Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
File: Wkv82nYeTylp9jQ3IYeeygGert4.mft (raw, json)
Hash identifier: rWPe3U1xea/2y6T0gHGRxLudt+o42dtwcTcIQUK3kFM=
Subject key identifier: CE:54:6E:B4:83:34:5E:DB:B8:57:38:2A:DA:69:00:FE:C2:79:CB:7E
Authority key identifier: 5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
Certificate issuer: /CN=5a4bfcda761e4f2969f6343721879eca019eaede
Certificate serial: 01A0CE234CB6790CC62EDDB36111FE8D3F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:14 +0000
Manifest this update: Wed 23 Sep 2026 12:00:14 +0000
Manifest next update: Thu 24 Sep 2026 12:00:14 +0000
Files and hashes: 1: Wkv82nYeTylp9jQ3IYeeygGert4.crl (hash: HEdlrX3C0jhPsI381iTPHeQZfaZv0sNs3dlZ+lqRykg=)
2: xyc3dtPBeCZodO1ea-M7uUOk0M4.roa (hash: OTJn4Cjc6VH+vP9GyHGv33tTlfRUx9SD+YiIfBghf20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:4c:b6:79:0c:c6:2e:dd:b3:61:11:fe:8d:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4bfcda761e4f2969f6343721879eca019eaede
Validity
Not Before: Sep 23 12:00:14 2026 GMT
Not After : Sep 24 12:00:14 2026 GMT
Subject: CN=ce546eb483345edbb857382ada6900fec279cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:50:3b:a0:b6:1e:ec:af:c0:36:27:07:23:
b3:f1:5e:f7:ec:c2:26:6a:c1:2a:ae:df:c4:8a:7c:
06:31:13:c5:7f:65:85:f5:7b:ea:b2:9d:db:9f:bc:
fa:2e:ba:5b:6e:76:ec:d6:0e:30:4e:e9:ae:0f:85:
99:a1:0c:e4:ed:06:94:31:ae:83:d5:ee:f7:60:28:
00:68:ce:4e:24:62:f4:c7:92:94:46:00:fd:16:04:
af:ba:8b:de:13:a3:4c:a2:c0:51:74:37:52:ec:37:
6c:4d:80:79:31:e1:e6:4c:12:b0:30:7c:b5:91:61:
a8:98:92:4a:e1:44:bf:f0:8d:73:cb:3c:d7:b1:7e:
be:61:dd:93:f9:23:3d:9a:03:9b:7c:33:d6:11:3f:
50:b0:c2:f3:c6:3f:d9:53:84:be:57:1f:ff:5b:18:
09:b2:fb:63:82:63:ef:2e:8a:4b:1a:6e:c1:60:60:
0f:29:4f:06:1b:22:27:d0:36:93:3d:4c:db:f6:22:
c9:46:b7:56:27:a9:eb:73:56:c3:d5:ba:d7:3e:4e:
5e:e6:d1:d8:42:d4:fb:ff:a7:1d:b5:35:8c:7b:63:
3f:c8:cc:56:d4:b0:0a:ea:b9:10:5b:b5:30:ac:e2:
0f:05:d5:3b:04:08:09:f8:33:3e:cc:96:b6:b1:06:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:54:6E:B4:83:34:5E:DB:B8:57:38:2A:DA:69:00:FE:C2:79:CB:7E
X509v3 Authority Key Identifier:
keyid:5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:9c:e3:6d:de:f0:7a:58:73:8c:71:47:07:8e:ee:b5:d2:
46:d3:b7:35:ab:f5:b1:21:6e:da:48:4a:92:f7:52:70:43:eb:
43:71:78:ba:20:9f:86:33:8f:68:d0:19:36:6c:3b:5b:b7:09:
0e:6d:3a:f6:55:36:75:c2:69:da:ee:fc:ad:24:21:30:61:5b:
fc:72:42:03:09:67:22:b4:87:22:34:c7:b5:fb:cd:98:b5:74:
0a:c6:40:7a:9c:25:af:9d:30:8b:10:5c:ba:34:dc:e3:68:6a:
1b:fc:c8:a3:14:ee:7b:f9:65:03:5c:34:bf:86:e2:27:fc:94:
bc:d1:32:91:f1:ff:98:b2:27:c8:20:f4:72:27:92:dd:88:98:
cd:bc:7b:aa:8f:98:51:51:31:72:f6:2e:8d:7c:25:70:6c:f6:
10:1b:44:23:84:ac:d5:bb:c5:21:d4:07:af:40:08:bb:14:5e:
ae:8b:d8:18:d1:d1:5c:85:8b:fc:1f:3d:f7:67:0a:e7:3f:f4:
ef:ff:c1:f3:0a:2e:8f:5e:5b:f4:17:82:71:c0:59:83:ee:7a:
42:06:f6:a7:c1:cf:4e:c8:63:64:38:c1:ea:49:df:42:be:4d:
35:37:aa:77:5c:98:44:a3:61:e1:59:c0:84:50:41:3f:40:33:
93:2c:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:53 2026 by rpki-client