Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: 0brhihNSmpNc8/TyAIh7hIUYSdI1qHc5jnXhi1g3NHc=
Subject key identifier: DA:28:AA:36:26:72:33:62:D7:9D:AB:CB:0F:51:7C:65:79:F4:26:49
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019E32CEDB5E13822A83C0875FD6B03FFE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0562
Signing time: Sat 16 May 2026 22:01:17 +0000
Manifest this update: Sat 16 May 2026 22:01:17 +0000
Manifest next update: Sun 17 May 2026 22:01:17 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: 5JwlQjW67Vio3NRU17BvS6O6zueGfyLygpLQeeHnfGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:db:5e:13:82:2a:83:c0:87:5f:d6:b0:3f:fe:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: May 16 22:01:17 2026 GMT
Not After : May 17 22:01:17 2026 GMT
Subject: CN=da28aa3626723362d79dabcb0f517c6579f42649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:2a:90:93:c8:a9:7d:a2:e1:c7:95:27:d6:
58:da:07:f4:44:77:b5:8b:01:30:0c:30:8d:29:c4:
01:6f:ac:09:e8:59:da:13:e4:4f:1c:ab:62:a4:46:
74:42:0d:b9:f4:89:20:a7:61:fa:af:af:0f:80:f6:
ee:85:ac:7b:14:84:9e:49:a2:47:7a:51:cd:10:9a:
c7:f8:c9:3e:8e:98:db:55:dc:8d:50:9b:c8:60:36:
06:6a:89:91:ba:84:08:ff:63:ad:84:c6:2d:27:f2:
d4:30:3f:de:18:8f:07:8b:45:c4:f9:08:a0:6c:5c:
db:de:c0:a2:ba:8b:71:ff:17:5e:b6:30:39:ba:90:
48:be:56:de:17:0f:db:62:b6:a0:b1:a4:ab:08:d8:
23:9b:f5:4e:1e:66:2a:ca:e9:f1:73:a8:38:37:eb:
55:5c:86:9b:21:87:a8:19:8f:0c:45:6c:e9:ff:a8:
62:a9:24:cc:22:c7:44:0e:7c:8a:1a:4d:18:e2:3d:
e1:8a:d4:2d:bb:66:52:40:ee:52:2c:4c:5d:3b:2f:
da:cd:73:e1:bf:2d:92:1e:f9:15:74:3b:36:d2:03:
46:d4:ec:03:87:3d:a0:d5:cc:12:a0:af:c4:e2:72:
81:a2:94:95:1b:bb:e0:79:62:aa:0d:d3:75:17:bc:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:AA:36:26:72:33:62:D7:9D:AB:CB:0F:51:7C:65:79:F4:26:49
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:19:53:58:e1:82:ac:f8:87:50:01:27:89:b6:f7:36:cd:61:
d0:c0:b2:98:39:72:38:4f:03:40:7a:53:49:36:00:dd:a2:31:
5b:32:98:7a:97:55:2e:77:fc:2e:54:fd:d8:76:49:5b:85:cf:
ff:d7:fa:f1:ee:bd:91:7c:0d:53:0f:43:be:8a:a9:bc:63:85:
c3:38:56:1c:92:d2:53:e1:c0:1a:3b:39:c9:5a:e6:7e:2e:0d:
e2:0a:38:00:22:65:1e:fe:76:d1:7c:e0:dd:84:6a:f3:e2:36:
d7:ef:a4:a4:e4:08:55:f6:5b:96:9a:1f:24:90:5c:a6:85:84:
1a:dc:93:fe:be:f2:04:fc:c4:3f:71:e7:ac:3d:4b:4e:bc:4f:
32:a9:b8:d2:b5:68:57:3a:d9:3e:88:04:4c:71:a7:b8:04:74:
72:41:b4:54:32:7c:eb:2b:cf:62:ee:99:fc:f9:cd:7b:15:7c:
94:ce:52:58:c6:4d:54:30:88:1d:55:f9:90:d4:11:5a:f7:9f:
fa:11:08:41:bd:1c:e9:49:3a:8e:f2:25:f6:c7:18:b1:62:31:
c8:2e:b4:ba:48:c9:2d:c5:b1:26:98:d1:a3:0e:bd:17:39:b8:
3e:3b:f4:f9:32:81:aa:b8:01:e7:fd:c2:d1:40:76:5c:6e:7b:
39:4a:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:05:31 2026 by rpki-client