Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: L4bJqBVxPvBvOyJXwKGmto2ylGfczlM19SaJgyfNgcI=
Subject key identifier: CF:F9:A6:28:5B:CE:8A:E4:7C:BC:C9:FB:95:61:00:58:88:F0:5B:06
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 019E1DFE86B5F9A70DC71676E9A82C6C5E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0CF8
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: UPCiu+Ua3YlIP9Sc7c5Mtm2zQQpQRL99RdWwWkZxzYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:86:b5:f9:a7:0d:c7:16:76:e9:a8:2c:6c:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=cff9a6285bce8ae47cbcc9fb9561005888f05b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:c0:42:44:1b:de:dc:70:f9:a2:31:a4:e7:
d3:49:24:30:3a:7e:f4:d4:13:73:45:2c:0f:11:b3:
6d:52:ed:59:0e:91:0f:4d:da:a5:7c:8c:d2:ab:aa:
87:6f:63:a8:56:83:4c:14:9d:36:4c:23:08:d9:37:
46:b4:9f:45:7f:0c:61:65:bd:bc:38:3c:c4:cd:18:
56:a0:2d:93:8f:8a:0f:64:e3:99:83:3b:b4:8c:be:
5e:de:58:35:75:74:df:08:f8:58:55:14:bb:d0:c7:
4a:6f:20:99:51:e9:a4:13:bb:89:65:21:e9:bd:5c:
b8:7a:66:ef:69:8c:4d:93:16:ca:9a:a6:e9:8e:b9:
1d:7d:a4:ad:c2:a7:bd:b3:9d:02:53:f5:40:9b:76:
7e:77:77:e5:0e:c2:9d:ee:e8:c6:7d:d0:ca:92:08:
62:12:66:39:f0:a2:cd:2b:91:98:47:d0:34:3e:48:
06:7d:38:26:93:42:97:a8:26:5e:da:f8:fa:ac:1e:
13:de:c6:64:bf:cd:c5:a6:bf:73:8f:69:cd:47:02:
44:e4:5d:38:b9:97:78:c6:3f:54:70:9c:8b:b5:a1:
f7:8f:56:c5:44:6f:e3:73:19:73:11:7b:02:ee:9f:
a2:83:d3:2d:b4:96:37:49:cf:0e:50:65:72:08:23:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:A6:28:5B:CE:8A:E4:7C:BC:C9:FB:95:61:00:58:88:F0:5B:06
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:06:64:cd:95:aa:f7:0f:22:d7:c0:33:f3:8f:44:93:7b:
24:06:bf:eb:90:99:66:51:7c:b9:df:10:35:d9:b7:dd:35:cd:
59:ef:d5:b3:d2:d3:b5:31:c7:b1:86:7a:bd:92:d5:80:84:e8:
86:6d:95:48:10:a3:c7:a2:02:0b:0d:fc:3a:25:61:15:df:d3:
a0:f5:9e:5e:5a:58:8d:b4:e7:12:27:d9:15:36:15:13:0c:95:
95:92:27:ab:01:c6:24:f5:63:48:c7:ae:cf:7a:2a:b1:b1:e1:
4f:01:ea:f1:0d:19:96:e4:53:5b:f6:52:88:5b:8d:68:83:55:
ed:53:db:45:60:f9:76:39:b7:db:04:e7:5d:71:9e:0f:58:53:
a2:2c:a6:53:5f:47:fc:22:79:02:78:ed:bc:36:79:83:ed:33:
85:de:f0:16:3f:59:4a:1e:44:a2:7e:ed:f1:59:4b:a5:17:61:
91:96:7d:db:da:90:33:43:aa:e9:1e:a8:7e:b3:ff:6a:43:c0:
57:10:85:f3:68:04:2d:f3:e4:2e:75:15:3f:11:d9:d6:c5:f6:
c0:0d:c0:33:c8:a8:8b:fc:80:d5:de:15:df:a4:c2:51:c3:bd:
5f:e7:9b:32:ee:4d:6b:fa:97:34:1e:0a:6e:29:00:16:c4:2b:
7e:b9:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:47 2026 by rpki-client