Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: mL4QCeVPYE9q0c5DUQPgH83P/YFkaOJkerQ/wnv+dt0=
Subject key identifier: FE:B8:13:50:ED:3F:0E:E0:6E:85:A1:BF:0B:38:BB:57:18:F8:CD:E9
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019EB7A0E198836AABEEB105E142B4055AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0739
Signing time: Thu 11 Jun 2026 17:00:34 +0000
Manifest this update: Thu 11 Jun 2026 17:00:34 +0000
Manifest next update: Fri 12 Jun 2026 17:00:34 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: Y2vq3A92FK1duRe0LsPXRTQz7r0KIkl1YKehUzzq++Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:e1:98:83:6a:ab:ee:b1:05:e1:42:b4:05:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jun 11 17:00:34 2026 GMT
Not After : Jun 12 17:00:34 2026 GMT
Subject: CN=feb81350ed3f0ee06e85a1bf0b38bb5718f8cde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:d5:2d:7e:71:c1:69:3a:b4:ba:c4:6c:5c:
ba:8a:58:8d:b7:4b:0b:02:a7:87:73:b1:f3:52:09:
55:2f:7d:97:e6:8c:83:1c:6c:fa:6a:b2:c0:c7:b1:
5a:f8:dd:f3:79:b4:46:ec:60:89:ee:ed:6e:fb:94:
ec:58:65:17:86:24:4a:7f:7a:5a:16:2d:d1:d4:83:
c1:3f:5a:53:8c:bb:83:ab:07:2a:7e:fb:e2:1c:d1:
6a:41:69:3c:5f:35:7a:77:0a:a4:fa:b0:ab:6a:8f:
03:fc:f7:ba:8e:fa:af:8a:7b:66:b5:84:da:e4:95:
de:39:ba:79:3e:dd:bf:df:ed:2b:b5:2c:a2:9a:b2:
51:3f:0c:15:ee:98:9f:47:a8:58:df:df:e1:c3:78:
11:56:a2:91:ec:94:de:4c:6a:a9:ca:24:31:e3:a2:
e7:4b:12:60:81:ac:ec:45:ed:2b:8d:5b:6b:72:6f:
29:33:44:93:3c:d4:6f:c8:4d:ab:66:d4:b6:65:10:
02:80:8a:08:0e:8f:45:be:26:b7:18:0d:47:a2:48:
23:34:cc:49:3e:87:88:0f:70:9d:f7:dd:f1:80:13:
60:e5:b4:2d:89:01:9a:57:73:59:86:12:f0:f9:7e:
c4:09:85:97:42:e6:97:85:61:0f:3e:84:fd:e0:5e:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:13:50:ED:3F:0E:E0:6E:85:A1:BF:0B:38:BB:57:18:F8:CD:E9
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fc:8c:e5:ef:dd:9d:6b:7a:b7:a4:72:f9:b3:6c:25:2f:09:
dc:30:6e:00:27:75:62:bf:c0:5a:4a:27:ea:98:ea:fe:72:12:
74:bb:cc:14:ff:a6:6a:68:d4:bf:e6:1b:93:b0:f7:02:b6:4c:
80:ef:95:26:09:9b:52:67:06:6e:ff:20:82:68:37:35:0a:95:
e1:07:f1:f8:65:09:6a:76:65:72:b6:d8:a4:41:04:0a:e0:e3:
42:3d:aa:3d:b9:0e:2d:67:f8:c8:e1:b5:fd:b0:3a:42:f7:1b:
c8:ed:dc:8b:bf:9d:23:44:14:0b:fd:1e:ae:8a:21:7f:e9:5b:
0c:1a:ff:e6:06:d5:9c:d3:60:ca:cb:70:b9:f8:e2:53:68:c5:
d4:7a:4c:53:9e:77:27:2a:58:c3:61:cf:95:5a:c5:3b:dd:5a:
1a:e3:43:23:25:9b:8a:65:35:9e:2c:6e:7a:40:f2:9e:e2:88:
3e:ba:65:a3:cd:57:71:c7:45:20:40:3d:b7:c9:e6:ab:e8:bc:
f5:ce:6a:85:1d:d4:f0:03:54:a6:a8:9f:19:43:57:44:37:bd:
a2:c4:61:d4:7d:14:c8:83:b4:a7:44:48:bf:64:f4:5e:5b:08:
f1:19:69:a4:28:0e:5d:48:b6:6d:50:c0:8a:c6:5b:82:15:a6:
3f:15:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:14:54 2026 by rpki-client