
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: ommguCcCcDLxoGGkpT520RbuZ+vRwBR3A4/ScJTyvyk=
Subject key identifier: C5:58:8D:A6:D0:E1:2D:88:7D:61:70:AE:56:2E:94:80:89:E1:F3:71
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019EC224CAA2218CC6D7EEBC4D16CABF89F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0EAA
Signing time: Sat 13 Jun 2026 18:00:51 +0000
Manifest this update: Sat 13 Jun 2026 18:00:51 +0000
Manifest next update: Sun 14 Jun 2026 18:00:51 +0000
Files and hashes: 1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: NnWfbqE3RCYarSxHNFbWFdXEVUQhA6AB4lq+bPFjHys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:ca:a2:21:8c:c6:d7:ee:bc:4d:16:ca:bf:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Jun 13 18:00:51 2026 GMT
Not After : Jun 14 18:00:51 2026 GMT
Subject: CN=c5588da6d0e12d887d6170ae562e948089e1f371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:60:0c:e6:c7:a4:8d:b5:d2:7c:06:41:c0:
31:ff:8a:12:6b:2a:7f:a4:19:66:f9:1a:9b:d1:7e:
f7:eb:d6:7b:6e:54:f4:a0:4b:46:fd:69:ed:fa:a4:
6a:56:75:3c:6a:f7:55:6f:35:b7:83:1c:62:2e:18:
8f:c1:f6:9b:8b:42:b8:b2:43:94:56:b6:58:53:0c:
ce:08:12:b4:6d:3f:7c:0e:e1:e7:74:7a:cd:be:a6:
4d:54:fc:4d:7e:d8:b7:9d:d1:cd:d9:01:1f:5f:a6:
35:0f:de:c0:35:0b:44:5c:1c:86:b0:ad:c4:53:47:
be:f1:71:6c:db:a0:92:3c:bf:2c:b8:9e:31:e7:d6:
71:33:f6:90:c5:e8:b1:7c:68:73:57:20:6a:d5:92:
17:eb:e5:8d:8d:d2:f4:19:cb:b3:f6:59:d9:52:55:
f7:84:e8:27:5f:fd:72:05:d7:57:35:af:f5:c5:e4:
39:4d:06:0c:1a:82:67:2c:b2:16:97:a4:fc:6c:08:
d6:15:51:e6:bd:85:b4:ca:4b:9c:ca:8f:a2:eb:6d:
d5:3b:c1:1d:23:0f:1b:0b:4e:ee:f0:b0:44:a8:62:
1d:09:4c:1d:18:ba:53:ce:74:10:01:46:bb:5d:c8:
ab:cb:0c:6c:03:da:9e:9e:23:08:ae:96:bf:59:45:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:8D:A6:D0:E1:2D:88:7D:61:70:AE:56:2E:94:80:89:E1:F3:71
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:8e:ad:72:5c:9c:ee:26:c5:46:62:4a:b2:3c:7d:2d:26:
f2:74:24:4c:60:32:01:a7:6c:1e:cd:26:4a:c9:8e:ad:fa:a0:
6f:4b:d3:96:77:36:f5:56:76:66:1b:6f:1f:39:2c:b1:94:7c:
bc:e0:ba:25:e9:7a:13:ee:b3:57:a2:7c:a2:86:90:71:18:fc:
14:ca:c3:c8:f2:c2:a3:88:84:42:0f:59:95:87:77:e2:4f:d3:
ad:e6:68:5f:ef:eb:f4:75:02:ef:87:cf:86:85:fa:66:46:92:
fd:af:9f:cc:a1:0d:fb:21:9a:64:d4:d4:81:86:47:cc:a5:6d:
6e:79:d7:2b:90:d0:d7:a1:4b:f1:1a:29:92:db:9f:2f:46:ac:
4b:17:a7:de:d1:6c:2b:90:9a:c6:ef:49:c3:85:cc:ba:ce:e3:
b0:be:f4:57:15:6a:31:39:b6:9a:22:20:04:5b:72:d4:6e:83:
83:c6:c2:b0:12:e5:2d:19:c1:32:a7:38:2e:f7:60:87:29:f7:
97:53:92:1f:2e:d0:24:9a:e1:13:bb:bd:73:d3:33:da:3f:55:
10:50:ba:f2:2d:a1:58:12:38:44:7a:c7:85:3e:c5:e4:3d:41:
ea:94:04:f0:7b:f9:a9:14:9c:5a:bf:d9:f2:4f:55:8a:66:ea:
91:27:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:10 2026 by rpki-client