Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: OzxfvPEaa1zTaQNhs6ZS3Ud8dNCqK6H4CfeJpQwVxGg=
Subject key identifier: 59:0C:F2:4F:D5:E9:DE:4C:F6:74:5C:B2:4C:27:49:09:82:4D:E8:C2
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019E8FB7AC9303194D4DA32991E9FEA974C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 13A0
Signing time: Wed 03 Jun 2026 23:00:39 +0000
Manifest this update: Wed 03 Jun 2026 23:00:39 +0000
Manifest next update: Thu 04 Jun 2026 23:00:39 +0000
Files and hashes: 1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: oevdXm9OWQ+eT230XhN7szbNgTp15f97EcxBovC9Ajk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:ac:93:03:19:4d:4d:a3:29:91:e9:fe:a9:74:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Jun 3 23:00:39 2026 GMT
Not After : Jun 4 23:00:39 2026 GMT
Subject: CN=590cf24fd5e9de4cf6745cb24c274909824de8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:63:98:46:bc:92:7c:2b:df:ee:b0:21:8b:
d2:bc:0b:35:a5:16:66:5a:22:0b:87:55:83:29:43:
94:39:67:98:1c:f0:1b:33:cc:f1:51:36:d6:5c:a6:
80:cf:32:25:ec:f0:eb:55:13:be:4d:a9:f7:82:c8:
9b:1a:83:7b:14:6b:a0:99:7a:07:67:a4:d5:26:06:
79:70:c5:dc:2a:2f:5f:49:45:d8:70:d9:13:9c:25:
37:75:18:ea:02:0b:eb:fa:63:db:21:19:b3:41:fd:
cf:cf:52:93:12:d0:44:79:75:5e:1d:3b:32:ef:20:
95:c1:1f:31:95:81:e8:fd:bb:ae:dc:6d:a5:17:dd:
90:11:ca:9b:87:3b:58:59:7a:93:ac:1d:35:b4:43:
b4:d4:3a:0e:0d:28:9f:9e:74:c0:a3:da:3a:1c:ae:
f2:5d:6d:fa:ef:fb:aa:44:51:ea:9a:88:b9:82:02:
4a:be:ad:ab:d1:e0:8f:fb:c0:ca:06:dc:21:ec:fd:
31:d3:c7:1c:d2:72:12:4c:4e:d1:6e:7a:f6:33:f3:
49:f6:c2:dd:39:02:52:94:19:da:a8:c0:68:e2:fb:
1c:fa:e4:f2:bb:50:d8:29:0b:cc:6f:07:23:3c:30:
b7:0b:22:d8:0f:69:08:5c:74:f4:83:62:07:9d:13:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0C:F2:4F:D5:E9:DE:4C:F6:74:5C:B2:4C:27:49:09:82:4D:E8:C2
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:e0:07:56:e2:f0:4d:42:ae:41:73:22:6a:17:79:e4:4b:
6c:95:69:23:37:94:a5:b7:f6:4a:ee:c1:57:84:66:a1:cc:20:
a4:23:2a:bf:0c:b2:8d:c8:7d:c0:3b:5e:d8:dc:7a:42:60:77:
96:1d:e5:e8:1e:68:c6:26:3c:f3:e4:91:f0:43:8f:0b:d1:a1:
ac:2b:52:e9:62:75:f8:c0:d0:e5:2b:5a:e6:ec:c8:b1:05:d4:
2a:7a:0c:f8:90:d9:2e:15:33:dc:71:06:b0:9d:db:44:cf:db:
68:b2:33:67:47:74:dd:a2:d1:d1:64:b9:02:1c:5c:87:7d:89:
92:88:4e:01:1f:f5:26:38:dc:b9:aa:a4:74:92:24:cb:90:ab:
0c:46:fc:75:1f:af:1b:2a:aa:82:0b:78:bd:32:aa:8e:13:a7:
4a:e8:33:93:05:c0:fe:8f:20:4a:97:f8:54:1a:7f:bd:82:f2:
15:b0:6e:d1:d6:a0:d0:0a:a2:2d:d5:ef:0c:ce:37:6d:35:8a:
15:84:0a:c2:48:8f:d8:8d:48:fa:6b:45:85:1f:fa:61:5e:51:
61:0c:90:14:d7:f5:1f:f4:d1:9e:a8:c9:a4:1a:0e:e8:47:e9:
07:74:23:41:56:8a:e2:05:18:c7:d1:93:60:33:9b:ae:e4:4f:
1a:cb:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:12:51 2026 by rpki-client