Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: BbIX2cGi4c2/o30GaAVq3rFy/Ty2TpVinBl9unOhAw0=
Subject key identifier: 47:C2:8C:B3:96:DF:96:FC:9C:E6:CE:76:02:E9:42:B9:03:DB:D9:5C
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019FAC3EA5F10B8643F2F7A47F783F59738E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 17A5
Signing time: Wed 29 Jul 2026 05:00:14 +0000
Manifest this update: Wed 29 Jul 2026 05:00:14 +0000
Manifest next update: Thu 30 Jul 2026 05:00:14 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: Y1uWg2VlZdL5FwdEbnPBKOUrd+F7RdlOGQzyv5nhcmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:a5:f1:0b:86:43:f2:f7:a4:7f:78:3f:59:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jul 29 05:00:14 2026 GMT
Not After : Jul 30 05:00:14 2026 GMT
Subject: CN=47c28cb396df96fc9ce6ce7602e942b903dbd95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:82:ed:7e:50:57:f9:8f:8a:07:e7:b9:b2:
ff:22:2f:1c:08:26:e9:ef:d8:07:c6:0f:07:ee:e5:
3a:8c:94:ca:64:35:86:49:fb:44:bc:35:e8:e1:e7:
6c:46:2d:f5:eb:12:7d:c8:f7:64:09:26:52:5b:2b:
39:73:fe:53:da:3c:3b:25:71:22:e0:32:0e:f7:42:
5a:42:20:c5:47:4a:37:8b:44:92:2d:d0:a9:3c:b3:
12:63:78:3e:a0:ce:7c:67:96:aa:99:f7:8e:71:0c:
d4:e7:9e:8f:99:53:28:f9:fb:6d:c5:49:53:d4:66:
3a:3d:2c:af:e2:6e:e0:81:4b:56:e4:82:0d:c9:98:
f3:ea:8c:41:ee:d5:87:f9:44:b2:fb:14:22:a2:5a:
60:3e:17:cb:cf:0b:39:4a:4f:99:2c:05:7a:8e:99:
a0:aa:a6:29:5f:58:49:94:f2:ee:e2:af:b4:cd:9c:
da:ca:93:bd:c4:bc:b5:22:c4:c9:d1:49:f4:ea:ae:
43:f1:b5:de:33:3b:b8:9a:f3:cc:88:d9:65:62:d3:
48:d7:8e:b1:50:72:bb:cf:bc:90:39:3b:81:48:b0:
fd:81:2a:84:79:71:3d:b9:4e:a4:db:e3:f1:3e:d3:
2d:df:bb:29:e7:26:6c:7c:b9:1c:38:93:0d:d8:11:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:8C:B3:96:DF:96:FC:9C:E6:CE:76:02:E9:42:B9:03:DB:D9:5C
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:24:8c:b7:44:79:12:fc:0e:40:3e:70:6f:d0:c1:c8:b8:1a:
dc:01:f8:30:5c:bf:b5:9a:96:b0:7b:f5:e7:b5:03:fd:d7:54:
72:df:78:c4:47:27:37:3c:96:ad:46:51:71:59:ee:4a:b0:86:
4c:9b:76:47:ad:2d:00:41:a3:4e:fc:40:29:32:6b:d0:17:65:
98:a8:85:a0:0c:86:64:8c:bc:c7:ae:34:03:d8:85:3f:22:b7:
36:57:2b:6b:6c:ca:33:49:2c:4b:fd:56:33:cc:83:4c:04:04:
b3:14:76:97:d3:bb:51:23:1d:fe:1f:c7:4b:65:d0:f0:99:b8:
5a:4e:d9:ff:9a:83:d5:75:c9:27:aa:84:13:16:2d:86:5d:4a:
88:ae:aa:14:7f:70:10:10:bf:b4:80:ed:73:90:ce:80:1b:9f:
49:ba:d7:1d:48:ac:32:a4:c1:23:7d:d9:d3:54:e6:2d:11:19:
73:d8:fc:06:4c:26:3f:bf:33:a0:38:bc:70:b3:f4:16:26:99:
92:bf:ba:1b:45:7e:c0:e0:86:2c:30:ba:49:05:5e:94:48:74:
d6:9a:37:ee:0c:0a:c0:d2:68:4e:1c:a2:ac:81:c7:58:0d:e0:
12:8a:c5:c8:f3:c7:bf:50:c4:b9:e5:29:bb:f1:0c:84:3e:23:
2c:f3:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:05:37 2026 by rpki-client