Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: dl0bZYq/5iAKftbeZVK5zsO7AkfvmOa4H38g4xw4mBc=
Subject key identifier: 7C:95:B7:23:64:13:2F:FF:18:A1:6E:CF:13:48:AE:A9:80:8B:0E:E8
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019F91DA31EFFEC6F30C34DEF59BB1176655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 13FD
Signing time: Fri 24 Jul 2026 02:00:23 +0000
Manifest this update: Fri 24 Jul 2026 02:00:23 +0000
Manifest next update: Sat 25 Jul 2026 02:00:23 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: A6K+Ww8X9jLWHW5fZRjsTyyB4Yy6aGtcAxCXQsNNeys=)
2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:31:ef:fe:c6:f3:0c:34:de:f5:9b:b1:17:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jul 24 02:00:23 2026 GMT
Not After : Jul 25 02:00:23 2026 GMT
Subject: CN=7c95b72364132fff18a16ecf1348aea9808b0ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:70:78:f4:1a:5c:c8:fa:cd:9d:08:78:11:
ce:3a:9b:4b:0f:c1:67:53:a5:1a:b0:ee:cc:87:a5:
8a:64:04:d8:e4:a6:75:67:56:d9:90:46:fb:c4:cb:
39:93:ba:ea:62:d6:d8:d1:21:3a:4e:eb:4a:8d:cd:
c4:fe:dc:c0:a1:76:6d:42:52:00:08:85:73:ea:22:
fc:51:d0:5c:60:30:39:3b:74:7e:0d:e0:66:d2:07:
89:1b:6e:b6:86:4a:82:e9:a6:cc:59:bb:97:ef:b6:
9f:35:50:e0:62:41:4d:43:a1:d8:b3:6b:c7:d2:8e:
de:f3:12:f4:79:bd:f5:bc:fe:c5:c3:df:71:27:51:
0c:56:52:06:6f:be:db:0e:4a:32:a5:d6:3e:1f:b9:
14:91:85:86:49:a0:a8:b4:9b:cb:6b:bd:ad:4c:20:
0b:cd:56:49:09:11:d0:a6:29:1c:a9:59:36:c3:be:
3f:3c:4d:5f:64:0c:8a:34:e8:32:26:6b:c6:b6:a3:
64:3c:8e:5d:4d:5d:27:c1:29:42:6d:50:7b:16:76:
ec:97:58:10:6b:63:6b:68:ad:bd:03:5d:a9:2d:e4:
42:be:12:6e:01:6e:48:98:8d:26:b7:54:9d:74:31:
a1:aa:7a:25:67:68:59:2c:93:09:56:3c:b1:8d:c7:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:B7:23:64:13:2F:FF:18:A1:6E:CF:13:48:AE:A9:80:8B:0E:E8
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:24:db:3a:64:29:30:5b:93:90:7a:92:9b:e0:51:b8:cc:cd:
f6:9a:b9:7a:58:a9:a8:f1:02:48:29:2d:b6:41:17:65:b2:88:
67:fd:b3:ed:81:93:3f:92:32:bc:85:cc:0e:79:82:f1:87:8e:
e2:e9:e5:0a:9b:6a:7d:6c:68:3f:00:66:b9:f7:01:36:5b:2c:
13:a3:75:e1:de:6e:c1:e7:4d:b1:32:eb:52:46:4d:a0:9e:1b:
3c:29:43:5a:a4:fa:70:f4:7e:75:fd:f0:94:5b:49:2e:8e:b8:
13:9a:a6:d6:57:3f:48:e6:f3:9f:02:9e:1a:f6:00:82:14:f4:
26:43:71:78:e2:bb:92:1f:5e:c9:20:57:0b:5e:a8:33:85:01:
06:e3:17:0c:db:41:20:a8:b3:0b:c8:61:08:1c:b7:59:72:c8:
f5:1b:05:68:d4:cb:53:89:5e:08:e9:9b:7d:82:ce:dc:b0:68:
00:82:2e:63:6f:0e:02:c7:70:f1:70:55:84:d7:a5:80:a7:55:
66:b2:04:36:c8:05:c6:51:b0:d4:ab:e8:3b:75:00:b1:ce:6e:
f2:87:b6:fc:d0:c4:a4:b2:63:25:e5:50:de:48:ab:a0:90:dc:
90:eb:c9:4c:2e:04:59:b5:79:f4:4b:ee:46:9e:9c:2c:a4:ff:
b5:5c:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:44 2026 by rpki-client