Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: IKruKNNnrwj0oo5TPJxt6ZXq3pf7rDE88iqKT6J2G80=
Subject key identifier: 9C:8C:09:C1:49:66:8B:1F:B3:4F:30:EA:B6:42:37:49:60:0A:0B:2B
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019CC8999D9F16FF14430DE90AC2E2DFFB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1626
Signing time: Sat 07 Mar 2026 14:00:36 +0000
Manifest this update: Sat 07 Mar 2026 14:00:36 +0000
Manifest next update: Sun 08 Mar 2026 14:00:36 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: 103dEmqdZsFkFGTb6Gyp7ytajT1uv8PrO61cFPkKAvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:99:9d:9f:16:ff:14:43:0d:e9:0a:c2:e2:df:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Mar 7 14:00:36 2026 GMT
Not After : Mar 8 14:00:36 2026 GMT
Subject: CN=9c8c09c149668b1fb34f30eab6423749600a0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:5e:1c:33:3b:2c:d5:bc:70:2e:25:ff:d3:
96:28:dc:b9:fd:23:7c:f4:6e:53:10:8c:9f:b0:5f:
7a:ea:6f:d6:24:f8:fa:e6:26:e4:31:21:0c:24:82:
fc:97:d2:f8:d9:0d:69:ce:12:b1:7e:45:38:27:e2:
cd:f5:0a:67:2b:ec:e6:b3:1e:c1:86:f2:fd:46:18:
16:f0:7f:29:0b:98:cd:5f:02:da:64:aa:73:48:9a:
35:dd:6e:82:80:24:72:84:b8:cd:4e:d6:1b:b4:7a:
42:aa:d4:21:cf:aa:18:a6:6d:c0:22:1d:a1:7f:50:
4c:d4:70:8d:f3:97:f8:9b:e4:dc:a2:ef:49:59:3a:
f9:4b:eb:bd:03:dc:45:60:93:72:0c:9b:2f:70:8e:
ba:f3:4d:cf:35:cc:ea:1e:87:a4:64:76:da:10:06:
02:19:58:17:71:9f:79:6e:b5:c7:6d:87:f2:06:05:
a5:50:b6:8d:00:51:98:93:3a:69:30:05:8c:a9:fd:
15:60:c0:07:a0:13:77:9c:aa:56:60:e9:78:53:67:
6b:b6:aa:26:12:b2:cc:af:2c:49:30:bc:c0:c1:05:
b5:97:65:96:55:ae:03:e3:64:57:15:98:90:74:36:
38:42:3e:58:74:07:71:81:2a:69:b1:b5:2a:a8:90:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:09:C1:49:66:8B:1F:B3:4F:30:EA:B6:42:37:49:60:0A:0B:2B
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:72:a3:d1:ac:2a:72:70:28:aa:cf:aa:de:72:fc:e2:bc:ca:
07:c8:70:ef:96:10:49:30:b1:79:54:0a:08:2b:85:b6:1d:11:
0c:8a:a0:b8:7d:ba:81:b8:33:9b:03:72:75:e2:0c:68:b5:af:
e0:b4:a4:1c:83:41:c6:77:c5:dc:ba:48:3a:5e:10:50:b1:a1:
50:9d:95:87:e3:d8:c5:16:5c:3d:bd:21:1a:b2:0d:a9:7e:69:
ed:2e:e3:71:fa:a4:8d:95:29:58:e3:44:66:32:41:07:53:ba:
1c:0a:d9:5a:27:85:9a:fa:c6:05:51:d0:44:03:08:8f:85:28:
7f:c4:65:d5:06:d4:d4:80:d3:f4:a3:67:0b:f6:bf:0a:28:53:
87:dd:7f:f3:78:42:e4:a7:dc:ce:6d:41:38:c9:5f:77:87:95:
40:54:4d:df:d1:0f:bd:97:3d:67:4e:75:cb:fb:c7:8a:c1:a7:
6a:2d:36:ff:94:59:2b:e8:7c:6f:6b:2c:f0:c8:ff:3d:20:53:
5e:ae:ea:57:0e:92:fe:8b:ac:e9:18:f9:5e:7d:03:7a:97:6e:
16:6f:62:d9:44:03:f7:5d:01:5c:ed:c0:3d:9e:3f:a4:c4:ca:
ec:5b:aa:19:c9:5c:80:90:10:ae:f0:0b:01:d9:c4:3c:ca:36:
40:b3:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:34:08 2026 by rpki-client