Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: bnmsINU62fsDXMlxTyeETQvySJe2fsIujTsXK3Xfk0I=
Subject key identifier: 3D:FD:37:19:87:7E:C6:79:11:2F:DD:07:29:81:E2:E7:D2:98:CE:4F
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019F1B690779CBBBF0C02FC3580D80CE65E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 19A4
Signing time: Wed 01 Jul 2026 02:01:35 +0000
Manifest this update: Wed 01 Jul 2026 02:01:35 +0000
Manifest next update: Thu 02 Jul 2026 02:01:35 +0000
Files and hashes: 1: PHg3Ww569zMDLEj_XkzXkt_l28U.roa (hash: 5pJ4hX6iwllF4hbtS1Bn9jqzOhPSmXxQOqAVEn4F03k=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: UIgVZYIPzipnNl0UTAI/lL9O4dKgERqhf+TRJQ0o4Ag=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:69:07:79:cb:bb:f0:c0:2f:c3:58:0d:80:ce:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Jul 1 02:01:35 2026 GMT
Not After : Jul 2 02:01:35 2026 GMT
Subject: CN=3dfd3719877ec679112fdd072981e2e7d298ce4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:f3:82:20:f6:e4:eb:41:d1:dd:74:1d:d9:
7d:95:85:22:18:16:ee:f4:d3:28:2b:f0:22:70:0d:
53:47:8c:6a:90:70:56:f1:2d:20:fe:70:43:4c:28:
65:15:9d:89:15:af:7e:d2:77:9e:36:11:1f:37:3c:
6c:e9:d5:81:a3:ff:fb:a2:0c:4f:60:63:16:e7:64:
11:88:29:7b:0b:73:6c:bd:1d:a7:ba:ba:8d:b3:5c:
2f:2a:44:84:1c:1e:da:1f:be:73:93:b4:72:d4:eb:
69:e5:2b:60:f4:fa:23:af:6a:22:55:2b:8b:2a:45:
93:63:d9:c6:08:33:41:10:66:7b:18:7c:ab:41:fd:
57:40:a7:6d:b2:c0:26:e2:68:b5:80:b0:bb:09:b2:
f6:17:c1:5d:bc:04:31:df:b4:27:2a:70:83:94:79:
e5:95:2a:27:c2:45:e4:c0:28:41:73:e0:44:2d:58:
aa:44:a2:81:0f:0d:a5:a9:64:10:27:50:0d:34:17:
18:ec:7b:72:c0:b9:78:2b:19:c6:91:9f:a2:95:e6:
5b:c5:65:4c:90:3a:c7:1b:93:4a:22:42:83:18:70:
26:e2:8c:72:b9:ad:93:cc:2a:fe:a0:b7:e0:af:0e:
6a:74:33:d3:b6:92:a8:76:44:b5:3d:a8:be:61:df:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:37:19:87:7E:C6:79:11:2F:DD:07:29:81:E2:E7:D2:98:CE:4F
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:f3:69:95:34:bc:87:9a:52:50:fe:34:a6:3e:a4:e5:03:
31:6f:52:88:1b:12:2f:75:9f:90:95:cc:ef:7f:29:34:f5:8c:
e3:07:eb:60:2b:58:ce:19:69:f0:c3:63:dc:46:86:03:35:e1:
52:0c:45:e0:64:40:3a:54:c1:3b:84:6b:d8:e7:d6:4b:ec:19:
cb:ed:94:02:9d:db:d2:53:6d:9f:ba:58:06:62:8e:04:1d:36:
51:3c:fb:9f:28:24:59:03:b9:00:59:04:91:8e:02:4b:86:13:
cd:49:19:d3:76:f8:d6:c6:ab:de:72:cb:f4:95:3d:9b:7a:33:
ca:32:f9:f1:8e:0e:89:3a:d7:a5:95:fd:22:6f:d6:d3:c6:fb:
5a:12:89:3d:08:36:68:d5:67:be:44:0b:35:32:a0:de:14:57:
97:9c:c5:c0:ff:16:fd:14:25:aa:10:5a:4e:cd:0d:27:5a:c8:
06:d8:2a:9e:be:9b:90:86:59:75:49:39:7e:6a:1b:45:8c:4c:
9e:19:ee:94:e3:02:fa:40:9d:64:4f:0e:64:36:d8:cd:98:47:
04:37:6e:64:3d:40:b0:5d:a5:23:cd:c0:3c:2c:33:22:a9:a9:
68:ce:05:30:59:36:6a:d7:20:51:49:de:ee:ae:84:57:57:45:
3f:b3:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:31:33 2026 by rpki-client