Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: LLB2/o4NXDmsiJNlq0Vn86GuaEC+TT44V+Xn96SfVL4=
Subject key identifier: 47:58:07:31:62:45:C6:27:55:4D:31:EB:60:72:47:81:34:8E:E0:1C
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01A0CC34DFB1389DCBB8505127F4D56309DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 14CA
Signing time: Wed 23 Sep 2026 03:00:12 +0000
Manifest this update: Wed 23 Sep 2026 03:00:12 +0000
Manifest next update: Thu 24 Sep 2026 03:00:12 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: /4b6AdZIRghJUYIVrizkLUk2c+BAlaABYpt4NIoDU7U=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:df:b1:38:9d:cb:b8:50:51:27:f4:d5:63:09:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Sep 23 03:00:12 2026 GMT
Not After : Sep 24 03:00:12 2026 GMT
Subject: CN=475807316245c627554d31eb60724781348ee01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:32:d6:bb:93:b2:9a:3f:02:bb:a0:d3:90:
59:65:e1:cc:83:36:ef:ab:5b:f6:fe:87:0e:f6:15:
15:45:28:da:d1:aa:85:1f:3d:23:3b:cb:2c:d7:13:
ec:65:41:53:75:53:df:76:02:74:13:90:8a:cd:43:
9a:b3:28:ea:fe:87:f4:ee:df:98:6e:ef:95:ca:ce:
9a:16:5f:d6:62:87:f2:c3:60:20:8b:09:fe:95:9a:
34:54:fb:e5:5e:ea:4d:60:ca:e7:46:ea:1b:e5:b3:
11:db:be:e1:33:ea:f1:28:13:e7:c9:3d:9c:bb:d8:
fd:61:69:0d:b0:0a:37:a0:48:b8:53:27:c0:bc:90:
ce:69:9f:03:fb:10:48:38:7a:14:80:7c:d5:97:ec:
6c:24:4f:26:94:25:41:ba:8f:c2:c4:b6:f4:35:0c:
40:e0:93:52:86:bd:f8:03:bd:1e:c7:34:e9:8d:95:
7d:0b:6f:76:42:01:ae:98:af:09:76:bb:e6:1c:a0:
ee:4b:30:d0:0d:fb:0a:88:a3:b7:f6:6a:1e:f0:44:
1a:e9:57:31:b9:3b:c3:85:7e:0e:cb:d5:fc:2a:0e:
a2:bd:6c:5a:af:93:4e:51:7a:ee:6a:e2:06:6c:21:
40:b8:a7:fc:4d:f4:5e:a6:a1:ef:e5:1b:ad:64:ee:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:07:31:62:45:C6:27:55:4D:31:EB:60:72:47:81:34:8E:E0:1C
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5c:26:f5:49:fa:d0:a3:d9:c0:79:45:4b:9e:85:c3:05:48:
9d:53:e7:2a:65:ad:c3:83:73:05:fa:65:c7:53:75:00:ca:43:
ad:77:1f:bb:6d:74:7d:5d:5e:8b:0d:5b:d8:66:09:12:c5:5a:
73:a4:6d:f4:81:6b:cd:83:41:ad:0b:c4:b8:b2:60:ae:28:b9:
f8:8c:36:f7:14:e8:f1:46:d7:42:46:ba:74:58:63:fe:80:d4:
5b:79:d3:d0:0e:54:e4:24:af:34:9c:73:ea:05:2a:3a:b5:d3:
7a:b6:40:cf:9f:91:df:03:a7:9a:1a:8b:1d:1b:9c:52:14:36:
f8:81:f4:5b:3d:e0:a2:1a:44:23:4c:a2:7c:1a:15:13:e3:4d:
4a:b3:8a:df:5a:ac:70:ee:bc:5e:fc:cc:5d:62:1d:c7:7c:93:
10:34:10:74:bb:2f:75:0a:e6:c8:e9:59:2d:e6:35:fb:71:16:
e4:98:40:72:14:19:8a:67:2d:88:2b:37:e1:68:b4:9c:bc:2c:
14:37:27:7b:36:42:57:1a:aa:c6:41:0e:3c:ca:0f:b0:cc:a7:
40:5a:8b:6c:f3:65:55:92:6c:bc:11:69:30:62:bc:29:09:cd:
89:1a:ff:be:39:6e:d0:c0:98:f9:99:bf:f3:d4:72:7f:e3:26:
09:01:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:25:48 2026 by rpki-client