Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: KHxqer3aUH9HusGmaJplOBUUd/Z3V0z3xPQxggPCZgk=
Subject key identifier: D7:67:0E:7A:BA:CF:D2:05:D9:D5:E5:25:95:2C:98:E7:A9:7A:34:1F
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 019F9248A75BE634E06CF8B09767412CCFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0FE2
Signing time: Fri 24 Jul 2026 04:01:02 +0000
Manifest this update: Fri 24 Jul 2026 04:01:02 +0000
Manifest next update: Sat 25 Jul 2026 04:01:02 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: RFjBTdS68ZZoq8I+DO82Z/sCij7ZKyGpgQfwqoFdjl8=)
2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:a7:5b:e6:34:e0:6c:f8:b0:97:67:41:2c:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Jul 24 04:01:02 2026 GMT
Not After : Jul 25 04:01:02 2026 GMT
Subject: CN=d7670e7abacfd205d9d5e525952c98e7a97a341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:66:a9:b2:7e:13:02:80:f4:f0:e6:d8:02:
5b:eb:22:83:04:f2:68:aa:81:ca:03:3b:6a:32:32:
21:f5:e5:f0:03:9d:e4:3f:e4:b6:6f:8b:5d:8f:62:
a4:7c:a6:4b:c6:20:27:ae:1d:81:3d:44:15:6f:42:
da:8f:09:62:e5:f4:f1:00:35:ab:c8:7b:99:ca:ee:
c0:7d:a1:12:d2:da:75:b6:e9:55:33:a9:4b:40:19:
bb:77:d0:6d:c0:4c:d5:df:b4:e7:3f:c5:1d:ac:c5:
93:10:09:fe:7a:47:94:83:96:ed:9b:d9:9e:52:1f:
99:4d:89:17:13:a1:3d:d8:d0:28:35:99:5d:2c:73:
07:6d:64:e4:0f:06:9c:0e:f8:d0:4f:7e:9c:a9:cb:
a7:ce:e2:4c:7f:fd:a4:37:9e:d4:91:cd:0a:e7:d4:
3d:39:ef:0b:d4:d0:df:d8:2c:4e:1f:25:0a:ff:e2:
40:36:11:eb:4f:99:90:36:43:be:e9:8a:ae:29:38:
bb:fc:62:b3:52:10:6c:69:7e:86:d1:df:17:f0:3b:
fe:ca:1e:80:08:c9:e9:b5:e1:28:49:5e:73:4e:04:
5e:53:b1:50:34:87:5d:ec:50:11:74:34:1b:e4:61:
b8:5a:b9:c4:c3:77:19:fd:3f:a5:b3:0f:91:1e:96:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:0E:7A:BA:CF:D2:05:D9:D5:E5:25:95:2C:98:E7:A9:7A:34:1F
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:24:c9:86:cc:d4:ca:0d:18:68:4f:62:49:44:c2:b5:3f:62:
03:e4:20:46:25:f0:1e:a7:dc:7f:13:35:49:c2:39:a7:bd:ea:
20:9d:ab:bf:98:c0:c1:e5:af:83:24:4b:af:fd:64:99:3e:08:
74:4e:43:81:53:0f:f3:26:cd:8e:ef:90:08:46:29:a2:5a:8e:
5c:de:b7:08:a1:a8:68:83:e7:f8:d4:db:df:fa:6c:43:58:0c:
13:3c:66:66:15:e2:d2:fb:7e:3d:c8:32:4c:e5:b9:cf:80:3a:
bd:6c:e3:54:d4:ac:60:d6:73:e7:d9:2c:b0:eb:be:67:3f:66:
1a:01:69:84:c8:a0:84:a8:b8:2f:ce:7f:82:3f:ad:be:49:6a:
22:81:d1:e3:f7:e0:39:08:dc:93:bd:a9:f8:6b:13:e8:c3:ed:
20:cb:1a:9d:66:cc:9b:9c:5a:17:83:de:d8:fe:3c:e5:92:69:
43:86:90:25:52:86:4e:ca:f1:cb:89:81:dc:59:08:d1:80:b7:
d0:5a:45:c6:e9:23:c1:30:89:60:b8:91:3e:0e:bc:05:c5:76:
ce:46:e5:68:b5:8e:c0:af:b7:25:1a:60:bc:5c:bd:5b:93:09:
51:72:7f:b7:74:e3:0e:e2:7a:9c:6d:8c:9e:81:02:42:54:d9:
2f:44:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:39 2026 by rpki-client