Not After : Jul 25 09:02:07 2026 GMT
Subject: CN=9a191e448b8cc6746dbc84d0291b092f9c5add86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:06:c0:c4:7e:78:dc:76:6a:12:4e:5a:01:
b3:73:45:1f:6f:7b:80:67:a9:5f:1a:c9:0f:de:6f:
0d:b7:4e:c0:6e:84:fe:e2:b9:65:44:4d:45:05:f2:
17:77:ff:7e:41:30:4f:fb:d9:1f:86:38:57:a9:93:
43:79:5c:37:37:01:f8:62:6c:e6:3b:f5:c1:54:e2:
34:57:27:c2:be:51:f3:5c:92:e5:ab:b0:17:64:0d:
c5:6f:92:ab:41:b2:65:a5:80:7e:f2:8d:ba:c8:8b:
c3:43:0e:a9:fc:f3:2d:4b:f2:91:3b:27:d5:fd:31:
19:e1:45:f0:31:f0:64:51:01:28:b2:94:c7:1d:4f:
da:c9:05:81:26:92:b8:ec:b2:07:29:cc:25:d2:81:
6e:26:b8:17:e6:b2:79:56:76:22:64:e3:19:ea:13:
4f:bd:7c:95:a7:85:69:51:25:27:98:a1:9f:85:37:
82:10:4c:f2:b0:9d:72:43:79:27:6c:cd:aa:ac:4d:
45:e6:e1:15:81:48:66:35:c9:12:81:e6:86:fd:2b:
7b:fa:b2:66:5f:46:c1:30:bb:91:a5:32:4a:ef:78:
70:cd:5e:ae:fa:13:f7:c5:f0:af:81:7f:5d:df:ee:
c2:82:36:f6:a2:d7:10:55:11:f1:37:8b:80:1e:22:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:1E:44:8B:8C:C6:74:6D:BC:84:D0:29:1B:09:2F:9C:5A:DD:86
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:b1:c5:af:0c:8d:e9:b6:2c:49:21:75:fa:9c:c7:e9:7e:
db:34:a1:92:98:4c:c8:10:e7:cc:ab:da:68:8b:59:d5:18:dd:
bd:2f:b3:20:84:96:c1:4b:32:75:96:06:d6:84:4e:f3:fe:80:
7e:99:65:60:2e:99:a3:b2:26:90:0a:53:04:c9:bd:3a:fc:5f:
d9:4f:d0:44:c4:64:8a:9b:d6:b8:0b:99:a0:a5:e4:94:0e:35:
97:8d:a9:d8:bc:a1:d2:d3:62:52:77:1e:13:03:f7:aa:da:fd:
e9:93:a0:6b:b0:50:f4:b7:77:90:c3:43:5c:82:65:e5:37:54:
d5:39:a6:d8:66:5a:a8:3c:44:13:ce:2e:5c:01:14:63:a1:0e:
2c:78:a5:65:17:79:d8:9a:2d:34:0f:4b:05:7a:04:a7:6b:ca:
25:88:60:a6:de:c5:a1:fb:2d:66:53:ab:b3:a5:f2:59:41:47:
fe:c0:a9:6b:f2:c0:d9:b9:97:ae:02:a3:67:59:8c:8a:c7:ce:
df:c5:87:20:e6:f3:82:30:7a:cc:4a:49:de:91:90:80:70:fe:
a2:10:61:40:0f:9b:0c:66:a7:83:fb:cd:d8:78:e8:b1:14:86:
8f:06:0e:a4:aa:82:98:1d:8c:f0:cb:d1:ba:0d:92:4f:6f:1b:
e1:34:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:52 2026 by rpki-client