Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: SXZKNukuWIaJuMnh72OnyNCFt4vuV3R1a4cyJ/k97rU=
Subject key identifier: 2A:EB:3C:41:A4:D9:5F:CA:48:B8:33:84:CA:72:47:8A:00:D5:4E:AA
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019D9C2CD11451AF7931783DB7A5301405B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0F67
Signing time: Fri 17 Apr 2026 16:01:15 +0000
Manifest this update: Fri 17 Apr 2026 16:01:15 +0000
Manifest next update: Sat 18 Apr 2026 16:01:15 +0000
Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: k+VFtHM3XNeYyz6MUT2KDgecFe03d8dP8/8Mi3vFMPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:d1:14:51:af:79:31:78:3d:b7:a5:30:14:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Apr 17 16:01:15 2026 GMT
Not After : Apr 18 16:01:15 2026 GMT
Subject: CN=2aeb3c41a4d95fca48b83384ca72478a00d54eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:c8:b4:31:32:5f:70:38:1c:3a:44:fd:28:
43:85:10:8c:f5:cf:2f:e8:a8:ae:b4:a9:b0:2f:44:
40:59:31:e1:fc:24:eb:24:a4:0e:cd:49:11:fd:3f:
37:a1:68:59:59:2a:cc:c9:e7:89:d4:79:43:20:4b:
af:5e:8a:b3:89:b0:eb:d6:57:fb:b2:60:a8:88:ad:
70:bb:fb:eb:4b:6b:d9:71:0e:62:d6:5e:02:cd:0a:
45:35:59:6b:74:67:3a:b5:57:53:5a:ba:a6:a9:22:
63:dc:a5:f9:ed:9a:0f:10:dd:15:fe:4c:1d:47:f0:
fb:c6:f1:ed:62:85:79:bd:42:74:9b:81:fa:c7:61:
59:76:ab:ab:49:f6:90:6c:de:72:25:14:3a:3c:1a:
9c:05:cb:ce:8e:a7:7f:c4:73:89:ff:fd:7f:4d:51:
d1:1c:c4:2c:39:c5:5f:40:68:85:96:38:53:7b:4e:
79:e6:b1:54:0b:02:99:dd:34:66:93:96:4f:64:74:
c1:a8:96:78:97:ea:2d:a3:8b:cd:3a:dd:2f:14:3e:
e7:90:b2:40:e9:7d:3a:56:d9:a8:2c:f8:66:d5:de:
86:19:89:2f:29:da:f6:89:23:b4:f6:83:d8:9f:35:
c2:e5:4e:21:74:7d:98:e8:e3:46:18:bc:40:3b:a8:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:3C:41:A4:D9:5F:CA:48:B8:33:84:CA:72:47:8A:00:D5:4E:AA
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0d:df:30:62:4d:e3:10:9f:d2:94:14:8b:e3:4d:f4:8b:cd:
6a:4d:b2:e9:ea:63:ac:3f:38:c8:95:88:39:99:a6:e3:7e:18:
b0:0f:3d:34:cd:70:89:72:2b:64:fe:c4:cc:8e:61:9c:6f:4e:
b3:ab:3a:dd:39:97:5b:e1:f3:ac:36:9a:86:91:dc:6b:5e:e7:
d8:98:8a:11:ad:1e:64:8a:33:b5:06:67:10:27:a5:ec:af:57:
df:e5:8b:7c:0b:17:e4:53:98:f2:53:ac:63:db:f6:90:49:55:
2f:fa:d6:74:de:0f:4e:ae:9c:2e:ed:08:c8:d8:57:c7:be:43:
ce:80:38:db:27:52:27:54:f8:01:a6:15:bb:98:6b:12:8c:7c:
17:17:88:e9:6b:b5:e5:28:87:f2:87:93:71:3a:90:67:d4:9c:
06:3c:5a:49:46:35:a5:e3:93:1a:ff:1d:ff:f0:68:b1:f1:b6:
2d:c9:e9:18:42:6e:f0:aa:1c:af:af:a0:5c:53:9c:30:67:e4:
bd:9b:74:7e:be:55:3b:ce:bc:df:ed:37:c7:44:fb:a6:d7:59:
21:71:8d:9f:76:4b:04:db:d3:30:f7:d9:a1:b2:37:41:17:6f:
23:75:63:68:6e:ea:9e:8f:5e:ef:50:e0:ac:d7:38:6a:ca:f2:
7e:d2:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:42 2026 by rpki-client