Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: lQ2wsgTi6V4LvYoiX5Wqs0vBV4oeCCApU58DwHkT/JY=
Subject key identifier: 31:CB:79:60:1F:D4:9E:6F:FB:E8:03:C2:6F:A2:08:06:D5:5E:96:C2
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 019F92B6A76531787A58F7B6325F7F265317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0DB9
Signing time: Fri 24 Jul 2026 06:01:11 +0000
Manifest this update: Fri 24 Jul 2026 06:01:11 +0000
Manifest next update: Sat 25 Jul 2026 06:01:11 +0000
Files and hashes: 1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: ARrolllg0c5oGwqu9skV0VF/s4sI6AHGT/PlQXaSlos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a7:65:31:78:7a:58:f7:b6:32:5f:7f:26:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Jul 24 06:01:11 2026 GMT
Not After : Jul 25 06:01:11 2026 GMT
Subject: CN=31cb79601fd49e6ffbe803c26fa20806d55e96c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:9b:56:41:45:8c:24:b5:73:bb:b7:d3:8e:
8e:06:70:af:ac:6f:50:d5:b0:3c:c5:5b:6d:01:92:
57:cb:20:ae:a8:ff:fd:8f:e7:e9:2a:ea:db:b0:cf:
f6:5c:76:5f:a7:70:81:e8:7a:5c:45:4c:d9:b8:01:
44:5a:e7:80:bd:d0:f3:10:ef:52:42:dc:6f:ea:0a:
05:60:4f:61:ad:2c:9b:39:40:39:20:56:37:46:ed:
11:8b:36:81:2e:d8:ed:69:5b:58:f8:64:28:ab:d7:
a8:3e:e5:ab:7a:7c:dd:6a:69:05:99:8e:a9:3e:2e:
75:1b:62:c6:19:2c:9b:c6:d9:7a:fe:7c:b8:62:b2:
fd:99:00:a6:67:2f:4f:9b:ce:32:ac:bf:00:18:cf:
36:2c:99:23:fe:4c:5a:9e:c6:3f:ce:48:f9:dc:91:
f7:af:66:da:bc:85:d3:68:f1:a5:08:89:21:9d:28:
f4:d0:6b:a7:8f:66:35:2d:cb:9c:d3:e7:e6:ee:7a:
d9:c1:cd:89:85:45:89:be:a6:3b:ad:76:96:c4:a8:
54:be:77:3b:5f:38:19:ca:c2:d8:0d:92:e2:6f:d5:
84:73:18:d0:b2:b2:57:a4:c4:77:5b:4b:12:d6:66:
e0:4f:f5:d6:4f:4b:4d:ef:22:90:28:ae:0e:05:38:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:79:60:1F:D4:9E:6F:FB:E8:03:C2:6F:A2:08:06:D5:5E:96:C2
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:d8:10:03:05:1f:c6:c8:78:f8:30:9c:a9:d3:37:79:0e:
78:a5:5d:4a:9c:c7:4e:8e:bc:c9:ea:c5:86:ae:7a:10:0b:0c:
56:6d:21:55:95:ff:15:bf:5b:5c:49:19:ae:ac:ef:fe:6b:e6:
63:05:8b:9d:46:4a:60:0f:05:8f:e2:f0:db:f4:81:69:a4:89:
4c:af:8f:34:9c:1d:9e:91:3e:a1:52:34:5c:54:ba:90:43:46:
0b:e0:7d:04:6e:46:71:36:52:5e:2e:6f:67:c9:b0:f2:49:70:
4e:63:a9:59:95:50:8d:e0:9a:93:a1:2b:f9:f0:88:40:01:8b:
ae:bd:ec:b9:c1:0a:3c:ac:72:a1:6d:0c:95:2d:08:58:30:9d:
80:b1:a6:98:13:b7:58:0e:f4:9d:d7:8c:77:fb:5d:59:92:b4:
34:d5:05:25:ec:1d:49:31:01:21:d3:1e:45:4c:89:6c:ba:23:
42:37:bd:30:0b:3b:ea:d5:d8:59:a6:5a:9f:d2:c2:a9:e0:49:
4f:f8:58:c2:aa:59:a3:e0:3f:1a:e7:76:9c:8a:b9:24:16:70:
e5:f8:dd:40:e3:8c:4f:f6:2a:2d:e1:e9:26:24:52:89:bf:5d:
e8:ea:74:bc:52:cc:c0:10:e4:03:23:83:0c:72:49:94:09:c0:
0d:4d:8b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:45 2026 by rpki-client