Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: MXbHHM/DfFlyUxaqI3y+o1RBfedoPMyaGbtI12P4V00=
Subject key identifier: 08:04:18:1A:6D:58:D0:69:1F:A1:A9:F6:74:C2:8E:0F:2A:7B:3F:E3
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019CAD906A2749D34D1946E77466EB40BCD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1618
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: aSlYgx0KyvO91j4/b5uHslCqXpQhk+6JmD9CFp8DKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:6a:27:49:d3:4d:19:46:e7:74:66:eb:40:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=0804181a6d58d0691fa1a9f674c28e0f2a7b3fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:e6:e0:4f:d4:06:60:66:9f:65:ff:39:3d:
a4:7f:20:7d:48:9d:4f:b1:e0:f4:17:e1:12:47:ec:
d0:be:83:f9:4d:10:a9:a1:80:c3:91:3e:92:3d:06:
74:97:22:1d:e9:76:34:c5:22:ef:a9:11:95:13:a5:
bb:81:05:8a:af:f2:26:66:a0:68:65:67:96:88:29:
ec:93:16:fa:7e:81:8d:20:4c:ed:d2:19:c6:87:e8:
c4:15:f1:4c:07:04:fb:32:ec:d2:c2:ff:fd:b6:18:
07:c8:78:fa:b5:7b:05:b0:a8:b3:33:2f:b1:ca:78:
8a:8c:b7:30:ff:ba:6c:20:b0:bd:06:5c:cc:46:3c:
79:aa:52:41:94:71:e2:bf:82:2f:90:7f:d2:ca:7b:
07:ea:60:39:3e:d7:18:79:1e:d5:c5:a3:ba:0c:42:
bf:e6:e0:58:0e:60:72:31:d2:b6:81:80:77:d0:0e:
8e:2e:e9:54:d4:62:6d:64:85:1e:0d:b4:b5:cd:f2:
5f:37:22:12:e7:11:c4:40:ab:d8:19:43:5e:c2:bb:
b9:b5:ec:47:22:64:2d:ea:51:ba:5c:b9:83:15:56:
7a:cf:dd:82:4e:05:3e:b3:a6:b3:83:1e:1d:00:43:
4b:2e:75:b1:30:e4:45:ba:94:48:b3:ea:fe:ee:0a:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:18:1A:6D:58:D0:69:1F:A1:A9:F6:74:C2:8E:0F:2A:7B:3F:E3
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c8:95:7f:10:5f:06:23:70:c2:2b:51:3d:87:68:50:8a:11:
ff:6f:fd:a7:02:71:3e:47:a0:c3:f0:86:83:11:c5:0a:8d:d9:
df:eb:9d:55:cc:fa:be:3d:1e:ae:d5:e5:3e:72:1a:9f:6f:06:
42:53:6c:61:87:0e:1c:c1:c9:d4:fb:63:32:40:98:74:05:46:
fe:88:f8:88:64:6d:2a:2f:b6:c7:b8:d2:b7:25:da:45:1c:57:
2b:a2:18:22:e1:de:cb:ed:f3:02:2c:b6:47:96:dc:20:3c:9d:
7e:74:ea:34:a0:3a:a1:73:f8:28:ba:b7:59:e0:aa:61:db:e0:
89:06:1c:8c:7d:a4:79:6f:fe:61:75:9c:1c:06:37:78:8c:29:
d4:01:e4:02:92:4c:19:2f:8a:76:fb:d8:01:bb:79:f2:d9:88:
15:fc:37:58:f9:5c:15:cd:ec:cc:83:d2:08:ae:ec:e5:d8:97:
60:2d:b9:6a:69:74:3a:2d:d4:e3:03:1b:b3:02:14:93:78:bd:
30:49:aa:f7:fb:38:39:e2:42:19:55:db:fb:dd:c8:2a:96:e1:
35:a9:ea:5b:fc:8a:e7:3b:b2:62:82:ce:16:37:13:88:4d:95:
9c:5d:88:8a:98:48:12:c3:38:25:a0:48:64:7e:a4:83:a0:d4:
3c:29:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:43 2026 by rpki-client