Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: wFlh9TptzgpX2/lI50fmGvRTMh4O7q4ovh9n71RKXKg=
Subject key identifier: 95:C4:7F:AC:26:18:C1:FA:2F:D1:B1:80:B5:CA:81:0E:92:E4:04:9F
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019E216DC6F548D0FD8EF7F98BA9A6964E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0FAC
Signing time: Wed 13 May 2026 13:01:42 +0000
Manifest this update: Wed 13 May 2026 13:01:42 +0000
Manifest next update: Thu 14 May 2026 13:01:42 +0000
Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: C/mFC2BkIUeYyTzqLj6RNk7ekg9geQTecfmFPRfO7MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:c6:f5:48:d0:fd:8e:f7:f9:8b:a9:a6:96:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: May 13 13:01:42 2026 GMT
Not After : May 14 13:01:42 2026 GMT
Subject: CN=95c47fac2618c1fa2fd1b180b5ca810e92e4049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:06:ef:a5:13:4d:05:b2:d4:11:89:3e:37:
3a:46:d5:00:23:b9:67:a7:d7:99:6e:ec:63:34:25:
ba:cd:1a:38:eb:2d:a8:33:58:2f:d8:fb:1d:ed:60:
5c:c6:b4:18:c2:e7:a0:5c:17:43:c0:62:82:90:5f:
8d:c0:79:5e:04:aa:09:1a:25:88:e0:0e:72:2c:e5:
e3:a6:65:46:6e:b7:5a:8d:05:49:cd:92:a6:18:ef:
04:9f:26:49:74:39:2a:4a:d4:fd:cc:b4:31:32:eb:
62:a9:6f:69:11:43:c8:64:db:b0:c3:c1:6c:e7:ec:
f1:ff:c5:b6:c8:60:8a:bc:fc:7a:48:ab:9c:55:d6:
2a:4b:8a:a1:42:f6:81:25:f8:a9:00:e3:bd:3f:a2:
25:90:da:a1:60:a2:85:7b:14:72:2b:3e:db:75:87:
f2:98:38:12:70:03:b2:be:08:2e:c7:40:0e:a1:63:
95:c6:28:27:20:57:97:9d:fb:92:26:62:87:55:59:
fb:7a:48:57:8d:cd:13:1e:81:b8:61:94:cb:ed:0d:
e4:ae:ab:60:91:4c:94:27:f7:5e:96:5e:9e:11:ab:
4c:e5:49:a8:3d:80:7a:d6:4c:5c:a5:5f:ac:86:46:
a2:f6:0c:4b:d3:f5:24:19:d0:c6:c1:b9:8a:12:20:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:7F:AC:26:18:C1:FA:2F:D1:B1:80:B5:CA:81:0E:92:E4:04:9F
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ac:3e:ba:2b:1a:69:70:d3:e6:a8:e0:24:66:61:f4:c7:bb:
3e:b0:dc:b8:8b:d4:37:d5:2a:61:c3:e2:00:da:f7:2b:9f:f9:
ce:23:b0:0a:cd:be:4f:4e:c1:03:be:71:83:16:54:c1:dd:59:
65:0d:16:b8:38:ce:10:61:f1:c6:cb:cb:62:57:e4:71:78:fa:
f9:30:25:76:2c:ab:74:a1:f0:f5:7f:78:97:f6:bf:06:14:01:
f1:35:20:ad:b1:64:5f:97:40:9c:60:e5:ba:66:76:bc:fe:8d:
84:ef:50:80:e5:07:8b:09:74:ee:04:ad:56:1c:2b:36:8d:3e:
ae:61:7f:30:7a:73:10:f6:cd:39:0a:3d:f3:02:19:e9:ee:2a:
f6:71:d8:ad:a1:e7:94:08:e7:74:41:d6:8d:20:8f:cb:8c:db:
72:10:a9:dd:d7:d3:77:77:d8:94:db:5d:dd:b8:00:5e:7d:b3:
e9:f3:c7:27:ce:aa:cf:9e:06:58:ed:7e:c5:4f:fc:19:93:cf:
82:e6:46:b2:b1:20:7c:52:81:60:50:53:e6:88:dd:8c:b4:ed:
b8:21:86:39:41:c7:76:b4:cb:aa:9b:b0:93:e6:7b:79:85:ef:
e8:42:39:c1:b5:0a:fd:c9:6a:dc:d4:2d:d6:d2:4b:9e:78:ca:
e2:4f:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:27 2026 by rpki-client