Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
File: WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft (raw, json)
Hash identifier: KC4Dy/EDsNjyFRjIQfFcCfVvfEdujAwPbFsajy9C5Bg=
Subject key identifier: FE:74:33:40:43:22:CA:55:5E:45:D3:F3:34:9B:73:B0:AC:D5:56:3C
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Certificate issuer: /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial: 01A10BF010B7C8F68914FBB7FFD1A99EDA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
Manifest number: 0104
Signing time: Mon 05 Oct 2026 12:00:44 +0000
Manifest this update: Mon 05 Oct 2026 12:00:44 +0000
Manifest next update: Tue 06 Oct 2026 12:00:44 +0000
Files and hashes: 1: HZsbbCQV184FMKGhunsSvE-BnQg.roa (hash: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=)
2: WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl (hash: r8Qzgz/ZjoDza8i7TemPJzUKqfkahvsI3DTkrCPCLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:10:b7:c8:f6:89:14:fb:b7:ff:d1:a9:9e:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Validity
Not Before: Oct 5 12:00:44 2026 GMT
Not After : Oct 6 12:00:44 2026 GMT
Subject: CN=fe7433404322ca555e45d3f3349b73b0acd5563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:eb:2c:02:50:29:07:ce:29:e0:26:02:24:
8f:1c:62:91:5d:a8:49:3b:d9:44:5f:0f:8c:58:eb:
3a:1e:22:51:92:aa:b6:f4:73:32:33:ec:cc:ce:a2:
60:9d:cc:24:39:d1:7a:67:e6:cb:1e:43:2d:2f:d9:
b7:c1:93:de:f6:ad:42:0a:e8:0e:d1:83:b7:33:d0:
ca:6d:0b:2c:49:ce:3e:73:91:1e:68:16:c4:6c:9e:
f0:fe:0d:6c:d8:38:e2:f3:93:35:33:f1:25:9e:96:
72:67:80:d5:60:e7:fc:12:36:32:74:a1:5e:e4:88:
30:9c:a5:12:f1:ef:f1:07:a3:1a:61:89:37:6e:01:
f3:03:10:d9:f2:b4:95:c7:69:eb:cc:70:c8:4a:fd:
b6:78:ed:00:17:4a:f2:63:90:fb:76:ee:00:1f:fa:
41:78:f8:54:4f:ce:d9:16:21:6b:54:6e:3f:5e:57:
61:64:e2:08:d3:dc:14:43:21:25:3f:ba:a4:2b:00:
f7:be:d4:9b:67:b4:14:e8:11:68:79:b5:e0:33:4a:
d7:60:bc:54:c6:68:95:e5:78:d4:61:b6:04:7e:41:
3a:bd:e4:75:91:58:0f:f8:9b:8c:58:c7:4e:ee:16:
b6:f5:29:d6:7d:99:e9:87:be:6a:0f:17:60:45:d3:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:33:40:43:22:CA:55:5E:45:D3:F3:34:9B:73:B0:AC:D5:56:3C
X509v3 Authority Key Identifier:
keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:cc:43:0d:4b:33:2c:dd:ca:3f:2e:20:1e:7d:91:38:f2:
f3:49:d2:fe:b0:e8:3e:53:ad:5f:2d:c5:ed:52:41:ae:b1:76:
a3:35:aa:9c:68:ea:7f:db:e7:66:46:7b:e6:fa:2c:a6:6c:df:
ef:9a:0a:af:ed:55:a7:4e:0c:7a:63:08:b9:6b:c2:8f:8f:b9:
35:11:62:2c:bf:71:7c:76:48:a2:49:17:3e:09:88:f8:6f:37:
2e:11:79:45:c8:37:ac:89:ba:29:b8:82:20:51:95:ed:20:a9:
2a:36:57:5a:c8:de:f0:41:f2:78:a5:24:b6:d9:71:27:b6:de:
1e:37:d0:0f:48:fe:b0:cc:87:db:39:8f:a3:48:02:4f:41:f8:
75:fa:24:71:e2:25:48:8d:06:64:aa:72:76:fd:8b:2c:15:d6:
bc:1c:e6:5b:78:d4:df:92:0b:69:5a:a4:15:85:56:22:2d:6f:
d2:0c:17:aa:a9:cf:1c:15:ba:0a:c6:5d:69:07:04:eb:47:e9:
8e:0f:2d:70:0e:aa:5a:71:c7:16:28:09:ec:f4:3a:4f:3f:58:
32:32:3f:85:f6:6b:d5:1c:93:0e:6c:1f:d8:8b:6d:a5:ea:bc:
f2:ca:78:a1:92:6b:58:e8:18:b3:d5:5a:32:30:ec:58:6a:85:
3b:42:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:50:43 2026 by rpki-client