Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: mQrqQb3jSMQkJXbPUTGxVKdsWg9wxOdJ5KGfoRpYDhU=
Subject key identifier: F4:6F:46:2D:9E:8A:A6:10:09:13:4D:B8:B5:98:ED:11:78:F1:AA:2E
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019CEB944217059053AE2DA67365C0850842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 12C8
Signing time: Sat 14 Mar 2026 09:01:27 +0000
Manifest this update: Sat 14 Mar 2026 09:01:27 +0000
Manifest next update: Sun 15 Mar 2026 09:01:27 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: CPRrWPrYow/Vm6Nc3HiNYs0AaP0mCVR4RdoxVqFPUU8=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:94:42:17:05:90:53:ae:2d:a6:73:65:c0:85:08:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Mar 14 09:01:27 2026 GMT
Not After : Mar 15 09:01:27 2026 GMT
Subject: CN=f46f462d9e8aa61009134db8b598ed1178f1aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:f4:a6:c0:b9:ee:57:d4:89:d4:5a:cd:cf:
5b:7e:33:d5:63:7a:ac:d5:f1:5a:cf:c9:19:a2:4d:
11:db:c4:58:a2:40:b6:2d:f4:58:db:0a:ad:9b:42:
f7:9f:4c:7b:66:fc:85:73:2c:ff:72:4e:cc:8f:4c:
d1:52:06:ec:24:51:13:76:ab:52:4e:53:94:14:61:
cc:00:9d:b9:aa:36:a5:12:b5:b8:fe:2c:0e:b2:6d:
ea:3d:1b:f9:fa:42:60:fb:ce:11:c3:90:f5:90:4e:
4e:16:82:72:8a:dc:2d:b6:0d:db:d5:05:90:1a:14:
f4:2a:b3:93:24:2c:5c:d1:86:d0:2e:80:d7:45:62:
f1:62:ba:ff:5a:f1:73:15:78:51:d7:2c:a7:0e:4f:
66:07:d1:06:1a:f5:24:54:cf:24:e5:cd:f0:20:2c:
b5:eb:b5:7f:ad:7e:26:24:77:8e:a7:83:46:29:d9:
f6:5c:af:c1:f0:1f:5c:ed:a3:35:12:10:59:2e:9e:
98:62:c0:6e:cc:06:ac:bc:a0:ca:1f:d3:7d:b5:8d:
3b:7d:e8:da:48:7c:79:ce:32:e3:5a:27:47:50:86:
ee:84:2b:a0:77:ca:b8:7a:54:c2:42:4e:75:c6:9f:
9c:37:df:89:37:d1:41:b0:6c:5a:02:a5:6a:57:70:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6F:46:2D:9E:8A:A6:10:09:13:4D:B8:B5:98:ED:11:78:F1:AA:2E
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d9:f0:88:e2:eb:df:66:00:f1:68:8a:a6:0f:05:ab:42:31:
e6:88:e1:98:2d:cb:2a:7e:38:90:58:72:78:bb:15:a3:91:e1:
a4:1f:9c:c0:29:9b:ac:76:47:2e:65:05:78:d0:8a:48:cc:07:
01:a0:b2:b6:b1:fa:ed:53:0b:99:06:1b:f6:f4:06:80:21:f7:
53:af:ff:9a:dc:73:09:92:ae:60:44:2d:5a:76:f0:d4:4b:d9:
8a:e9:bc:13:53:9c:09:b7:aa:e1:6e:4f:48:81:c7:62:5b:0c:
46:ff:06:55:9b:e1:30:18:70:80:61:b6:18:00:b1:c7:8b:63:
93:1e:15:b4:03:e7:f2:86:40:3e:31:87:56:1a:16:1e:c6:52:
86:1f:ce:ed:f0:34:cd:6b:f6:a5:d8:ee:c9:3b:4e:44:54:5f:
c1:3b:cb:2c:5e:40:31:d7:fa:ad:c5:c3:8f:ed:99:3a:a7:f3:
ce:e1:9e:90:04:be:91:60:e0:94:6b:e2:9a:1d:6e:e6:ce:35:
7b:03:81:da:9d:ca:6a:71:15:31:eb:b3:bf:07:3d:fd:c8:1b:
24:11:d8:dc:30:ed:94:0a:1b:33:71:6f:6e:4d:33:fd:4f:5e:
a7:63:d9:af:91:5d:5c:f2:0d:9e:11:f0:4a:05:f1:71:63:02:
30:ea:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:17:16 2026 by rpki-client