Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: W6p7L2FrALP/yXR0o3zjd7Q0pFh9BQVVl0sHGVJp/28=
Subject key identifier: E3:8E:3D:D4:90:04:85:AB:BD:82:B9:01:8D:3E:C5:07:67:07:1E:89
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019E1FEC425D6DA8A7AF851A39661F05412A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0C1E
Signing time: Wed 13 May 2026 06:00:37 +0000
Manifest this update: Wed 13 May 2026 06:00:37 +0000
Manifest next update: Thu 14 May 2026 06:00:37 +0000
Files and hashes: 1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: LlUFeWr7UPLUOLXFYEcrU5kEyB8XCA6YPwsq9e9o6Yc=)
3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:42:5d:6d:a8:a7:af:85:1a:39:66:1f:05:41:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: May 13 06:00:37 2026 GMT
Not After : May 14 06:00:37 2026 GMT
Subject: CN=e38e3dd4900485abbd82b9018d3ec50767071e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:44:ef:01:10:c0:96:7a:bd:4f:3d:c1:13:
16:33:28:c9:0a:81:a4:9a:05:73:0c:ba:b9:bc:55:
d3:40:7d:9d:07:e6:48:44:d8:32:6a:ad:c9:b2:84:
c3:f1:fe:8a:2c:42:2b:15:c3:39:a8:bf:81:08:2c:
63:26:08:3d:c6:9d:3a:e0:45:9c:f3:29:7d:54:c8:
6c:d2:d8:99:bc:74:79:08:ab:a2:30:41:fe:08:45:
2d:8a:05:f6:96:b0:d1:60:5f:52:3d:9b:af:16:19:
29:54:a8:66:f9:99:8e:cf:6e:54:8d:0b:81:0d:3e:
4c:48:18:61:28:8c:cc:c5:a1:36:51:c5:d8:95:e7:
aa:c7:a8:c0:ad:2d:ad:a5:4c:4d:34:98:d2:dc:2b:
ba:7a:10:0a:60:fd:fa:20:96:0c:ef:3d:f7:de:19:
6d:a2:82:e1:91:4f:60:3e:df:9f:39:f5:d2:15:03:
cf:1e:88:0f:38:94:57:a1:37:39:97:f2:ac:5d:ef:
53:d0:4a:91:26:b4:7c:9b:f6:84:81:21:8e:77:10:
14:63:9b:f0:42:1d:2f:27:49:41:4e:8a:3f:d0:e0:
ac:a2:b1:9e:97:45:28:30:1d:e0:5f:62:5c:3c:fd:
40:37:e0:ad:9e:d6:8c:0c:2e:6b:67:6d:e4:4c:74:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:3D:D4:90:04:85:AB:BD:82:B9:01:8D:3E:C5:07:67:07:1E:89
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9a:42:28:c5:25:29:f6:b8:1b:af:1d:ca:93:77:26:9e:d5:
69:4e:c9:be:c2:e2:1a:26:f5:57:4d:e0:b3:15:10:41:b5:2f:
f2:de:43:64:5c:46:4d:59:7a:6b:77:73:0b:fc:7a:59:18:5f:
b3:89:74:4a:86:fe:46:fd:55:7f:fd:d4:2f:d3:84:d0:56:9e:
ae:94:47:3f:2c:16:bc:9c:a9:2d:d4:1d:6a:82:0e:d8:a8:8d:
26:68:78:6f:8d:47:d3:f7:02:88:43:93:19:12:19:e2:19:8c:
e0:59:f4:86:c1:8f:27:37:a3:12:95:df:4c:b2:2c:17:23:9d:
3e:7f:c5:c5:b5:5b:86:aa:69:b0:92:b5:29:27:da:be:9e:f2:
73:30:ec:30:14:24:81:95:c7:83:2a:14:b5:da:21:a7:3c:e1:
4a:38:df:07:a3:e6:94:3e:1e:aa:84:a4:87:78:80:b2:48:85:
ae:b8:a7:06:6c:ad:19:5f:78:46:78:b1:de:98:c4:46:b7:d3:
d6:62:4c:ad:1c:52:b3:6a:e2:97:e5:2e:cf:c4:8c:fc:5e:63:
72:34:fe:10:47:3f:fa:08:11:2e:80:6f:02:3c:61:d5:c4:4a:
74:32:ce:a3:ef:24:e5:c7:de:22:bb:73:ce:78:75:f5:03:0b:
f4:9e:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:36 2026 by rpki-client