Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: loqGG2kvgJg04JBwbVberQzT9efDqy6QIlNBcLh4KBk=
Subject key identifier: 9C:3F:59:A0:F0:A5:5D:54:43:40:BF:FA:9E:74:BF:5E:D5:D9:38:4B
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019ECE60C9ED61F023448E2D6F6D746427B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0A6F
Signing time: Tue 16 Jun 2026 03:01:50 +0000
Manifest this update: Tue 16 Jun 2026 03:01:50 +0000
Manifest next update: Wed 17 Jun 2026 03:01:50 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: VFHOXDqe4Smq7FRmHlFt8AuNLFDMEG4Dc+AQtRoV7NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ce:60:c9:ed:61:f0:23:44:8e:2d:6f:6d:74:64:27:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 16 03:01:50 2026 GMT
Not After : Jun 17 03:01:50 2026 GMT
Subject: CN=9c3f59a0f0a55d544340bffa9e74bf5ed5d9384b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:1f:b8:0f:f9:a9:88:c5:55:09:56:3e:1d:
38:f5:9b:c4:82:16:02:a5:b0:e2:ba:0a:8d:53:db:
8b:c7:2a:4d:f3:11:45:21:f4:4c:db:22:6a:e0:b0:
7a:1d:ed:6f:2a:1a:0a:d1:ab:0c:01:e0:de:97:95:
e5:4f:2d:ba:4b:04:72:37:07:d2:6c:c1:8d:26:e0:
7e:ee:e3:d6:3f:bf:35:f3:ee:a8:f6:45:00:2d:de:
90:65:e0:df:ec:ba:00:55:44:b6:8d:33:b2:34:20:
48:ab:90:4b:38:e2:a0:14:4a:c6:99:87:c1:c8:d2:
db:d9:21:85:09:a7:b7:ac:d1:a6:54:92:64:3b:ad:
a3:f6:d8:ac:fa:59:2e:66:75:5a:a3:9f:ae:06:0a:
92:a7:21:03:4b:05:71:27:d7:de:37:59:0c:71:cf:
c9:9e:4a:f3:47:88:e4:49:05:31:3a:e7:83:04:5c:
85:fb:d8:f5:8b:be:e8:00:3e:4c:9d:1d:1d:51:38:
88:1f:f7:fd:7d:8c:63:a5:ac:28:0b:bb:17:ab:b4:
16:58:37:bd:db:ae:18:e4:1a:be:06:99:d4:d5:82:
78:99:14:25:a8:04:9c:68:50:44:96:27:3f:3f:3f:
64:a8:7f:7d:b7:b9:c6:23:05:d8:a4:f5:25:20:9b:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:59:A0:F0:A5:5D:54:43:40:BF:FA:9E:74:BF:5E:D5:D9:38:4B
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:8c:80:90:c3:08:87:20:ba:82:39:97:26:84:cd:41:0e:
b6:c9:4b:7c:ec:f0:f3:4f:61:89:59:0a:c4:b0:1b:9c:86:77:
9f:39:0b:c8:ac:05:d5:97:83:78:72:6e:c4:b1:d1:ab:91:37:
f9:0c:17:38:2b:fc:23:38:72:ad:10:16:51:9c:72:fb:9a:6a:
1c:bf:42:31:6d:36:26:ad:59:bb:2d:df:9c:de:e2:6f:af:aa:
4e:e3:15:6c:a3:7b:80:6d:1e:22:04:1a:b9:e7:f5:ab:42:4a:
ee:bb:34:c8:92:8c:0a:56:63:0a:89:85:26:f7:4b:31:b1:57:
c6:f9:61:f6:54:7a:27:7c:65:4c:e1:da:fb:c0:ac:1b:3d:1b:
da:a0:48:94:dd:3b:29:d3:e2:96:5c:32:ef:e5:b7:c6:38:7d:
26:d5:f1:61:57:a3:28:48:dc:21:36:73:2b:35:62:7d:3e:20:
bf:78:b2:9b:f0:03:09:ee:68:06:8c:04:29:e7:59:55:a3:55:
10:a2:7c:14:c3:04:3a:81:99:6f:6d:9e:48:77:41:1e:75:58:
41:a9:41:ca:d5:64:4d:0b:71:38:6a:01:f2:97:28:8e:42:12:
3c:7a:d3:e2:63:1b:53:8c:f6:cd:dd:02:14:24:fa:9e:e1:c8:
af:6e:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:20:45 2026 by rpki-client