Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: qufQNR0wacR1AJrrYpQTccg1fvIdtF97nuLNN6r0f1c=
Subject key identifier: 30:E7:C6:47:A2:7D:29:1B:50:B3:09:12:5F:50:C6:D1:6A:E5:70:E9
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019EB6C50A8B07F171A88D129C212A39E9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 14D2
Signing time: Thu 11 Jun 2026 13:00:27 +0000
Manifest this update: Thu 11 Jun 2026 13:00:27 +0000
Manifest next update: Fri 12 Jun 2026 13:00:27 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: WMTXVNk/8FJkvaU2uAamHM/WRRFJtI/ZvH2KA+RoTK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:0a:8b:07:f1:71:a8:8d:12:9c:21:2a:39:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Jun 11 13:00:27 2026 GMT
Not After : Jun 12 13:00:27 2026 GMT
Subject: CN=30e7c647a27d291b50b309125f50c6d16ae570e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:b7:8c:49:5f:ff:92:5d:78:86:33:03:7c:
e9:92:2f:02:82:19:02:fd:63:e3:4f:b9:93:08:86:
85:5c:23:fb:23:e1:b5:b5:e3:e6:88:40:40:fd:97:
48:b5:f0:4f:c2:43:36:ba:a5:f9:6f:0b:73:a7:d0:
3b:7b:33:27:99:14:ba:d9:82:05:63:5f:fb:22:59:
1d:1c:40:e1:b0:a7:f8:5b:5e:bd:4d:c8:10:70:59:
1a:bc:b6:88:7e:e2:da:23:9d:cc:a5:5e:55:73:6e:
99:37:d1:21:5d:25:90:d8:2d:bc:68:f4:a2:c5:b7:
a6:09:e9:4b:c5:d9:ea:f1:23:9c:f8:20:bb:41:78:
77:8c:33:7c:96:7b:3f:a0:07:fb:7e:9a:2a:22:73:
59:0d:e2:2b:4f:f7:2f:65:5c:2b:6d:7a:96:5c:12:
34:07:f9:4f:a3:ef:7e:7a:7c:f0:ad:f1:ea:5e:0d:
6d:07:a7:26:cc:ed:f2:a7:78:4b:f9:0c:00:2d:a4:
d2:15:77:1d:f3:74:35:5c:9a:9f:cf:34:14:f7:d7:
ff:35:2c:dd:16:7e:2d:01:5c:5b:29:ca:e5:f4:11:
30:3c:dc:6a:e0:15:5f:6a:4e:02:91:9a:a7:bc:d1:
e3:c0:cb:22:6a:b1:70:9c:a3:52:66:18:8a:97:94:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:C6:47:A2:7D:29:1B:50:B3:09:12:5F:50:C6:D1:6A:E5:70:E9
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:84:66:df:90:a9:65:fd:78:30:5b:d6:cd:ac:57:e6:99:1e:
f1:3d:1f:39:a6:9f:5e:22:39:d0:83:79:6c:fd:c7:99:53:1c:
05:7e:33:50:ea:e5:40:cc:86:44:36:b2:c8:19:82:64:ba:4c:
90:c4:5a:5e:e8:ec:bc:5a:b2:f9:93:51:89:64:3d:1c:c2:ad:
65:78:de:f9:b1:f6:85:2d:a1:e7:08:74:bd:84:b0:9e:ec:54:
d5:4a:21:e9:74:fd:64:12:d6:c3:ec:c1:bc:d6:9c:b0:62:7b:
48:38:e2:3e:ad:4f:ea:35:59:10:48:35:c7:b8:85:e3:32:ff:
c8:a1:aa:db:a8:aa:5e:8f:c7:a5:3f:4a:9f:3a:53:74:ab:50:
93:8f:14:bb:b8:8b:ea:e6:60:40:03:46:06:66:28:d6:1c:a7:
24:48:89:d8:94:1c:06:82:c7:20:86:45:26:74:af:29:41:dd:
dd:ee:c0:be:97:e5:7f:0d:21:78:4e:e1:19:1b:b9:14:d6:9b:
06:93:09:ad:be:fc:2b:fc:ab:04:0e:d4:20:1c:8f:d0:f0:b2:
5b:09:d6:db:ed:4e:05:ff:3c:a2:be:47:08:68:c8:2c:80:3f:
4a:15:e4:2e:f7:31:87:76:05:8b:75:c8:ad:59:2b:cc:29:09:
5a:e9:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:57 2026 by rpki-client