Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: 8gpLPo1TPEjrF+8OvPnKGevRpL97S2ZE2RCiISnZnUE=
Subject key identifier: FC:B5:6F:17:C7:E7:70:C5:1F:23:95:F9:A1:10:12:7F:39:97:77:C8
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019EC2C9E8909929CEFD93FA06D085AEEBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 21:01:12 +0000
Manifest this update: Sat 13 Jun 2026 21:01:12 +0000
Manifest next update: Sun 14 Jun 2026 21:01:12 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: +SnyTJfSb0xSOZypVyqF47mQXcUBVupMNI2e33o7VPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:e8:90:99:29:ce:fd:93:fa:06:d0:85:ae:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Jun 13 21:01:12 2026 GMT
Not After : Jun 14 21:01:12 2026 GMT
Subject: CN=fcb56f17c7e770c51f2395f9a110127f399777c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:e6:4f:2e:c2:c2:33:1b:3c:c5:5d:06:fd:
ce:00:8b:b1:a0:fc:ca:34:15:c0:39:fd:2f:70:98:
f1:4e:ec:1b:9e:0f:f7:31:1f:27:30:bf:3e:f7:f9:
c1:a3:89:1e:5d:91:47:3e:5f:b0:c7:05:fd:7d:96:
e9:fc:9d:f1:84:7a:3d:91:70:12:b3:75:d0:fc:a0:
c6:98:ab:2f:dd:7b:cf:c2:47:aa:6a:70:e6:29:41:
d1:66:94:c2:a7:16:91:92:21:4a:32:fd:47:87:89:
6d:0f:cf:15:d1:b3:70:8b:ba:10:cc:aa:b9:30:a6:
38:f0:19:49:42:d2:43:d0:df:c2:de:2c:7e:94:39:
19:f8:66:c4:ce:8e:ec:16:b5:0b:46:ae:67:e3:ae:
14:4f:40:0f:83:2e:bb:21:74:8a:e3:02:54:8f:67:
ca:e8:76:3f:67:f2:38:ca:01:ce:2a:7c:8a:27:6f:
41:1a:9e:7c:e8:8a:15:8c:80:fb:27:e1:8f:db:d8:
fc:03:2f:dd:f0:0a:04:f2:11:f9:96:61:ff:94:2f:
78:05:46:89:04:d5:88:fa:4a:c7:89:cb:44:12:b9:
0a:2c:7b:73:41:71:84:4a:ad:9a:62:85:bf:de:39:
8a:ed:c8:96:58:e6:21:ba:52:65:05:c5:ac:9a:66:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:6F:17:C7:E7:70:C5:1F:23:95:F9:A1:10:12:7F:39:97:77:C8
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:75:74:cb:d4:48:51:6c:20:92:ff:91:2d:f0:ad:32:ad:
b5:7e:db:ab:73:69:76:a2:c1:5f:06:6b:98:65:fd:53:6e:8b:
fa:70:e9:84:ce:73:de:a1:1c:f8:89:20:f1:36:ed:f3:26:93:
87:07:85:39:1e:f9:1d:5c:59:a6:65:00:61:85:6f:c2:fe:c7:
98:22:aa:3d:a3:35:e6:db:c6:f6:91:65:1c:ee:da:10:83:9e:
d9:06:2c:c3:22:23:eb:46:1b:3f:b1:56:65:05:10:0d:80:b8:
a1:74:dc:3e:75:0b:1e:a2:80:e0:30:c4:ae:8d:c1:22:e1:b8:
98:75:9e:79:30:90:7c:0c:e2:1c:f4:bf:af:a6:ca:9c:83:6e:
ff:ca:4b:a8:53:24:1c:f4:6a:e3:55:fa:8e:46:f0:76:d8:ce:
75:25:e4:60:47:4e:1f:d5:29:e5:a2:b2:88:d6:76:19:91:69:
60:0b:7d:91:e1:a4:c1:28:84:23:5c:cd:43:9b:7f:5f:9b:73:
1b:48:95:0a:30:80:bd:db:fe:10:1a:46:38:e0:14:d0:47:d9:
c6:4e:65:98:af:dd:f1:e1:48:e2:74:80:90:93:7c:ac:30:ee:
02:d6:3e:ef:6e:29:a2:b3:00:e0:f5:37:7b:af:8f:a8:dd:04:
5b:2c:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:08 2026 by rpki-client