Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: td1SE8/bm362oKKK3x0mDgFR7j8oiV4uVF5w1xLqOuQ=
Subject key identifier: 3A:5E:FD:D4:CD:86:8E:52:B9:74:31:67:3E:71:07:5B:AE:C4:38:7F
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019EC292229C213CBA5F231D5036855160F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 172C
Signing time: Sat 13 Jun 2026 20:00:17 +0000
Manifest this update: Sat 13 Jun 2026 20:00:17 +0000
Manifest next update: Sun 14 Jun 2026 20:00:17 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: 8f86RKxfO8ELBl0Lz0mWZDMp5mR9NUkKh2e/oHBhgtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:22:9c:21:3c:ba:5f:23:1d:50:36:85:51:60:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jun 13 20:00:17 2026 GMT
Not After : Jun 14 20:00:17 2026 GMT
Subject: CN=3a5efdd4cd868e52b97431673e71075baec4387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:89:2b:32:82:b0:4f:71:ae:e6:90:fe:9d:
70:d7:7f:20:f6:c3:66:19:fd:b6:61:e9:42:33:ef:
3e:ce:2c:56:76:e4:6c:c7:7e:c8:bd:78:74:d9:b8:
33:79:c6:8d:1a:f4:3e:80:29:fc:d0:b6:64:c5:22:
94:e3:97:05:0e:ab:c7:98:40:52:18:26:56:47:9f:
ff:08:87:95:71:de:50:7a:a0:7e:0e:35:1a:4c:73:
96:2e:21:7c:2f:98:ed:d8:2d:b0:fb:b5:21:d5:54:
53:05:cc:63:a5:3e:08:33:fb:d9:a4:6e:83:c9:c3:
53:15:41:4c:fe:8d:72:ba:35:aa:35:98:09:3a:be:
18:17:bc:f7:7c:c4:bf:72:10:bb:1f:d5:75:2f:66:
15:ec:14:b6:61:b8:33:25:80:09:1f:1e:28:98:b1:
8c:43:52:e3:67:c6:09:04:fb:d7:bf:d7:3e:79:3a:
36:ad:41:bb:86:6d:76:a7:d0:46:1e:d5:ab:fd:84:
8c:82:06:e1:91:7f:05:23:f6:da:c2:31:b4:24:92:
66:2e:7b:aa:c7:35:bd:5b:9b:3e:9b:89:ba:c3:51:
44:15:68:4e:b9:a7:33:5c:30:2b:ce:ea:96:e6:00:
0f:6b:20:f6:6f:8b:1e:a2:7e:d4:a2:30:a0:8d:f2:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:FD:D4:CD:86:8E:52:B9:74:31:67:3E:71:07:5B:AE:C4:38:7F
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:25:e1:cb:29:c5:ab:a5:28:62:f6:0f:64:e8:ee:7c:4a:76:
8b:e1:58:c9:77:10:33:df:f4:39:3a:1c:a0:5d:fd:c0:6d:28:
fb:27:4c:1c:4a:5d:44:a9:91:3e:43:f2:08:7d:d0:f3:85:53:
21:51:32:11:08:c5:eb:b5:79:16:c1:92:31:84:3f:51:78:9e:
c4:72:0e:ac:22:1c:50:8e:73:b5:4c:bd:46:51:10:a0:5f:d6:
2b:d0:bb:44:de:9e:5d:0b:04:4a:59:6e:85:dd:02:9a:c2:61:
e4:17:66:a4:12:34:ab:f9:78:18:82:7f:2e:95:c8:ab:12:7c:
b8:44:cd:d7:cd:63:e9:5e:6a:3b:64:10:ea:b3:d2:fd:f9:ff:
48:cf:31:0b:20:66:ba:1a:07:cc:90:aa:2a:bc:eb:35:54:56:
f2:ec:19:fa:49:68:43:a8:10:3d:94:1c:e8:fa:44:d0:6d:6e:
b1:ba:26:e7:d1:01:34:9c:91:3e:a6:a1:7c:4f:ce:bc:6c:93:
21:3b:6a:3e:3c:98:1f:f1:36:43:0d:47:e6:06:ec:7f:17:7f:
49:49:d9:03:4e:c6:49:59:2e:30:ac:ee:1d:7f:9f:1e:cf:1a:
66:b1:07:da:be:4e:ce:fb:c4:81:48:31:0a:d6:fe:fb:bf:cf:
eb:b7:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:46:57 2026 by rpki-client