Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: 16yfm5+WcSk85hAjnvJ0w8poAqIBtvTmi7qHJBWILok=
Subject key identifier: 56:45:B8:87:66:71:13:A3:95:03:D0:90:23:7C:12:8B:D8:A9:98:68
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019E295DFFA63C632CD01256ACC9F19120FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0D8D
Signing time: Fri 15 May 2026 02:01:26 +0000
Manifest this update: Fri 15 May 2026 02:01:26 +0000
Manifest next update: Sat 16 May 2026 02:01:26 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: LG5MyS1m+c19JBl5YqEHBqyvyjacFYTnLV98ZWoPtM4=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:ff:a6:3c:63:2c:d0:12:56:ac:c9:f1:91:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: May 15 02:01:26 2026 GMT
Not After : May 16 02:01:26 2026 GMT
Subject: CN=5645b887667113a39503d090237c128bd8a99868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:90:ec:e0:43:83:8c:f8:f2:97:d4:1c:eb:
da:36:19:1d:69:71:51:2c:e4:17:63:d5:96:89:8f:
80:1c:ab:3f:62:b2:a3:57:96:cd:9b:05:97:a9:c0:
0c:7b:5f:c2:80:53:6a:25:bc:e8:30:64:b1:36:d9:
c4:e6:9f:ed:6c:60:c9:be:ec:12:d2:7d:20:67:71:
ff:45:d7:2b:5d:95:cb:2d:7d:43:b2:c6:13:24:9d:
62:89:55:5c:00:4f:d9:3e:c9:82:3f:5d:4f:d0:b3:
90:6f:52:f3:60:c0:df:82:b7:40:54:6f:fe:b6:56:
3c:43:ea:22:5c:ae:68:50:b9:20:9c:be:b9:89:fd:
3c:be:04:ef:81:10:b9:39:87:20:96:e0:82:20:fc:
3b:c5:78:0c:0a:b2:18:ea:0a:76:bd:ff:0a:ef:cf:
17:4c:67:3b:e8:d0:b8:cb:c1:ce:a2:e5:b7:1a:c5:
45:56:42:7f:dd:c8:3b:b1:39:59:24:07:f4:ed:a4:
3a:54:85:87:80:57:9f:be:3f:f6:c6:e3:6e:6b:93:
23:fb:6d:33:dd:d9:55:2c:3c:e2:14:68:1a:64:40:
38:1d:44:16:d7:81:42:cb:31:11:bd:7c:c6:d3:bf:
fb:a3:1d:be:72:1f:a6:4b:c8:6a:95:9e:82:86:05:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:45:B8:87:66:71:13:A3:95:03:D0:90:23:7C:12:8B:D8:A9:98:68
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:1d:15:8a:24:50:35:06:b9:8c:ad:c1:90:95:f7:17:3a:
ec:58:36:0f:6d:c9:a4:06:aa:3e:8d:7e:b1:2b:96:d4:c1:71:
5c:ac:04:91:69:70:f8:cd:46:73:65:10:e5:d0:86:4c:7d:bb:
cb:47:70:e8:4e:4a:35:77:75:31:df:38:5a:5c:e5:83:bc:30:
fb:2d:47:e7:27:81:9c:51:ae:39:a8:cb:85:6d:11:27:51:0f:
7c:37:61:a5:44:aa:dd:b9:e0:ae:ae:8c:24:10:5f:ac:5f:98:
09:b4:1e:90:a0:eb:28:53:12:46:dc:c2:a5:88:55:17:67:4c:
9e:ee:87:05:ac:44:e5:c7:96:cc:93:6a:3b:cb:05:69:a7:6a:
93:fb:c2:94:bd:2e:45:68:5b:71:6f:9c:75:d6:48:74:04:96:
8f:3c:4c:b0:81:9d:e6:83:37:64:d0:bb:e3:c7:ca:38:5f:f5:
61:7d:b3:32:6b:34:42:1c:f0:c2:31:94:40:08:86:11:5c:ba:
6b:8d:3b:4d:90:e5:98:92:79:21:14:f7:52:a0:94:93:d0:68:
7d:0b:0d:03:fe:89:57:16:24:d7:97:ab:4b:eb:d4:50:2d:a8:
d5:4b:e2:f7:74:1c:30:75:1e:16:f2:37:cf:60:e4:e9:2b:12:
a8:57:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:28 2026 by rpki-client