Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: bFHCRh6iOH1B+HIQ4gdOSuZhZo1k5lFCVce+NTDq7no=
Subject key identifier: CC:DB:42:A0:08:62:A8:82:07:5E:4A:75:B2:B6:DE:B8:31:FA:79:FB
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 019EB68E0647DB5C6356D1A606900987BCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 06BE
Signing time: Thu 11 Jun 2026 12:00:21 +0000
Manifest this update: Thu 11 Jun 2026 12:00:21 +0000
Manifest next update: Fri 12 Jun 2026 12:00:21 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: QoO9Yq9kJob8Pu20w09b0P/yPWbNK7RUSeCvHNfk6MM=)
2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:06:47:db:5c:63:56:d1:a6:06:90:09:87:bc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Jun 11 12:00:21 2026 GMT
Not After : Jun 12 12:00:21 2026 GMT
Subject: CN=ccdb42a00862a882075e4a75b2b6deb831fa79fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:52:4f:1e:f4:8a:83:d8:bb:54:a2:1c:84:b5:
74:13:2d:e5:fd:85:8d:a7:29:f7:df:25:9c:b4:37:
9e:2f:91:60:97:ef:c4:d0:00:87:16:1b:1b:b5:6f:
8c:5d:22:1d:25:1f:dd:a6:3f:43:ff:3d:67:94:ad:
4a:f1:12:be:32:d1:5b:4b:fd:69:f9:d0:f2:61:c4:
1d:34:62:4a:65:e3:ff:b7:e6:b2:ff:dc:2e:cb:8f:
bc:b7:bd:6c:c3:e9:da:17:70:76:86:0f:5c:e6:11:
44:03:62:1c:61:0e:bf:0d:82:7a:c3:19:41:91:49:
0b:a4:e3:9e:20:44:77:6f:ae:8b:16:6e:75:ec:4f:
04:bc:f5:c6:c6:81:f7:29:62:e3:2a:a8:76:0a:a5:
46:68:6b:99:e9:da:8c:ab:2e:55:98:df:7a:86:97:
56:d0:52:ae:c3:6e:72:8d:07:ac:47:14:0e:69:fd:
62:7e:f0:35:b1:d5:56:f5:52:dd:83:db:24:fc:1e:
5b:0f:af:74:dd:ae:d2:79:c4:d1:c8:83:24:98:d3:
1c:9d:43:56:f9:1b:4e:5c:fb:b1:8d:be:99:b4:c2:
d7:85:45:34:a4:ac:1d:5c:3b:96:29:97:35:7d:ff:
39:ea:ef:e3:c3:3c:bc:cb:cc:a0:48:ae:02:43:b3:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:42:A0:08:62:A8:82:07:5E:4A:75:B2:B6:DE:B8:31:FA:79:FB
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:74:da:cd:0a:c3:65:bc:34:62:80:f8:f9:22:c5:ff:6a:09:
07:5b:e0:1a:43:73:a1:f4:e0:df:5d:58:0e:de:2f:cd:db:19:
83:0c:8c:54:9a:45:c6:a7:3b:df:72:4b:0e:c3:ac:54:92:c1:
82:98:bc:8b:cc:0b:53:27:78:94:bf:8e:5b:26:b8:6f:9c:c1:
f7:a7:3f:9d:6a:2b:0b:2a:0f:5e:fc:19:e0:0c:5a:89:25:b8:
29:e8:76:cc:a5:1e:54:fe:a1:3b:fe:8c:84:5b:88:ee:60:9f:
da:2d:3a:24:f1:0d:d6:1a:01:0e:56:cd:8a:ec:20:b4:63:7d:
a6:bc:17:7d:4b:1b:10:c7:71:1d:88:43:dc:58:b4:b0:0f:fb:
28:c2:a5:a4:da:44:7b:c9:a5:2e:e6:57:69:16:26:7a:b3:ac:
38:ff:53:ab:e3:84:e7:f8:61:ac:16:6d:9b:e2:e7:67:da:58:
7d:0e:fa:61:03:63:e7:f6:d3:99:53:d5:46:b1:ce:d4:f8:a1:
bf:8f:16:1e:d4:3f:62:c2:3e:6a:07:58:95:cc:56:d3:ad:63:
86:73:bb:4b:fe:eb:1a:80:97:c1:d1:44:64:1e:84:4c:18:1f:
64:f3:f1:fb:d1:4c:15:ad:a5:31:b5:87:cd:88:27:ec:c2:96:
b1:6a:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:38 2026 by rpki-client