Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: w+9V2ag1OZriREhXWB9REBQnOiKbp2tQ7CzDhDkj+rM=
Subject key identifier: A6:ED:DF:8F:2E:95:F1:79:E3:E1:C9:9A:3C:BF:32:99:CB:3E:DB:D0
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019D39AED8E3D1B8B62AA6B540B8B26DE556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0F34
Signing time: Sun 29 Mar 2026 13:00:53 +0000
Manifest this update: Sun 29 Mar 2026 13:00:53 +0000
Manifest next update: Mon 30 Mar 2026 13:00:53 +0000
Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: L7M5MSZPQiblAMrZcYKH6DRkzkeonBiTtZ7LdcvQRQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d8:e3:d1:b8:b6:2a:a6:b5:40:b8:b2:6d:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Mar 29 13:00:53 2026 GMT
Not After : Mar 30 13:00:53 2026 GMT
Subject: CN=a6eddf8f2e95f179e3e1c99a3cbf3299cb3edbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:4e:59:a0:6b:dc:ec:f9:68:d2:4b:69:dc:
f6:b7:72:02:df:4e:39:ad:a7:12:df:38:2c:7f:5c:
47:62:16:c7:32:ef:3a:fa:8d:c6:c1:bf:61:a0:6e:
e9:a7:bd:e9:a6:47:1b:93:35:e1:4e:44:40:5e:cd:
16:d6:77:43:f2:88:eb:3c:66:2e:d8:9a:a3:da:9a:
cc:20:11:44:6c:f9:5e:d3:65:00:54:4a:f1:76:58:
af:4c:44:fb:61:dc:50:a2:5e:88:71:63:a5:fe:36:
a4:e6:59:60:33:d8:69:bc:7c:67:b5:d6:a1:d5:7d:
90:bd:f4:8e:92:71:c7:a6:8a:6f:9b:10:f6:f3:2f:
ca:a3:cf:44:84:88:d4:b7:f0:13:7e:c8:e2:a2:d8:
92:3d:54:5c:08:75:7b:4e:03:d3:fe:08:16:dd:51:
c6:97:75:38:83:c5:d2:e9:a3:05:78:33:be:1f:6c:
00:66:0a:81:c0:1a:28:12:72:30:3c:02:db:54:bb:
d6:ab:fe:ea:de:44:5c:37:eb:60:e9:fd:73:97:1f:
2c:e0:d3:b2:a0:67:ab:0c:2a:bf:a6:67:21:e3:60:
8c:18:25:84:a9:82:7a:fa:57:b2:d5:f2:7d:24:92:
be:e4:a1:4c:6b:0a:6d:31:6f:17:be:d7:6c:78:e2:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:DF:8F:2E:95:F1:79:E3:E1:C9:9A:3C:BF:32:99:CB:3E:DB:D0
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1d:f6:0e:e4:89:a0:f1:2b:05:b7:47:63:78:c5:18:db:c5:
83:72:c3:43:bc:bd:24:24:c5:de:2d:55:66:77:54:37:7b:c8:
a2:c9:f0:bc:d1:8e:9f:da:3c:82:be:6c:49:18:0b:67:2f:7f:
20:34:a6:41:60:ec:cf:46:32:00:aa:e4:ab:23:96:be:83:6e:
cd:00:43:a1:9c:a6:8e:bd:04:2e:0d:42:7e:c5:d4:96:98:dc:
8b:7d:d4:64:93:e4:35:ce:14:7e:43:13:83:ea:27:29:2a:38:
3d:4c:26:db:8a:16:07:ed:35:49:5c:50:2b:fc:f4:0e:dd:0c:
04:14:80:9e:71:ed:20:b3:72:20:b2:0d:62:6e:ed:8e:39:e2:
6f:c6:cc:33:68:d1:49:8d:47:59:cd:9c:fe:e8:b5:11:c7:8b:
97:b4:2f:c6:c3:9d:b9:7c:69:d2:32:fb:d8:a1:63:75:13:38:
a4:a8:a3:03:57:00:c4:9e:61:5c:8c:b6:79:9e:3a:bb:93:83:
85:88:8e:45:08:08:0c:56:54:dd:c9:b9:7c:3c:54:91:6c:80:
b1:2e:2c:74:ec:c9:3a:79:bd:44:38:28:97:03:69:fd:b8:ca:
58:36:d0:09:1d:b6:b7:58:c7:6e:59:0f:e3:5a:92:8c:a1:d7:
de:5f:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:12 2026 by rpki-client