Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: MK1Xl22buvdA6mgi+RIcFkx1PqUDFcKzyvfSJH/cczw=
Subject key identifier: 3B:CE:E0:05:A8:72:96:14:67:F8:6A:EA:A8:19:A5:6B:B4:03:0A:64
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019F1153123FBAF728828DECEE9DDEB9D1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0C9B
Signing time: Mon 29 Jun 2026 03:01:24 +0000
Manifest this update: Mon 29 Jun 2026 03:01:24 +0000
Manifest next update: Tue 30 Jun 2026 03:01:24 +0000
Files and hashes: 1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: 5j7ML61NbB2riy8dzqxqmG/Q1kWEtzIiN/up9Mvlimw=)
3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:12:3f:ba:f7:28:82:8d:ec:ee:9d:de:b9:d1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Jun 29 03:01:24 2026 GMT
Not After : Jun 30 03:01:24 2026 GMT
Subject: CN=3bcee005a872961467f86aeaa819a56bb4030a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:ff:ad:56:0a:7d:a9:af:e4:0b:b1:c7:49:
9e:84:f1:cc:8a:44:12:3f:0e:2e:bc:ae:a9:a2:c7:
97:7d:b6:07:24:51:c2:d0:22:d3:ee:ab:a3:72:54:
ab:a4:37:c9:f3:b8:56:fc:a6:ac:d0:77:b9:9b:2d:
74:82:f0:04:76:ab:63:a5:48:e6:73:1a:1c:ff:56:
cc:6e:8f:4e:e1:09:4b:e6:d2:0f:68:34:10:5e:a1:
ac:80:0f:a0:84:4f:3e:bc:1e:50:40:98:4e:3f:ae:
47:30:d9:87:12:f4:8f:b4:44:57:8d:e5:b0:bb:96:
9b:e3:93:e4:87:54:49:40:1a:cf:a7:4d:d5:da:a7:
af:2c:28:f8:61:63:b9:6c:b2:cc:d9:7e:2d:1d:f0:
f4:2d:36:64:94:66:78:b5:0b:90:40:34:01:59:c9:
85:6b:e7:99:ab:22:8b:ec:ea:33:b0:21:97:c2:2d:
96:47:ca:7c:2e:58:cf:92:ed:3c:9c:18:cf:75:a2:
d7:03:fc:70:cf:91:17:a7:ad:e1:33:56:ec:40:03:
3d:2d:5b:4b:83:6f:fa:de:17:ac:f8:28:ef:f5:b6:
8b:54:8a:e5:61:a7:6b:23:e4:05:e6:1f:00:cd:69:
87:02:0d:16:da:1c:83:c8:ab:43:bc:d7:83:dd:69:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:E0:05:A8:72:96:14:67:F8:6A:EA:A8:19:A5:6B:B4:03:0A:64
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:14:d8:64:a8:11:78:d3:0f:39:88:23:e3:9d:3b:1b:1e:1c:
15:75:30:8b:59:d2:62:e7:da:cb:9e:8f:4a:cb:9a:50:1f:a1:
ff:13:2b:f3:6b:93:83:e6:f3:81:d1:aa:d1:53:9f:38:98:6e:
1c:0c:1d:17:c9:63:65:c0:e1:bb:cb:51:0f:fb:df:b7:76:71:
d5:0a:7c:93:41:b2:46:84:82:19:56:91:23:2f:5c:84:ee:4e:
c4:84:5b:6e:ae:50:d1:8f:c0:26:c7:68:82:91:af:be:df:0b:
ba:ba:76:cb:7d:1a:d2:a8:52:cc:c3:07:b0:d9:9d:35:e4:03:
6d:19:f7:58:59:ac:d3:9a:5c:ac:b8:57:c3:5a:09:ec:ce:33:
ee:d8:77:8f:69:01:71:08:af:05:bb:5c:7c:6f:d4:0a:06:f3:
21:a7:79:06:33:0a:c6:01:41:65:be:50:84:3e:88:2c:4d:76:
c6:b0:02:00:5f:50:7d:b9:bc:97:7b:af:87:71:b8:60:f9:9c:
15:d5:49:73:56:fe:30:e1:92:ef:1f:8d:0e:d0:69:fe:85:a3:
c8:80:36:17:e9:18:65:12:d9:fa:fb:ff:56:33:99:0c:12:e9:
3f:54:21:6d:e5:0f:6f:1c:75:6d:57:86:ce:a1:5c:0a:6f:e3:
d3:37:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:48:13 2026 by rpki-client