Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: onhOe3T6l8Z7AQH7x93GGQGBLF8kRr/ecYFWrmlAdhY=
Subject key identifier: C8:5D:4A:DE:41:6A:24:FA:70:AF:40:85:48:DA:15:F0:83:58:E1:E5
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019CFC194EFC9DAAFA7880B8B3A325B48969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 0462
Signing time: Tue 17 Mar 2026 14:00:42 +0000
Manifest this update: Tue 17 Mar 2026 14:00:42 +0000
Manifest next update: Wed 18 Mar 2026 14:00:42 +0000
Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=)
2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: eSrWq4PadEttqxdjF+kZXLWQIaZzeJptyKRlN4fmOaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:19:4e:fc:9d:aa:fa:78:80:b8:b3:a3:25:b4:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Mar 17 14:00:42 2026 GMT
Not After : Mar 18 14:00:42 2026 GMT
Subject: CN=c85d4ade416a24fa70af408548da15f08358e1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:e8:ee:89:97:4f:dc:2b:ac:ec:e5:e9:f1:
ff:9d:30:8c:0f:99:3e:bd:ee:c0:0a:4b:72:cb:cd:
8f:da:26:05:da:b6:82:99:f0:42:0e:e9:29:6e:9b:
f6:81:e5:10:3e:ec:81:36:c6:82:5c:68:c5:ff:ea:
64:59:77:b6:73:47:eb:7e:13:b8:79:44:b2:53:02:
75:f8:6f:69:f9:e2:b9:6b:68:70:8c:00:8b:7e:58:
f8:04:2f:36:14:06:15:13:b0:de:b6:c5:d8:1d:e0:
4d:be:e8:cf:0e:96:23:b8:e0:fc:90:11:af:9a:6c:
9b:90:76:58:66:93:2e:f4:97:d8:fb:99:5b:ea:70:
d5:1f:c3:66:91:ec:ef:03:9c:ec:a9:11:d7:79:ae:
8f:a5:01:f6:fc:08:b5:6b:ae:b4:91:e2:8d:33:fc:
d0:51:59:a7:8e:0d:23:40:bc:17:c5:a6:24:dd:88:
c1:06:82:a8:b8:f0:9a:1f:73:97:1c:1f:5d:5c:49:
0f:fa:35:5b:73:7d:69:3d:7e:96:c4:04:9d:9a:81:
a8:ae:2f:e2:1e:26:6f:c7:4f:75:6d:d9:ae:bf:46:
a8:0f:d1:f3:54:57:62:a1:d5:2a:3c:4f:7f:e7:62:
e7:95:00:2b:e5:f3:47:8a:fc:64:b6:61:62:0d:79:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:4A:DE:41:6A:24:FA:70:AF:40:85:48:DA:15:F0:83:58:E1:E5
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:78:3e:a1:84:2e:cb:9b:4b:4a:86:65:fc:82:6f:52:04:86:
e6:ce:48:fd:e9:93:31:3a:ba:c6:30:c3:0f:40:20:e0:ff:69:
51:0c:86:5c:4b:00:33:df:92:fc:06:4c:40:87:be:f5:31:5c:
ca:61:e6:98:bb:8d:01:67:4a:b9:f6:ab:e3:53:0c:03:a6:58:
7d:92:7a:78:43:8a:55:8e:bb:0e:35:01:73:17:6b:1e:db:fa:
d3:da:f0:60:10:ec:6f:e9:06:37:86:4f:89:79:06:95:6a:a7:
96:e4:c4:09:26:a2:c0:5b:c1:56:9e:51:7d:7b:1e:67:24:7b:
1d:42:b4:2a:98:e1:17:b0:97:01:43:3f:4e:6d:f9:c6:f4:04:
b9:83:9a:89:01:9d:c4:57:b1:9b:ac:e3:f0:d7:46:65:7e:e7:
07:b9:83:0b:e7:4d:28:5d:6f:72:6b:4d:4d:55:6d:1c:71:17:
9c:93:f1:fa:1f:f7:a7:87:3a:5c:8b:2a:18:68:30:5e:48:9b:
24:16:a3:a0:ec:55:b4:1a:cc:79:7f:97:f0:27:03:c5:20:f4:
d5:ef:f7:9a:73:5b:dc:9f:0c:c3:47:ec:95:49:ae:f7:4c:2e:
a4:6a:6a:63:ba:34:38:6c:4b:5c:78:63:95:da:e6:2a:48:5b:
33:da:84:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz8GU78nar6eIC4s6MltIlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx
N2Q3MmYwHhcNMjYwMzE3MTQwMDQyWhcNMjYwMzE4MTQwMDQyWjAzMTEwLwYDVQQD
EyhjODVkNGFkZTQxNmEyNGZhNzBhZjQwODU0OGRhMTVmMDgzNThlMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25jo7omXT9wrrOzl6fH/nTCMD5k+
ve7ACktyy82P2iYF2raCmfBCDukpbpv2geUQPuyBNsaCXGjF/+pkWXe2c0frfhO4
eUSyUwJ1+G9p+eK5a2hwjACLflj4BC82FAYVE7DetsXYHeBNvujPDpYjuOD8kBGv
mmybkHZYZpMu9JfY+5lb6nDVH8NmkezvA5zsqRHXea6PpQH2/Ai1a660keKNM/zQ
UVmnjg0jQLwXxaYk3YjBBoKouPCaH3OXHB9dXEkP+jVbc31pPX6WxASdmoGori/i
HiZvx091bdmuv0aoD9HzVFdiodUqPE9/52LnlQAr5fNHivxktmFiDXm4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhdSt5BaiT6cK9AhUjaFfCDWOHlMB8GA1UdIwQY
MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt
ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0
LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABng+oYQu
y5tLSoZl/IJvUgSG5s5I/emTMTq6xjDDD0Ag4P9pUQyGXEsAM9+S/AZMQIe+9TFc
ymHmmLuNAWdKufar41MMA6ZYfZJ6eEOKVY67DjUBcxdrHtv609rwYBDsb+kGN4ZP
iXkGlWqnluTECSaiwFvBVp5RfXseZyR7HUK0KpjhF7CXAUM/Tm35xvQEuYOaiQGd
xFexm6zj8NdGZX7nB7mDC+dNKF1vcmtNTVVtHHEXnJPx+h/3p4c6XIsqGGgwXkib
JBajoOxVtBrMeX+X8CcDxSD01e/3mnNb3J8Mw0fslUmu90wupGpqY7o0OGxLXHhj
ldrmKkhbM9qEZA==
-----END CERTIFICATE-----
Generated at Tue Mar 17 19:15:28 2026 by rpki-client