
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
File: WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft (raw, json)
Hash identifier: zCnERiqGgIwtoLAi2R54+JFeP0RVZRg0J/JiGhRe/jk=
Subject key identifier: 53:37:B9:8C:3E:4A:CD:20:F0:7C:8A:25:7B:EC:E7:92:9A:64:4B:AD
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 01A0F4C5121D1EC997D2F08B243C71FD5DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
Manifest number: F8
Signing time: Thu 01 Oct 2026 00:02:30 +0000
Manifest this update: Thu 01 Oct 2026 00:02:30 +0000
Manifest next update: Fri 02 Oct 2026 00:02:30 +0000
Files and hashes: 1: PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa (hash: jz0AWqz5TrCrCZOL8S5rk8ZUwf9/3LQqBKen3hyQ+JU=)
2: WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl (hash: nt2LNey9czeo6ece75SDRZJm7GPF9A8QOjvpkw4E8ns=)
3: vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa (hash: kvS6Muny5DxKn7c0ClorB/3JIoMx7iQSiPe4vnhIL2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c5:12:1d:1e:c9:97:d2:f0:8b:24:3c:71:fd:5d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Oct 1 00:02:30 2026 GMT
Not After : Oct 2 00:02:30 2026 GMT
Subject: CN=5337b98c3e4acd20f07c8a257bece7929a644bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:85:94:00:78:b1:c2:78:3e:42:40:47:c6:
f7:71:67:d1:fa:bf:f5:db:64:8b:91:9c:e3:4e:6e:
7b:54:97:af:d7:4c:1d:c3:80:ad:74:9f:5a:ad:29:
24:99:6f:0e:f4:da:4f:f1:07:21:93:35:0a:f0:67:
fb:16:c2:72:fa:a4:85:ca:81:c4:60:8d:98:c8:03:
8d:bb:8d:59:c4:d1:f8:47:ba:f2:2d:31:4b:a1:1e:
61:f3:d0:3b:e0:b7:1e:35:e4:41:4b:a1:d6:f8:58:
25:57:11:ac:e5:9d:4f:26:01:b3:ec:73:65:f0:c9:
ea:31:ec:75:7e:70:68:c4:db:ee:ac:31:e9:97:94:
bf:a3:20:65:ef:4a:f6:22:64:52:e1:57:89:f9:52:
08:f6:78:6a:74:eb:4c:6f:68:46:68:e5:79:c3:93:
f5:71:b5:1e:aa:65:e9:67:32:c4:c4:bb:fa:ca:a9:
f3:83:e0:02:5a:c9:5c:5a:91:4b:e3:7a:f6:9c:c8:
33:44:55:94:f0:a3:47:78:23:40:6f:6d:ec:3a:38:
95:1c:e4:9c:d5:0f:12:6d:47:d1:6c:fb:2e:7b:f5:
d3:02:ac:60:2d:53:11:25:85:31:ef:ab:72:45:33:
bb:0b:2f:a3:ee:4c:f0:86:a3:cf:e5:d6:3a:9b:a2:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:B9:8C:3E:4A:CD:20:F0:7C:8A:25:7B:EC:E7:92:9A:64:4B:AD
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8f:41:22:93:89:0c:f5:85:db:36:62:4c:0e:7b:37:25:7b:
af:39:b8:74:fb:31:4b:d8:ba:8b:11:49:cd:86:fe:a5:d1:e2:
4c:6f:7c:a8:44:c5:e4:56:91:55:a2:49:d8:88:3f:ad:a8:98:
58:60:f5:80:a0:c3:b8:b0:cb:6a:e6:fe:ec:da:79:b1:a6:a6:
f9:01:52:46:c0:fe:5b:62:df:c8:92:d3:e5:3c:c4:84:95:1c:
a9:f6:59:e6:ac:9f:16:c4:9b:9a:b4:0c:d2:39:9a:93:1d:e0:
93:b5:bb:e4:a2:6b:30:7d:7e:48:21:94:cd:80:f4:9e:a8:c8:
da:81:14:ae:fc:e8:14:ae:7a:f2:be:a5:bc:9a:a5:5e:c5:c0:
66:a7:4a:03:ab:fc:74:6c:5f:ca:b8:87:ba:62:32:75:00:fb:
20:a5:37:37:bd:38:db:78:6b:4c:b7:4b:3e:f1:41:92:71:62:
04:2d:ba:70:f5:a9:47:1e:e8:51:7d:e4:31:55:fe:76:d9:03:
70:73:a0:aa:0d:c4:5a:d1:7d:2f:d4:93:69:f2:e7:be:29:84:
3b:b9:9c:3e:a0:e0:d4:3b:54:1d:be:18:11:e8:e7:55:84:6a:
e7:00:c6:f2:f0:aa:53:9e:d2:9c:2a:f5:c8:80:09:ff:80:e0:
22:92:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:47:18 2026 by rpki-client