Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: 4EaVaX9F/Nb4bDL6aaqKrp5rdVqTQiHZkzLwOqrBRFM=
Subject key identifier: 1C:27:45:F7:DD:2E:5D:5E:9B:D8:25:90:65:96:2A:9C:96:EC:F7:AA
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 01A0CE5A9FE3CCD97B59E7B621494F43288E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 034E
Signing time: Wed 23 Sep 2026 13:00:40 +0000
Manifest this update: Wed 23 Sep 2026 13:00:40 +0000
Manifest next update: Thu 24 Sep 2026 13:00:40 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: FtQdrc0MoR2ewI4yjf0z5ST0VrFArlLiGb7FRpkAwiA=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:9f:e3:cc:d9:7b:59:e7:b6:21:49:4f:43:28:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Sep 23 13:00:40 2026 GMT
Not After : Sep 24 13:00:40 2026 GMT
Subject: CN=1c2745f7dd2e5d5e9bd8259065962a9c96ecf7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:3f:8c:ba:38:c5:2a:92:a9:6b:13:46:0e:
16:92:61:4c:43:25:bc:85:e4:64:aa:6b:32:67:a5:
c3:7f:92:c4:d3:35:b2:6f:16:69:09:80:9d:b7:ae:
f0:62:75:c3:f3:59:41:5f:a2:9f:00:52:70:1e:6f:
2b:2c:80:1a:1b:00:5f:7f:8d:a6:25:13:f7:ca:0f:
6a:f6:7b:fa:48:d2:89:af:47:6c:b0:01:e5:79:da:
0c:22:53:28:a6:3e:bd:26:49:3d:38:09:d0:05:dd:
78:b5:c5:9f:0f:af:1a:26:01:dd:ee:ac:df:ce:a4:
d6:19:40:b4:5e:b2:b1:c1:e2:54:4e:c3:c0:42:22:
f5:48:35:cc:6a:fe:7d:0d:a1:c2:91:08:f6:cd:63:
9e:96:34:e8:3c:18:e8:bb:f6:27:3f:a6:ab:f8:2d:
eb:b2:4d:a7:b2:24:67:1a:c5:93:b4:6e:15:b0:28:
9c:73:6b:84:b1:fe:aa:42:03:e9:8a:2a:93:ed:93:
5e:74:69:aa:b0:1d:b6:ca:b8:e6:e6:1a:eb:88:8a:
81:64:5d:2c:8a:7f:49:a8:6c:86:e5:a4:7c:3b:30:
44:72:49:86:f4:44:99:c3:41:54:1e:cf:e1:2a:62:
73:3f:e7:96:88:0d:15:26:db:a1:67:32:b1:15:f3:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:45:F7:DD:2E:5D:5E:9B:D8:25:90:65:96:2A:9C:96:EC:F7:AA
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9a:03:e7:06:44:d8:91:da:b4:3c:55:18:c3:5b:52:bb:6d:
a3:44:da:58:0c:09:86:58:51:1b:6a:a6:fa:e8:92:df:7f:9f:
4e:e4:b8:f3:1a:9a:4a:76:f9:38:e4:bf:b6:66:bb:e0:e9:4e:
81:37:33:04:81:e1:ba:bc:6e:2f:3f:7d:30:fc:16:64:8e:b9:
84:f9:94:a1:ef:bb:17:31:cc:90:fc:08:d4:42:61:f6:31:0e:
be:2d:04:da:d9:39:d3:bc:bc:d1:ce:17:bc:23:d3:7a:b8:6a:
25:58:89:e2:ac:9c:8b:d6:2d:b9:36:54:1c:14:e4:94:ef:c4:
3c:20:fd:97:5d:2e:9a:82:c7:68:32:ca:70:d6:5d:c2:2d:96:
0e:ed:63:16:cc:51:c4:02:6e:05:b2:2d:11:30:d2:90:09:61:
0b:db:d2:42:90:7b:22:a9:be:7e:7a:c2:45:02:b2:15:4c:a5:
3f:49:63:f9:05:f0:e0:df:15:ab:73:ee:89:c8:90:58:ca:6f:
b1:b0:10:cb:d6:2c:98:3e:89:44:7c:fd:84:19:09:2d:ff:66:
92:e5:30:06:4c:42:0a:76:7e:b0:e7:5d:e7:cd:38:af:88:53:
68:d5:cc:e1:d5:8d:c2:3a:be:d1:38:b5:36:f7:fe:4c:b0:c7:
49:59:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:13:15 2026 by rpki-client