Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: 2rtX+FvCS7zYUZpx250mUUMJNcGmGrbs3ShcsmuPsVg=
Subject key identifier: F1:9C:46:0C:46:B8:87:00:69:B4:04:F2:AC:14:8D:81:64:2D:F4:48
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019E9CCE166CD57DB3D8051FBBED77C308F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1946
Signing time: Sat 06 Jun 2026 12:00:12 +0000
Manifest this update: Sat 06 Jun 2026 12:00:12 +0000
Manifest next update: Sun 07 Jun 2026 12:00:12 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: JSq1Q0OJSiWGUmC7a2fO4sEmjeHVZJYf1TqIP/zKfGw=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:ce:16:6c:d5:7d:b3:d8:05:1f:bb:ed:77:c3:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Jun 6 12:00:12 2026 GMT
Not After : Jun 7 12:00:12 2026 GMT
Subject: CN=f19c460c46b8870069b404f2ac148d81642df448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:1b:91:9c:01:6a:00:19:f7:e1:9a:3a:43:
3f:c3:e2:ee:29:1c:34:dd:be:83:00:05:01:21:a3:
cc:02:b8:7c:33:05:29:47:83:1c:67:4e:52:0d:08:
e8:70:49:f4:af:95:a8:da:c3:60:0c:7a:f9:03:86:
b6:1d:3a:4d:7f:a9:f9:1b:c2:73:fe:8c:f1:e4:1b:
87:f2:b7:ae:39:38:01:32:be:8b:ea:f4:d5:52:aa:
f8:9d:d2:ed:7f:55:bf:e3:bd:10:62:80:e1:8f:0f:
48:4e:40:66:67:65:ac:db:6d:b3:12:87:3b:e9:40:
c6:02:ca:fe:3d:7d:ff:ef:7d:4c:e2:1a:9d:b3:ad:
34:ea:34:59:a2:6c:92:f0:74:9b:02:d7:12:ec:e5:
62:bf:25:c4:12:79:e8:35:db:1e:14:72:9c:09:ce:
8c:5e:df:69:ba:36:5a:8c:60:1f:11:82:da:28:40:
6e:7d:6a:a2:d9:c5:2d:ac:ce:38:ad:c0:b6:08:9d:
1c:ee:15:79:11:02:1f:31:bf:b6:75:de:a6:63:33:
b7:a4:3d:91:44:ff:25:b6:d3:90:52:ce:28:ca:1b:
c9:53:56:86:cc:d9:79:5d:28:a7:cf:7f:28:05:4e:
36:c6:75:91:28:fc:18:78:db:a4:38:55:e5:49:bc:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:46:0C:46:B8:87:00:69:B4:04:F2:AC:14:8D:81:64:2D:F4:48
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0e:dc:9f:54:06:b3:12:3f:ba:c9:23:32:18:0a:b9:aa:0b:
bb:ba:b7:ae:99:49:c0:28:af:75:83:00:ab:e5:83:bd:c3:2d:
be:68:6c:68:75:94:be:dc:0f:b5:14:73:7a:1c:a1:a5:93:3d:
5b:7d:13:71:fd:49:bb:6e:41:fc:3f:a6:5e:d9:70:05:53:bb:
fb:93:04:88:ec:82:1a:69:4e:66:35:73:22:2d:86:5c:c4:84:
e3:df:24:87:75:ed:d9:7c:56:5e:6d:8f:16:cd:fe:6e:96:9f:
d3:04:a6:a9:74:57:b6:de:e1:9b:3b:21:eb:b1:a3:c9:76:9c:
77:ed:fe:46:22:13:5f:e6:95:e8:67:b9:7d:f9:75:aa:a1:12:
6d:a0:ba:e0:43:96:b9:73:96:81:82:7b:77:e7:f7:55:3d:e9:
37:32:6f:17:15:c8:76:5b:62:3a:a2:1a:e7:cf:44:64:fc:ff:
28:bf:9e:89:37:ca:86:63:0c:fc:91:da:33:a6:a8:65:93:b9:
4f:af:d8:95:6f:6d:18:f2:f7:e5:ea:aa:b1:d0:e6:84:5c:b2:
db:77:c8:e8:1a:83:67:3e:01:c9:18:84:e9:07:93:83:42:bd:
8c:24:3d:eb:a1:d9:24:be:f5:c1:ad:f7:36:68:3a:cf:ca:b4:
ed:39:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:07:35 2026 by rpki-client