Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: VVbPSX+Er6MMRSyANn1LL3dF+Fe4B6Ka+u0veWPH1kA=
Subject key identifier: C3:F0:85:3F:FB:07:7B:28:7D:65:86:32:36:DA:FC:44:A4:74:4B:F9
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019E9BF2697CC64CE36DEE7FF52D48F93140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1718
Signing time: Sat 06 Jun 2026 08:00:15 +0000
Manifest this update: Sat 06 Jun 2026 08:00:15 +0000
Manifest next update: Sun 07 Jun 2026 08:00:15 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: SiUPv1GqTx6rnnAnuxAQvHYi0h1jrnuJUqDsauEZ3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:69:7c:c6:4c:e3:6d:ee:7f:f5:2d:48:f9:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jun 6 08:00:15 2026 GMT
Not After : Jun 7 08:00:15 2026 GMT
Subject: CN=c3f0853ffb077b287d65863236dafc44a4744bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:69:6a:1d:f9:92:37:93:6a:b5:b4:4d:78:
93:21:9f:08:3e:86:ac:67:26:c2:da:32:b1:1f:0f:
ce:8c:ae:5b:ac:25:6e:f4:ca:54:d6:44:10:84:89:
7f:15:47:4d:f4:65:d8:0a:c0:26:40:2b:1b:f9:89:
d1:32:c7:39:ad:e5:22:95:30:c7:2b:1e:d8:f9:e4:
3b:b1:82:25:66:d9:f0:e1:67:94:5a:d2:b6:95:43:
c3:f5:5a:85:20:89:40:f6:5e:89:75:42:c7:74:7b:
e7:ec:4d:9b:92:a9:44:99:b8:36:b2:e5:dc:c9:0b:
a7:d8:84:9b:fa:1f:e9:0f:ce:c4:98:a9:8b:b7:fa:
cf:37:41:ee:50:79:6f:29:b0:ef:1e:84:56:99:f3:
e4:89:7b:e9:27:f1:bf:87:e5:40:36:5f:f8:8e:06:
d9:1d:8f:bf:ad:ca:61:b4:6c:7d:2d:c0:54:3d:fe:
e6:e7:3f:dd:42:53:02:a4:b0:81:c6:5c:5c:0b:53:
c1:4c:54:f0:72:c8:98:3e:97:a7:23:12:dc:b4:a8:
58:e2:8a:5e:71:b4:ba:b0:cc:d0:01:78:92:8e:a0:
f8:91:42:0b:bc:9a:7d:a4:0f:19:e3:ca:68:10:55:
e0:dc:4a:1b:fd:c4:43:08:3e:57:57:ea:37:da:86:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:85:3F:FB:07:7B:28:7D:65:86:32:36:DA:FC:44:A4:74:4B:F9
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a1:a8:5d:bc:17:e4:83:b7:32:26:9d:51:ad:93:28:a0:22:
a2:5f:d1:5c:2c:df:b8:6c:c5:f3:8d:f6:65:29:2d:e0:04:ab:
e4:f9:44:7e:c8:91:21:37:54:d3:d0:c3:78:2b:65:a6:20:02:
1b:de:ea:4c:84:bb:4c:82:72:81:29:cb:bd:ee:5b:67:b5:c7:
28:d5:65:8e:ff:96:4b:14:2b:f3:a4:e6:e9:7a:32:2f:40:50:
39:61:60:1f:90:04:18:4a:fc:f7:aa:e8:c4:11:52:c2:72:8f:
f0:9c:ba:c5:d3:d3:e1:8e:47:9d:45:ac:10:e1:1c:20:23:5a:
21:43:fc:55:04:0f:13:f7:6e:65:d2:85:87:1a:9f:5a:5d:00:
28:f5:7a:84:47:06:a5:87:cf:85:21:40:d2:35:75:04:f3:87:
dc:de:d6:65:09:4e:d2:36:39:55:e9:3d:ed:6c:57:f0:57:3e:
5b:e4:d3:c1:8d:ad:10:fb:de:31:87:ab:01:8a:c4:d7:fe:4b:
a0:d5:ef:dd:53:27:9a:1f:47:d0:4b:bb:6f:89:24:56:f4:7a:
85:75:9f:63:3b:6f:5d:b6:e8:6b:3b:d6:50:bb:c0:ab:cb:a5:
61:7f:7a:9c:23:d2:f8:ff:23:0d:4f:48:d1:5c:e6:4c:66:c4:
c7:98:56:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6b8ml8xkzjbe5/9S1I+TFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5
YjNiYTgwHhcNMjYwNjA2MDgwMDE1WhcNMjYwNjA3MDgwMDE1WjAzMTEwLwYDVQQD
EyhjM2YwODUzZmZiMDc3YjI4N2Q2NTg2MzIzNmRhZmM0NGE0NzQ0YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKNpah35kjeTarW0TXiTIZ8IPoas
ZybC2jKxHw/OjK5brCVu9MpU1kQQhIl/FUdN9GXYCsAmQCsb+YnRMsc5reUilTDH
Kx7Y+eQ7sYIlZtnw4WeUWtK2lUPD9VqFIIlA9l6JdULHdHvn7E2bkqlEmbg2suXc
yQun2ISb+h/pD87EmKmLt/rPN0HuUHlvKbDvHoRWmfPkiXvpJ/G/h+VANl/4jgbZ
HY+/rcphtGx9LcBUPf7m5z/dQlMCpLCBxlxcC1PBTFTwcsiYPpenIxLctKhY4ope
cbS6sMzQAXiSjqD4kUILvJp9pA8Z48poEFXg3Eob/cRDCD5XV+o32oaupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPwhT/7B3sofWWGMjba/ESkdEv5MB8GA1UdIwQY
MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt
MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw
LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6GoXbwX
5IO3MiadUa2TKKAiol/RXCzfuGzF8432ZSkt4ASr5PlEfsiRITdU09DDeCtlpiAC
G97qTIS7TIJygSnLve5bZ7XHKNVljv+WSxQr86Tm6XoyL0BQOWFgH5AEGEr896ro
xBFSwnKP8Jy6xdPT4Y5HnUWsEOEcICNaIUP8VQQPE/duZdKFhxqfWl0AKPV6hEcG
pYfPhSFA0jV1BPOH3N7WZQlO0jY5Vek97WxX8Fc+W+TTwY2tEPveMYerAYrE1/5L
oNXv3VMnmh9H0Eu7b4kkVvR6hXWfYztvXbboazvWULvAq8ulYX96nCPS+P8jDU9I
0VzmTGbEx5hW0g==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:20 2026 by rpki-client