Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: w0CI+taUbuWhQwi7hexi3InPFtEJEtMObg6CTPrapyw=
Subject key identifier: A9:78:CA:69:DA:E4:B6:3E:54:D0:DE:A4:C0:F7:1D:62:26:1C:88:EE
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 01A0DC16C2143C1CA7635584341F2B09E94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0FC3
Signing time: Sat 26 Sep 2026 05:01:14 +0000
Manifest this update: Sat 26 Sep 2026 05:01:14 +0000
Manifest next update: Sun 27 Sep 2026 05:01:14 +0000
Files and hashes: 1: BDv1bnHvaLtWajfUeKcw3pIG_Ok.roa (hash: 69EUlopn2Prmu5cUFMolg4m3eko2E4egAqnT2et0qIE=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: M2SE8YxdPblNO6q6bMgigCU4U+0vZIGSarxBk6YFzTI=)
3: iJ3WgjgFEAi8vZEcelv2BFolSMQ.roa (hash: xF5xxRJQhjYLAPfqm08FLfFdw32MCFAn76S/7dzgOl4=)
4: r_8bT90UjcZl-MvxK-5tmdznS1I.roa (hash: +kBFEQDnTe7FZB/GY9jWIpmDn/+p706IcANeKk3b/o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:c2:14:3c:1c:a7:63:55:84:34:1f:2b:09:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Sep 26 05:01:14 2026 GMT
Not After : Sep 27 05:01:14 2026 GMT
Subject: CN=a978ca69dae4b63e54d0dea4c0f71d62261c88ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:01:bc:cd:ff:36:5a:70:4b:95:38:a6:30:
61:92:41:a7:64:e0:7b:0e:43:27:91:e3:13:6a:30:
fe:b4:25:d0:63:a2:11:4a:4c:85:12:68:1f:8a:6a:
ac:4e:e4:80:3d:91:77:52:16:a4:ca:8a:77:5b:37:
42:73:61:3a:3c:81:f6:d7:75:a8:88:c9:4e:32:5b:
98:23:f7:93:cf:99:2d:ad:96:20:35:bf:4c:31:53:
2d:34:c3:dd:21:c2:d6:eb:12:ad:ce:33:f5:4b:b4:
89:0c:4e:12:9e:c9:e9:2c:0b:f7:ae:82:77:28:5d:
b7:b5:3e:92:20:64:59:da:59:e6:7b:1d:21:fd:63:
7a:75:e6:32:0b:24:4a:75:6b:9f:4e:4d:97:86:15:
98:71:a6:41:97:e1:1b:b7:56:06:d7:45:2e:3c:d9:
58:6c:d0:ee:f0:80:03:36:59:0f:1e:d1:2c:d3:38:
d0:d7:48:3f:20:e3:4a:67:0f:49:86:ff:cd:cd:02:
19:de:68:53:9d:7a:ab:e6:b8:b2:9c:2f:03:a9:22:
ab:4d:02:f9:b7:06:b1:68:37:5a:30:97:0a:7f:31:
d1:84:49:c3:db:10:56:a5:e0:38:04:f3:8c:15:a0:
8d:f0:78:ca:7e:2a:a5:f8:9c:3d:8f:4f:df:16:33:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:CA:69:DA:E4:B6:3E:54:D0:DE:A4:C0:F7:1D:62:26:1C:88:EE
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:9b:6a:c3:26:7d:49:c1:48:89:9d:36:1a:f6:8b:72:e6:
97:93:c1:d1:36:4e:3d:7c:9d:a4:a6:10:8b:34:19:74:89:32:
a5:f1:67:2b:b2:ba:4b:80:29:b9:c2:82:09:ab:83:87:dc:22:
81:fe:af:78:23:d6:45:76:11:de:eb:fb:cd:a5:b2:d8:80:5d:
73:ee:d8:37:8c:44:6b:7f:02:aa:62:9e:ba:5e:0c:e1:0a:0f:
8e:07:ac:9e:79:4f:5b:18:65:37:d7:19:4a:8d:59:06:de:a4:
65:f3:86:0e:0f:61:5a:92:66:5c:f1:b3:17:3f:29:57:87:73:
95:64:f8:90:dc:08:1c:bc:c6:ab:e8:7c:ff:9a:1e:5a:df:43:
33:0d:60:16:7f:14:1c:ae:eb:32:d1:a7:89:96:20:7d:36:29:
52:94:cd:be:e7:4a:a4:89:fe:44:2b:e3:61:65:10:d7:53:e3:
03:4e:e1:4d:a0:37:0c:db:2c:38:d4:cc:aa:ce:c3:1f:88:45:
2a:12:76:bd:0b:af:36:49:c5:92:27:63:18:dd:6a:67:e5:63:
e3:99:e9:75:2e:73:0b:53:94:e7:14:5e:96:32:4a:16:cb:ba:
20:bc:58:d0:fc:29:4f:50:13:73:20:2a:5f:8a:45:0a:76:30:
29:27:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:09:35 2026 by rpki-client