Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: 99bD5ktZoqt2HBa1+cKZ6tvInBaVh14ub4xKttKhfg0=
Subject key identifier: F5:12:9F:B7:65:8A:76:18:00:E0:89:53:2B:61:6F:E8:1E:CE:01:E8
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019EC224FFAB7F949BB585355731DEE68D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0C72
Signing time: Sat 13 Jun 2026 18:01:04 +0000
Manifest this update: Sat 13 Jun 2026 18:01:04 +0000
Manifest next update: Sun 14 Jun 2026 18:01:04 +0000
Files and hashes: 1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: gZFKlMGalFQTpi2+bmOUptYqblsUkh7bqg9e0O8ZiC4=)
3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:ff:ab:7f:94:9b:b5:85:35:57:31:de:e6:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Jun 13 18:01:04 2026 GMT
Not After : Jun 14 18:01:04 2026 GMT
Subject: CN=f5129fb7658a761800e089532b616fe81ece01e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:54:31:fb:9d:b6:5d:0c:b8:1a:6a:04:91:
71:ed:84:41:46:38:b7:13:38:62:85:27:a0:52:ad:
bb:c6:d6:ba:13:63:8a:24:fa:92:87:43:f6:29:33:
ec:e2:04:24:03:72:ae:37:85:41:66:db:0e:5c:82:
42:74:69:61:07:62:c7:97:8d:53:65:60:87:4d:de:
2c:a7:12:a0:fd:a7:1a:3f:a0:b4:da:9c:87:b9:03:
88:42:33:10:fc:15:e3:eb:83:ed:d9:46:5b:33:10:
76:96:41:d7:a1:35:d8:56:d9:ee:76:7c:38:01:1f:
a1:d6:18:22:74:bd:1d:d8:df:54:52:cd:86:87:3d:
b6:e6:bf:aa:33:f7:49:cf:e0:7e:4d:e0:c7:02:30:
c5:70:72:7f:54:ad:0e:34:09:08:00:5d:9e:4d:24:
91:96:eb:09:a2:a8:22:69:cf:e9:fd:c0:b5:21:1e:
3b:fa:48:ed:4e:64:b1:77:7f:ef:3b:c3:fe:8e:55:
51:7a:7d:a2:46:62:b1:50:af:b3:8f:e8:00:38:7b:
55:1e:0d:83:54:d7:dc:03:33:28:e4:b5:ab:2c:80:
b8:e1:21:fc:39:e9:f7:dd:2e:77:e7:fb:97:3b:41:
43:38:48:8e:d2:a8:05:0a:7f:38:7d:85:95:ad:c4:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:9F:B7:65:8A:76:18:00:E0:89:53:2B:61:6F:E8:1E:CE:01:E8
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:74:04:9b:4e:87:9f:c3:8c:a9:b9:c2:c8:55:af:4e:79:76:
81:fe:ee:da:ef:37:3e:7e:08:cc:ac:d0:42:eb:d3:45:c5:5e:
d0:fb:5f:d7:5e:f6:9b:68:5c:15:51:31:d3:4e:51:bf:66:09:
8f:63:77:5f:00:c2:56:d8:19:4e:aa:30:81:39:29:16:c0:55:
b4:7d:03:23:5c:b0:00:1a:bb:2d:35:49:9f:7c:5f:f8:a5:8c:
70:af:36:0a:4d:11:eb:1c:97:31:77:b7:00:e4:7d:97:94:57:
48:e4:c9:19:d4:ba:5d:c2:44:f4:f4:5c:27:a3:5f:f0:94:78:
88:15:d9:bc:64:80:88:22:4f:ae:c8:ad:fb:b0:cc:b4:f8:d6:
6f:cb:7d:78:70:a1:85:82:0f:a3:44:11:3f:1d:0f:49:ac:5f:
c1:e8:38:13:34:d9:08:bb:18:8e:a8:7f:df:79:88:54:fe:6a:
c1:61:25:52:a4:56:dd:e9:7e:4d:86:2d:da:f4:90:eb:50:41:
eb:e1:89:a2:82:c4:9e:e7:93:6d:7a:88:6a:bd:d7:af:e9:c2:
d8:5f:d3:3d:ce:14:2b:b0:ac:2c:fd:1f:ca:8f:e4:4b:62:ec:
63:9e:2b:ab:24:86:19:e5:39:cd:9e:63:64:1d:21:b6:18:32:
6a:6b:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:26 2026 by rpki-client