Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: rsh2Q2waY0kVgT9KaHckRflEm1y++l521B5L2Ob+hHw=
Subject key identifier: 9E:0E:1F:CC:50:01:CE:00:45:64:CE:FA:12:55:E3:EE:52:FA:FE:2F
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 019FA2CE5CBFF94C9A11396A0BCEFEE461EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 0898
Signing time: Mon 27 Jul 2026 09:01:00 +0000
Manifest this update: Mon 27 Jul 2026 09:01:00 +0000
Manifest next update: Tue 28 Jul 2026 09:01:00 +0000
Files and hashes: 1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: eRrGiVsGV+5T6Y9GJf413ZOca7CbwjZlG9q/9S9IB0U=)
3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:5c:bf:f9:4c:9a:11:39:6a:0b:ce:fe:e4:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Jul 27 09:01:00 2026 GMT
Not After : Jul 28 09:01:00 2026 GMT
Subject: CN=9e0e1fcc5001ce004564cefa1255e3ee52fafe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:f6:24:1a:b0:d3:ae:f3:df:d5:90:f2:e3:
aa:8d:d2:d0:ff:70:93:49:68:e8:cb:59:9c:af:ca:
18:ba:23:47:e2:00:03:ac:37:c4:03:45:83:0e:b7:
2d:2c:e0:57:6d:68:c7:b3:94:73:dd:03:48:9d:89:
c7:38:27:5b:f3:03:8d:fd:1a:90:44:67:44:d1:31:
71:96:71:1a:6f:d0:71:2a:ee:fb:89:b4:f3:40:f8:
fa:eb:fb:c6:af:6e:bf:71:e2:89:a7:c7:85:60:2f:
e2:0a:fb:de:f6:66:73:7a:81:d1:53:d7:bb:07:06:
65:56:4d:06:0c:39:3b:75:3c:58:a2:85:58:4f:80:
28:53:10:bd:55:60:c5:47:c1:74:5a:80:83:ff:0d:
79:ae:15:db:9d:c3:66:b5:1f:c6:36:dd:31:34:5b:
52:93:b8:81:fa:52:86:7b:70:05:cd:e5:3b:dc:ec:
cc:b9:f9:84:57:31:30:27:04:56:60:10:f7:00:1c:
0c:6c:c2:2e:ed:a0:92:a0:2a:48:25:89:4c:82:c1:
f3:91:ac:c9:dd:43:97:2e:5d:a7:de:c0:3e:95:30:
5d:02:95:70:dc:28:96:60:5b:bf:6a:69:a8:a2:1b:
e6:e4:71:14:29:03:6f:c3:eb:1e:49:0e:4b:7c:bc:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0E:1F:CC:50:01:CE:00:45:64:CE:FA:12:55:E3:EE:52:FA:FE:2F
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:24:3d:9b:44:45:3c:5b:dd:5a:35:7c:61:af:96:6c:63:
16:be:5e:b5:a0:72:11:ef:d1:d2:d9:21:52:af:fa:fe:88:03:
be:fd:1c:1d:29:5b:18:aa:1c:e4:0e:47:02:7c:43:7d:49:56:
7f:b3:4b:6f:6b:46:1a:9e:e7:f4:25:84:97:5f:1f:32:41:45:
5e:27:bb:d8:d7:d1:39:a5:0d:40:3b:75:f8:b6:c7:65:32:15:
f5:61:41:0d:f6:3e:bc:28:f3:4f:61:48:f6:df:87:21:e2:da:
87:1b:6a:8b:44:dc:28:5e:60:b5:ae:21:af:83:fb:fc:37:10:
79:3a:63:da:8e:3e:56:ab:9f:93:d9:d5:eb:eb:af:a9:67:c4:
2f:b6:ae:76:7b:2c:30:88:c3:98:c8:68:fa:18:e6:d0:f2:ee:
ca:7f:93:dd:71:61:0a:a8:e2:e0:df:e8:dd:67:ba:ab:0b:05:
63:b4:bf:c5:ca:3a:4d:bb:e2:45:b1:f3:3d:26:f0:95:6b:6a:
e8:d0:40:d0:77:92:af:a7:b8:86:95:6e:8b:8c:49:24:a1:4c:
24:4d:7f:19:2e:f8:4d:9c:9b:0d:02:cf:f4:ba:af:3b:81:b3:
b4:09:9a:b6:1a:86:16:38:ad:c5:bd:03:be:64:c2:4a:bd:ea:
27:5c:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:07:47 2026 by rpki-client