Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: c2FQOTxPrrTBSbOiRPJWkyj1Rh/MYCZ6f+QiWEEHFuo=
Subject key identifier: 8F:E5:F9:B3:17:5A:9E:55:1E:2D:1F:08:A3:45:37:04:9D:45:22:14
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019EB7A13816046AB3E1FA58BDDBC2A99288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 0D97
Signing time: Thu 11 Jun 2026 17:00:56 +0000
Manifest this update: Thu 11 Jun 2026 17:00:56 +0000
Manifest next update: Fri 12 Jun 2026 17:00:56 +0000
Files and hashes: 1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: /0W0d/a+wIn2Mp6wIGhgdu8VGaNZoj2h0noG5jlFMJU=)
2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:38:16:04:6a:b3:e1:fa:58:bd:db:c2:a9:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Jun 11 17:00:56 2026 GMT
Not After : Jun 12 17:00:56 2026 GMT
Subject: CN=8fe5f9b3175a9e551e2d1f08a34537049d452214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:c8:76:53:cf:9f:96:8e:16:b2:f6:8f:57:
c2:60:9e:43:21:11:ba:3c:87:e8:bc:04:a3:45:be:
58:06:bc:5c:85:e3:8f:2a:cc:75:d7:5f:f0:bb:e7:
df:cb:e9:86:62:45:08:84:92:4b:9e:ce:54:df:8f:
5e:4b:33:89:a5:5d:07:11:ae:1f:e5:d2:f7:ca:8f:
81:a8:86:76:e9:02:da:63:4f:a4:47:9b:bf:4a:03:
58:6e:1c:cd:8c:7e:5a:b1:61:f7:a7:f8:ce:c6:9f:
d9:99:3c:49:4d:5c:9c:48:9a:fc:89:1d:1d:9f:a0:
46:1f:d5:b9:93:a5:68:55:21:1e:b5:93:e2:9c:c8:
02:4e:a3:98:df:f3:87:52:c9:d3:94:57:a5:aa:d5:
e9:32:1e:ae:06:a8:d2:33:bf:79:49:92:f9:e0:28:
03:64:ee:64:f8:4c:e9:25:3a:ab:2c:03:31:47:6b:
14:35:bf:1a:d2:f6:0c:3b:dc:a6:2b:6c:00:d1:f6:
42:7e:71:5f:10:93:f0:fa:b9:e1:4d:34:b1:f7:78:
51:53:d4:53:91:f6:8a:55:36:e6:27:9d:5a:10:58:
90:e1:1d:66:b1:11:d2:25:14:65:fd:cf:ec:66:67:
90:81:f4:66:bf:4c:97:8d:96:39:bc:61:70:9a:d1:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:F9:B3:17:5A:9E:55:1E:2D:1F:08:A3:45:37:04:9D:45:22:14
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:45:1f:37:52:d1:e4:95:a7:3f:70:5d:5e:d4:68:e0:19:fd:
df:99:43:ca:c3:5a:98:3e:13:31:1b:31:a8:bd:43:0b:e9:c1:
0f:a4:b5:e7:9f:2d:86:75:39:fc:aa:55:34:a5:9c:ae:88:5d:
70:d4:e0:d4:d7:88:0c:62:51:2c:1c:9e:56:e2:79:b5:86:78:
f0:15:61:f0:29:50:03:63:e4:81:7e:fc:89:d1:c6:1a:76:87:
df:f9:09:fb:c3:7e:8a:47:e8:59:84:61:e3:4d:9e:1a:77:a4:
51:18:f5:0d:57:23:c6:d9:cb:0b:fa:55:57:d3:c8:b8:31:08:
c0:f0:78:7a:ab:e8:5a:36:1e:6b:e6:42:eb:f8:ce:a7:28:82:
a0:7a:0c:8e:53:bd:58:03:30:4a:f1:1b:55:ad:78:2c:94:80:
43:41:8b:cc:48:02:24:89:f0:a5:82:b9:af:b7:34:17:f3:9c:
e2:e8:7e:65:b1:13:72:ff:48:5d:9d:9d:e2:b6:d5:50:c8:2c:
4e:f8:61:ba:90:41:ac:04:82:83:7d:50:c0:3a:e2:35:87:bb:
0c:64:19:ed:90:83:77:5d:f0:ea:a8:29:16:9e:20:af:54:fb:
6d:74:90:91:69:09:73:dc:fb:d2:9b:db:24:2a:46:8d:85:da:
a4:b3:6c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:07 2026 by rpki-client