Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: cBPOjFCbZ67vRMaeT20byMgMTKsPDFNPfhA0A0TVD7c=
Subject key identifier: 2F:E8:E6:F3:AE:47:02:C6:76:C1:D7:A7:FD:74:4C:84:1C:78:A6:85
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 019E1CEBF188CED3EF7DBD2B61E6F6A09CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 01E9
Signing time: Tue 12 May 2026 16:01:25 +0000
Manifest this update: Tue 12 May 2026 16:01:25 +0000
Manifest next update: Wed 13 May 2026 16:01:25 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: ZZfozs2BHJm/UPpI4aYRpzzMDQ3tAquOr9eirMx2aMI=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f1:88:ce:d3:ef:7d:bd:2b:61:e6:f6:a0:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: May 12 16:01:25 2026 GMT
Not After : May 13 16:01:25 2026 GMT
Subject: CN=2fe8e6f3ae4702c676c1d7a7fd744c841c78a685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:4d:03:70:39:8c:07:3a:63:6c:c3:a9:39:
95:94:51:c1:b8:cd:ba:6d:d9:69:dc:a1:2e:60:48:
08:d1:c0:e4:44:8d:ca:6b:a9:62:3e:ef:04:86:d5:
6a:89:75:5f:a6:66:c3:c9:ad:f0:41:b9:e8:4e:3d:
3e:1b:4a:ae:9c:b9:0d:ff:e3:27:2a:ba:63:38:10:
65:fa:43:67:81:9a:05:24:3f:2f:ae:de:11:ca:c2:
b8:d5:39:d1:cf:53:5d:51:3a:f4:74:a6:14:e4:d7:
f5:ae:c4:82:d9:ea:19:fc:79:ec:85:89:99:19:60:
2f:e5:ba:f6:5d:64:89:87:fa:c1:e0:ba:9e:15:2f:
dd:b5:9c:22:ab:f8:57:7e:01:d2:25:da:8f:ba:53:
a7:1b:73:34:4f:f0:f6:b2:8b:dd:cd:c0:64:70:3e:
98:f0:6d:4e:14:07:e7:48:47:43:56:fe:c9:8f:52:
ec:d9:2c:82:57:2e:ce:93:3b:f3:1b:18:9d:9c:18:
5e:d0:81:c4:5c:26:36:ff:7d:d9:6f:82:57:1e:23:
61:68:fa:5a:b9:af:1f:89:f1:e3:c4:12:37:7c:81:
f2:e2:34:e6:80:a7:73:f3:0a:d5:3f:d2:65:2e:a6:
e8:7c:48:03:a0:f0:74:33:3a:18:01:ab:fa:d0:21:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:E6:F3:AE:47:02:C6:76:C1:D7:A7:FD:74:4C:84:1C:78:A6:85
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:32:d7:a8:f7:26:c4:5d:53:2f:bf:ac:4a:74:4a:0d:3f:95:
58:11:4c:0b:f8:76:c9:c5:3f:34:38:6b:2c:6c:29:7c:5d:77:
09:e9:4d:b9:e8:1e:cd:b2:6a:60:fc:25:a6:1a:ad:00:c4:50:
86:20:93:3a:8d:1f:98:36:88:5c:fc:96:45:ab:6b:f9:55:84:
e7:67:cb:52:b8:bb:91:23:a7:33:48:5e:da:14:89:45:f1:fe:
f5:00:ff:e4:ec:3b:bc:5e:82:6c:c3:5b:fd:35:8e:53:a5:8e:
5f:29:61:97:ef:63:79:49:fa:2b:74:e2:81:f0:e0:b0:66:ce:
1b:32:fd:cb:10:ae:f9:06:e6:86:f5:02:bd:c1:65:c9:a4:44:
d7:b7:4f:d8:7c:b4:be:1c:9f:17:05:a9:e4:87:ac:e9:b3:a4:
3e:79:e3:ae:c8:6e:c8:c4:cb:c5:80:39:8d:7a:29:15:43:1e:
f8:cc:52:70:c1:08:3e:37:2a:79:ac:38:e1:9e:2f:64:99:f9:
87:de:8c:65:e0:6d:77:5f:c6:8b:75:4c:d5:11:fa:09:4c:37:
c3:a6:d0:21:6a:91:a1:f1:da:2d:c5:2f:70:f3:84:aa:c6:30:
b2:52:c6:a2:99:55:75:fc:d3:80:06:91:b6:dd:6c:f1:11:6b:
f2:0e:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:12 2026 by rpki-client