Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: fEmwct5EBfR5rmF6MMo/iNxgvbM1cwmFVXmhfFffbeU=
Subject key identifier: DF:AE:B0:78:25:E4:33:96:11:73:D4:45:D0:91:57:5D:AF:F6:DC:DA
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019EC1EDCC4D57E34372D3A49BE3E9EBC65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 054D
Signing time: Sat 13 Jun 2026 17:00:47 +0000
Manifest this update: Sat 13 Jun 2026 17:00:47 +0000
Manifest next update: Sun 14 Jun 2026 17:00:47 +0000
Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=)
2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: Kh+urfosjWclP137BZd7Lsdqqe7JnaIOKoJppQZ68N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:cc:4d:57:e3:43:72:d3:a4:9b:e3:e9:eb:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jun 13 17:00:47 2026 GMT
Not After : Jun 14 17:00:47 2026 GMT
Subject: CN=dfaeb07825e433961173d445d091575daff6dcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:e6:5a:e9:57:eb:9b:db:fc:bd:4f:24:45:
54:95:39:f6:43:a9:86:6f:6d:7f:ce:3b:4c:ba:df:
e6:3b:f8:9e:f3:35:f4:39:5d:39:e2:c9:f1:dd:00:
f0:87:32:52:56:2e:2c:93:55:3b:a4:ea:d7:f3:a3:
fb:7c:8b:e5:af:e1:f6:fa:83:72:a3:87:a8:38:1b:
ea:cd:d0:9b:49:e1:38:60:a1:d3:96:f0:f3:21:6a:
7f:8f:08:7e:11:db:ff:1d:d0:fb:e7:21:5d:10:d8:
d6:b1:8a:91:8e:94:54:cd:29:89:a4:69:3f:4a:f7:
ed:56:57:b4:2d:12:18:95:6b:ed:96:e7:bf:38:98:
85:8e:c5:05:4c:35:97:af:51:6e:5c:02:57:c2:e0:
33:4d:2d:11:76:34:5a:9b:b9:7c:b7:ef:0b:6d:df:
9f:95:8a:0b:d7:eb:84:d8:c8:e0:fc:cd:f7:7c:8e:
c8:28:4f:1c:ef:9f:03:48:2c:eb:30:60:50:62:e9:
94:3d:fe:4d:07:97:26:ca:1a:f7:76:57:44:cb:97:
e1:b2:ec:d6:0b:a9:67:aa:1e:7a:c5:5a:ca:e7:dc:
76:91:42:28:b7:4d:15:be:c2:20:9c:7d:82:5d:fc:
e3:c6:df:19:e1:21:d5:04:1c:29:b2:e4:78:e0:60:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:B0:78:25:E4:33:96:11:73:D4:45:D0:91:57:5D:AF:F6:DC:DA
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3e:3b:7e:3d:e1:45:a7:ac:42:71:ac:ea:04:de:f1:cd:9c:
8c:c7:be:6b:15:03:f7:8b:63:ad:33:70:82:cb:e3:2a:f5:55:
3c:0e:ae:47:f3:bf:4f:f6:67:a5:62:09:fa:fb:a7:b1:91:78:
7c:da:d6:e8:72:5d:8b:eb:21:ef:a6:ae:5d:6b:f0:24:6a:66:
70:0f:c0:14:b0:76:cd:0f:37:34:9e:34:bb:0e:77:17:a4:6e:
25:19:c5:cf:13:d1:a4:d6:c8:0b:f6:c4:c7:9d:9a:ef:49:fc:
b3:9d:d4:56:69:50:b0:08:09:6b:fe:a2:09:07:29:fe:f9:1b:
09:78:91:36:25:36:c2:6f:46:b1:39:ab:25:bb:8b:2b:bb:c3:
a5:30:e9:9c:c7:43:59:3f:ee:ed:ea:d7:1e:fe:eb:c6:4c:e5:
0c:db:bb:c9:07:a7:a5:9e:55:0f:e4:a0:71:90:8e:cd:15:2a:
8d:71:87:d2:2d:e8:51:5d:40:64:a2:ab:f1:25:16:36:03:28:
e5:30:92:bd:d1:9d:07:77:1e:48:df:f2:eb:d8:db:ce:ec:f0:
e6:ca:86:2f:fd:05:2c:63:9d:03:2c:70:4a:ac:09:32:20:28:
38:f6:d4:c1:bc:cd:4a:b3:86:f5:7a:56:d2:89:5a:e3:02:d5:
da:b9:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:03 2026 by rpki-client