Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: Wh94+CcpnvpiS/28zBKhfa3jStW/Ys1tixJu0fOihLo=
Subject key identifier: 42:BD:7B:9A:C9:B7:75:51:57:C9:A1:B8:27:C6:26:EB:CB:AB:CF:52
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019DE5C65B66B6920955137CAC1C993A3FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 04DB
Signing time: Fri 01 May 2026 23:01:15 +0000
Manifest this update: Fri 01 May 2026 23:01:15 +0000
Manifest next update: Sat 02 May 2026 23:01:15 +0000
Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=)
2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: pLEgVh+fIMZHHk2XMaN5q+BLYXiDRe1g8GePs+DlnT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:c6:5b:66:b6:92:09:55:13:7c:ac:1c:99:3a:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: May 1 23:01:15 2026 GMT
Not After : May 2 23:01:15 2026 GMT
Subject: CN=42bd7b9ac9b7755157c9a1b827c626ebcbabcf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:82:24:6a:7f:5f:31:1d:bc:ab:f2:70:a9:
ae:96:7a:19:e6:19:4f:2c:bc:2f:6c:40:cf:11:c4:
8b:5c:d5:76:e6:f0:76:f5:e9:86:c6:08:08:66:94:
16:b0:4b:12:5b:00:34:50:0c:9f:f2:c9:9c:a8:da:
af:b7:ec:2c:95:76:29:57:b5:68:98:51:8d:da:cc:
11:e8:df:0a:21:ee:6c:70:f1:2c:2d:63:2e:f5:e3:
5d:d1:63:7a:5f:3b:a0:92:b5:b6:84:31:59:c1:51:
e5:0c:58:5f:5b:44:67:d9:cf:85:25:39:c9:b1:c0:
92:dc:2d:5b:65:d7:4c:77:06:b3:34:f3:6d:de:9e:
94:9c:df:d4:37:7b:c6:8d:34:22:e6:e1:05:9c:7a:
c7:a0:0b:b8:92:86:e5:ec:38:5c:70:40:a2:e7:08:
92:65:f7:54:60:8f:e6:bd:5c:cf:58:96:ff:54:0f:
ca:30:69:77:10:54:57:f3:84:c0:4d:7d:94:c0:d9:
f4:43:14:30:4c:ab:b8:aa:7c:98:b9:5f:c3:e9:ec:
35:78:ba:ea:3c:85:dd:f9:2c:a3:07:dd:ca:aa:03:
ed:19:d6:b1:28:1c:0a:b3:98:90:f4:41:3b:9c:eb:
3c:5e:65:13:14:fc:1b:29:f0:94:e4:16:99:a4:bc:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:7B:9A:C9:B7:75:51:57:C9:A1:B8:27:C6:26:EB:CB:AB:CF:52
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:84:d4:f5:d2:f9:10:f4:40:1b:dd:dc:91:e8:1d:a6:2a:60:
ed:aa:c1:ba:23:77:af:83:68:b2:ae:ec:45:5b:c0:60:08:86:
c0:94:1d:b5:5d:5e:ac:e2:f7:c7:b2:ac:a9:4b:26:b7:29:fb:
60:ea:de:c2:de:fd:8c:ca:d8:0f:80:0b:02:25:98:12:7d:31:
2d:26:4b:16:78:25:d5:f9:88:9c:40:33:67:d3:df:d2:a0:6a:
32:d5:00:e6:81:07:0f:70:77:12:a2:56:53:b3:66:db:6e:97:
dd:72:24:99:ae:84:56:f2:93:b7:51:be:24:ab:15:09:47:26:
3b:c1:92:01:04:68:2d:af:74:ba:38:54:9a:4c:cf:6d:06:32:
7c:12:db:27:66:e2:57:c3:0b:32:09:4d:cb:87:b4:da:e1:11:
cd:31:43:8c:af:13:c9:db:f1:18:c0:37:b0:e9:6a:2b:d6:86:
55:d8:15:88:25:0d:45:6c:a4:13:19:a0:80:b9:f6:82:24:3f:
0e:87:a1:c5:5c:3c:be:c4:fa:06:9d:41:bf:2d:ee:ee:78:f9:
df:fe:53:81:15:c5:7b:3d:d4:05:b3:31:d8:2e:bd:e2:3b:6a:
a7:7c:64:55:18:83:db:41:3c:38:a4:7b:10:8e:94:aa:5c:7a:
d2:c2:d9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3lxltmtpIJVRN8rByZOj/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx
N2Q3MmYwHhcNMjYwNTAxMjMwMTE1WhcNMjYwNTAyMjMwMTE1WjAzMTEwLwYDVQQD
Eyg0MmJkN2I5YWM5Yjc3NTUxNTdjOWExYjgyN2M2MjZlYmNiYWJjZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz2CJGp/XzEdvKvycKmulnoZ5hlP
LLwvbEDPEcSLXNV25vB29emGxggIZpQWsEsSWwA0UAyf8smcqNqvt+wslXYpV7Vo
mFGN2swR6N8KIe5scPEsLWMu9eNd0WN6XzugkrW2hDFZwVHlDFhfW0Rn2c+FJTnJ
scCS3C1bZddMdwazNPNt3p6UnN/UN3vGjTQi5uEFnHrHoAu4kobl7DhccECi5wiS
ZfdUYI/mvVzPWJb/VA/KMGl3EFRX84TATX2UwNn0QxQwTKu4qnyYuV/D6ew1eLrq
PIXd+SyjB93KqgPtGdaxKBwKs5iQ9EE7nOs8XmUTFPwbKfCU5BaZpLwvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK9e5rJt3VRV8mhuCfGJuvLq89SMB8GA1UdIwQY
MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt
ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0
LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4TU9dL5
EPRAG93ckegdpipg7arBuiN3r4Nosq7sRVvAYAiGwJQdtV1erOL3x7KsqUsmtyn7
YOrewt79jMrYD4ALAiWYEn0xLSZLFngl1fmInEAzZ9Pf0qBqMtUA5oEHD3B3EqJW
U7Nm226X3XIkma6EVvKTt1G+JKsVCUcmO8GSAQRoLa90ujhUmkzPbQYyfBLbJ2bi
V8MLMglNy4e02uERzTFDjK8TydvxGMA3sOlqK9aGVdgViCUNRWykExmggLn2giQ/
DoehxVw8vsT6Bp1Bvy3u7nj53/5TgRXFez3UBbMx2C694jtqp3xkVRiD20E8OKR7
EI6Uqlx60sLZGw==
-----END CERTIFICATE-----
Generated at Sat May 2 01:44:26 2026 by rpki-client