Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: 7osILNlqkpp8qrdVhFHQBu6b5yhmB+O/EPKwGBoQFcI=
Subject key identifier: E9:F4:D8:2D:B1:6B:5C:A7:99:50:28:5A:1B:1D:6A:6B:AD:45:11:2F
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019EC25BE2414A68755E799AA99493FA4871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 14D8
Signing time: Sat 13 Jun 2026 19:01:02 +0000
Manifest this update: Sat 13 Jun 2026 19:01:02 +0000
Manifest next update: Sun 14 Jun 2026 19:01:02 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: 3pdw0ytzjTqGULfoYZ6m4YnYS+ipT8+a+kGRz13iS1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:e2:41:4a:68:75:5e:79:9a:a9:94:93:fa:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Jun 13 19:01:02 2026 GMT
Not After : Jun 14 19:01:02 2026 GMT
Subject: CN=e9f4d82db16b5ca79950285a1b1d6a6bad45112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:01:82:9c:ff:77:e2:6c:49:57:da:0a:7b:
ef:53:38:1b:28:1c:2e:b0:e7:aa:46:b1:14:c0:86:
31:ac:ef:4f:b5:3a:db:d3:c1:ed:00:28:a9:24:b5:
da:f1:43:f9:91:f2:a7:d9:55:71:cb:64:2f:74:2a:
9d:9a:08:f8:6c:17:f9:ea:15:37:50:93:4e:64:a0:
67:17:3d:99:64:b7:56:43:5f:4b:a7:d8:f3:5a:5d:
f9:56:a3:5c:e0:71:40:e9:21:1e:a9:f6:47:34:87:
a8:bd:88:d2:a5:02:8a:40:d2:5f:15:3c:18:b2:ce:
24:c4:8d:f8:18:76:ab:df:22:47:8c:c3:c5:8e:a5:
7c:29:86:a8:ae:f5:8c:0f:8d:a6:16:a4:80:c1:76:
c2:6c:a1:31:f5:5a:67:aa:17:6d:ef:73:cd:d2:55:
7e:63:2b:b6:5b:04:38:0e:7e:97:50:06:25:c6:6f:
9f:d2:54:c3:b5:db:15:91:97:72:eb:63:1a:82:63:
dc:2e:ee:50:c5:19:fb:16:86:5e:a2:b8:ea:f9:93:
82:57:9d:31:1b:f4:83:8d:4e:53:aa:72:62:04:41:
39:01:b5:d7:7e:ec:1b:95:61:f1:9d:f4:3c:33:9f:
ed:98:f2:3b:b5:c2:2e:fa:27:a3:bd:57:83:82:fa:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:D8:2D:B1:6B:5C:A7:99:50:28:5A:1B:1D:6A:6B:AD:45:11:2F
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:81:6e:ab:98:93:c5:99:ce:b7:12:b3:9a:6e:75:d2:b8:7c:
dc:00:2a:3d:5e:30:ae:8e:a0:82:d8:05:25:42:7d:5e:c7:d7:
e8:37:f8:04:2e:25:77:87:0e:ec:0a:21:ed:f3:04:98:57:54:
86:a1:a6:5c:9c:67:5c:d8:0e:0f:7e:76:89:90:0b:e5:4a:9c:
ab:3c:95:48:dd:e4:30:1a:82:0d:86:9d:e5:e8:08:2c:37:59:
ac:f1:ec:47:43:19:7b:01:89:a0:76:77:e5:05:94:fb:1f:2b:
90:84:32:fb:fc:36:72:d5:a3:02:7b:65:85:a8:2d:27:86:43:
a2:8a:63:f4:b1:2b:63:6a:e1:c7:89:ca:4c:85:d4:c0:5a:e3:
14:cf:94:1e:5f:f6:02:7c:67:6e:14:cb:99:04:9d:0d:61:81:
c1:2b:ed:cd:bb:9b:7d:73:f7:90:f1:5c:33:3c:e9:2e:16:aa:
1f:32:fd:db:0b:11:bc:de:3c:cd:5c:5c:0d:d9:d6:68:35:46:
9b:6b:ba:37:fd:1f:78:7b:c1:82:ed:e4:19:63:73:a2:31:1e:
5c:18:6c:d2:d0:d3:c4:03:8f:e7:ed:58:90:93:29:11:dc:26:
93:f2:25:77:1b:6a:a4:b0:51:d7:72:5e:0f:5b:fe:52:d4:25:
bd:05:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:09 2026 by rpki-client