Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: NWxMHSD1TmLSqmXrC7F6sVnslLRb6/dLNXMIk3lXGwc=
Subject key identifier: 95:5E:6C:E4:40:A8:6D:A7:94:14:1D:53:1B:E1:56:8F:E8:27:B4:26
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019ED4D0437A8CE1989B67ED35D426AA96A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1963
Signing time: Wed 17 Jun 2026 09:01:18 +0000
Manifest this update: Wed 17 Jun 2026 09:01:18 +0000
Manifest next update: Thu 18 Jun 2026 09:01:18 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: sU+Wj1dLDQEkVsAfGs3DW5u3YGk9OpBoo+OHiZDRwAc=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:43:7a:8c:e1:98:9b:67:ed:35:d4:26:aa:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Jun 17 09:01:18 2026 GMT
Not After : Jun 18 09:01:18 2026 GMT
Subject: CN=955e6ce440a86da794141d531be1568fe827b426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:e5:3a:75:26:10:11:6e:52:2d:44:4b:0e:
1b:33:96:fe:d1:07:89:5b:d4:d8:ff:42:53:0c:00:
fb:46:0e:d2:70:15:5c:3a:80:12:32:8b:eb:54:6e:
90:fd:9b:97:49:42:1d:2f:86:53:18:4e:6b:e0:58:
95:08:33:fe:cf:ea:96:30:d7:1e:92:d7:76:cd:f1:
fe:5f:df:f0:e4:4c:7a:e6:5f:f6:6a:e0:08:42:f3:
c5:4f:6d:7c:fa:58:ca:88:d6:b8:68:fa:f8:76:70:
81:d7:a1:a1:56:71:70:42:69:46:9c:ab:3d:f5:01:
00:89:b4:5a:f0:7f:c7:ad:8e:76:89:5c:0a:61:71:
06:7a:43:b0:6f:f1:e0:ed:87:03:e1:02:45:f3:2f:
f8:0a:40:4d:7a:3d:d6:8b:67:9e:52:70:3a:a4:0c:
e1:13:c0:a3:35:e2:cd:e3:c0:11:0f:b2:a5:2b:f8:
4d:44:6f:ad:4f:6d:5c:c8:c6:8a:2e:6f:87:e5:3c:
3b:70:3e:1d:ce:18:cf:ac:3f:fd:a1:b3:b5:1a:58:
88:0f:37:4b:7f:bf:36:4d:db:2a:91:54:cf:70:d9:
9f:6f:e6:6d:78:54:b8:d9:30:e8:35:bb:ba:87:23:
3f:64:43:0c:1e:d2:c4:85:c6:33:ac:2d:b9:89:17:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:6C:E4:40:A8:6D:A7:94:14:1D:53:1B:E1:56:8F:E8:27:B4:26
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4f:b3:8b:d5:d4:e3:a7:b2:8c:82:72:c0:90:e0:c9:3b:70:
89:71:b0:32:f4:2f:4a:ef:a8:fb:47:d0:92:72:be:c0:f9:81:
ae:1d:6f:ae:c9:c3:92:96:ee:37:85:b6:4a:51:38:bb:83:0b:
ed:ea:67:34:97:83:ba:e0:96:ed:e3:93:c4:2e:93:a7:53:3a:
11:89:9b:ce:24:5c:a7:a5:c9:f9:84:ce:01:a5:90:3c:52:3c:
eb:d5:18:19:26:de:1c:b0:fb:a1:d8:a0:5e:8f:6f:28:47:db:
d2:e8:ad:0a:3a:d3:29:59:c3:06:df:12:fb:26:98:32:20:eb:
51:bb:52:dc:c4:13:36:82:cd:12:c5:09:20:d4:b8:84:79:63:
92:7d:55:d6:26:3c:05:ca:af:98:fb:6d:91:6e:9a:cf:05:92:
41:14:70:d8:0b:2b:1a:27:5f:52:95:40:91:e6:7d:cf:59:16:
10:71:68:d8:21:5f:9d:11:59:a0:08:06:67:a6:0b:b9:5c:67:
c7:6f:be:7c:7e:9c:25:84:6d:f5:db:22:56:0c:74:02:94:4b:
19:5c:c2:b7:39:e5:c5:cf:1e:76:30:2d:29:fc:0c:3c:63:e1:
6b:48:f8:c6:95:1c:92:86:03:de:bd:b2:d2:5e:4d:71:87:03:
82:82:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:00 2026 by rpki-client