Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: 8iCwUTng3K5lG5hrtBcxEmS1Sa+WRfrrlUbTIc3KtWo=
Subject key identifier: 09:39:E1:2D:C1:54:E9:8D:5F:F1:BD:47:7D:7A:4E:57:24:C4:9F:32
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019D9D086C16BA17EB7AC334F8E2758F0837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1694
Signing time: Fri 17 Apr 2026 20:01:07 +0000
Manifest this update: Fri 17 Apr 2026 20:01:07 +0000
Manifest next update: Sat 18 Apr 2026 20:01:07 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: DeKV+C1d5VNgbaZnBJEgQ6AGEG+OcyC1V6H57dy+nOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:6c:16:ba:17:eb:7a:c3:34:f8:e2:75:8f:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Apr 17 20:01:07 2026 GMT
Not After : Apr 18 20:01:07 2026 GMT
Subject: CN=0939e12dc154e98d5ff1bd477d7a4e5724c49f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:35:3a:d4:c1:65:25:68:a4:5a:63:31:4c:
53:81:a6:d6:a4:98:09:73:1a:d1:bf:30:fe:a2:33:
42:8e:d1:df:3f:9f:5f:a0:28:f5:a4:b9:f9:0d:17:
6b:0c:47:78:9c:19:de:bb:67:d6:cb:ab:28:b6:3b:
02:80:1e:53:3d:6e:80:44:6a:b8:97:b3:19:05:cd:
e5:6b:04:e5:e8:f3:26:49:b7:2d:77:98:f2:6d:10:
5e:79:cd:ad:37:42:cd:97:e0:8a:2c:d4:50:1a:5b:
db:49:ac:95:f2:da:5a:be:41:ff:14:5f:e7:3c:a8:
b8:79:e2:bb:41:11:99:5c:37:3d:3a:76:4a:95:6e:
04:43:a0:2b:1e:43:7e:cd:6c:5b:48:00:cd:1a:76:
5e:a3:8e:d0:c9:73:d2:48:12:37:ab:9b:9b:c7:ce:
8e:68:6d:88:62:31:f6:e4:10:e3:f0:b5:b9:60:95:
50:06:65:f6:79:10:a0:d2:f0:d2:f8:b7:5b:16:24:
a8:c5:52:d2:dc:5c:7f:eb:9c:26:5d:ed:ae:85:6b:
73:df:0a:b1:d4:42:48:fd:2f:9c:79:99:b9:b4:d6:
a4:7d:f1:1f:a8:26:e7:b9:fe:0b:4f:20:20:90:e9:
78:ac:41:fb:89:6a:7a:7d:c6:93:35:3c:f5:4c:6b:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:E1:2D:C1:54:E9:8D:5F:F1:BD:47:7D:7A:4E:57:24:C4:9F:32
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9c:50:34:ca:a2:78:95:94:b6:e5:9c:a5:9d:12:97:e2:30:
90:d2:48:47:e3:65:f8:4a:72:57:96:a9:fd:91:b5:ca:c3:08:
85:b1:a0:be:f2:49:24:51:02:f1:4c:23:2a:77:73:e0:82:64:
a2:62:f2:4f:03:63:22:99:ba:35:09:bc:73:e1:69:80:e8:80:
b1:5e:22:9e:30:ee:af:d6:79:5b:43:4b:3c:51:01:ce:44:4b:
d8:67:cf:08:0b:1f:f2:45:b4:2d:bc:38:c6:07:c3:d5:51:05:
5d:f0:21:df:ac:01:b7:a4:57:06:1f:c3:84:ef:6b:78:f5:ed:
52:11:3e:ea:52:14:52:b5:03:c3:55:2c:1c:a3:fa:ed:8b:0a:
45:2d:64:dc:e3:b4:9b:e8:b7:6e:0e:97:b2:8a:e7:cc:b4:5b:
76:09:cb:10:38:9e:91:6e:6d:cb:f6:bf:6e:5c:fa:e3:19:ef:
94:19:f0:00:ac:31:9b:c4:07:fc:cc:67:57:f2:1c:ac:b5:79:
d9:94:aa:b0:75:33:7c:37:13:fa:be:1f:dc:71:2c:36:de:34:
29:44:fb:11:72:57:c8:ae:28:99:3c:ba:6c:07:7f:6a:ea:bd:
eb:3e:52:cb:b2:e8:44:9b:89:59:0e:97:2b:31:0c:91:82:04:
99:a0:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:42 2026 by rpki-client