Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: n1pp37UTRycZJUzVeuDtZk313hP/Wjfuim1PsYnIN8Y=
Subject key identifier: A8:3C:01:4C:93:30:B3:2E:E3:15:01:B6:43:4C:DD:21:E9:DB:B6:88
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019CAEA30557A6CECEC14793E8009AC0E40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0EEC
Signing time: Mon 02 Mar 2026 13:00:45 +0000
Manifest this update: Mon 02 Mar 2026 13:00:45 +0000
Manifest next update: Tue 03 Mar 2026 13:00:45 +0000
Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: QBhnkHLsgnTZep5lM6dXuLp65SHfcqt48Va+qCJDfEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:05:57:a6:ce:ce:c1:47:93:e8:00:9a:c0:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Mar 2 13:00:45 2026 GMT
Not After : Mar 3 13:00:45 2026 GMT
Subject: CN=a83c014c9330b32ee31501b6434cdd21e9dbb688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:dd:12:f6:3a:d1:d6:cf:6c:36:22:64:e0:
2f:a1:52:60:ef:dc:46:f6:a9:7f:f6:fd:3f:5b:ae:
25:ed:8c:9d:d4:ed:cb:c6:8e:22:23:a6:1c:73:4d:
6d:68:8e:6b:29:63:59:4f:ec:b1:5c:33:0e:e4:8c:
21:c9:49:ed:32:19:2c:6a:00:af:1d:03:75:1c:a0:
e0:af:3c:08:9d:e6:01:b9:6f:b9:90:69:9a:f1:7e:
3a:4b:b8:57:9b:31:e5:7d:4b:82:40:f3:b9:f3:a1:
ca:6e:ad:c7:89:96:ad:0c:04:5e:58:5c:af:bb:a2:
28:72:e1:0e:19:fa:c4:1a:f7:58:64:b9:c2:1d:98:
8c:62:5c:44:dc:d3:ea:5c:f5:84:38:c3:36:c6:bc:
5a:a4:47:66:44:52:c8:bf:5d:99:f4:66:50:d8:9e:
c7:99:b9:e4:67:de:6a:42:74:c5:6a:1a:34:61:87:
c6:cb:9e:ae:7c:16:39:b2:3c:74:ef:4d:02:a6:d1:
d6:c1:33:33:91:b5:54:c5:05:df:24:ce:84:9b:31:
d1:d5:a8:c4:2a:07:d0:8e:66:5a:6f:08:32:97:5c:
7f:ab:5b:df:1d:af:a5:bb:58:d1:94:27:c5:69:5a:
52:2a:76:ba:20:87:1a:63:30:54:87:7f:78:75:91:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:01:4C:93:30:B3:2E:E3:15:01:B6:43:4C:DD:21:E9:DB:B6:88
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:6c:3c:e7:84:5a:a6:fa:6f:4a:6a:7e:bb:57:2d:3b:59:
f7:09:01:85:86:f0:96:ec:e7:5f:b4:73:5f:f6:86:a7:2f:33:
01:1c:12:6c:d0:16:e2:39:8f:71:0c:02:ea:0d:3d:5d:2e:0b:
f4:6f:5c:cd:0d:61:54:e5:db:7e:e1:1b:1b:a2:ed:58:33:b3:
55:a1:a7:13:2b:c0:18:ee:eb:8e:31:a0:ee:ad:06:5c:18:41:
2f:04:49:a4:69:1c:43:28:de:d0:a6:cf:3c:2a:37:a9:de:2d:
e1:21:a3:36:02:58:3f:17:7e:d1:af:45:e8:3d:e8:80:aa:e6:
3a:86:eb:a3:b7:94:9b:62:bb:74:27:6a:7e:9b:98:84:f6:7b:
d8:9d:d1:a1:95:f3:4c:5e:2a:b7:60:82:7a:b3:87:a2:4c:f7:
2e:d8:a5:38:b0:bb:2e:9b:a8:b0:8c:72:8c:b6:29:81:88:b1:
52:4e:7d:ec:16:a8:ba:9b:ee:be:72:af:c7:59:78:15:f9:94:
15:08:8e:7f:6b:ea:4d:98:2a:36:49:d2:c3:6b:c0:13:36:fe:
fa:fb:5e:1d:2d:7e:c0:96:12:1f:13:85:f3:8e:ec:37:41:6a:
65:03:a2:c2:1c:eb:d6:49:42:50:c3:75:ac:2f:29:dc:ca:92:
f9:96:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:13 2026 by rpki-client