Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: 5Ngw8NIiy0tjddj6V88gyOqHS8kMYauNmiBGtS4D1Pk=
Subject key identifier: 0E:FA:10:12:34:37:6F:D4:5F:6C:95:1D:47:16:B0:18:AD:A1:88:79
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019E20C80AFB524DAA3D66C10B22BC3954AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 1711
Signing time: Wed 13 May 2026 10:00:41 +0000
Manifest this update: Wed 13 May 2026 10:00:41 +0000
Manifest next update: Thu 14 May 2026 10:00:41 +0000
Files and hashes: 1: Gx2TdYaye1CW6jikn3ZdanxLIok.roa (hash: lEUJaiweZkhF8hDlvPMbWM1am1KHv6FjfLlxTnc1lZ8=)
2: VHvfawEmHMhGQ4rXoXoNzeDbDHc.roa (hash: 6R9KGHO73pqiHMwPT/E1pEGSN2Y9//7BZyWuI0pz+xY=)
3: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: XJuqFResYzYU6OW+wFydckW1EIf1xiilp6juUjg3/IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:0a:fb:52:4d:aa:3d:66:c1:0b:22:bc:39:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: May 13 10:00:41 2026 GMT
Not After : May 14 10:00:41 2026 GMT
Subject: CN=0efa101234376fd45f6c951d4716b018ada18879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:9b:dd:5d:fa:0f:08:9b:d1:a9:8a:ce:2e:
7c:87:4e:be:8c:7f:e5:f7:f5:d6:a0:4d:52:8b:25:
6a:ed:73:6c:48:bd:30:30:ad:21:21:9c:b1:97:55:
58:46:5c:7a:44:6f:18:69:4c:34:ba:a9:da:e1:d5:
39:6b:99:1c:df:ab:35:ed:05:67:f6:9b:96:07:0f:
3b:35:ad:8c:c1:03:8f:19:78:2b:47:02:3d:0d:af:
1a:12:cc:ca:e8:53:c1:ff:69:8b:5f:39:62:62:5b:
cb:8a:92:a6:2a:a1:25:78:24:50:a2:1e:e9:0b:d9:
21:0c:b4:67:86:ad:8d:26:0e:86:fe:cb:2c:bc:fc:
60:f0:62:5c:d6:aa:ed:61:dc:ca:fc:2e:3b:6c:b3:
60:23:3d:7a:2d:ed:1f:12:b2:d0:f2:d5:bb:5d:34:
f8:a3:bd:25:76:5b:87:77:1c:6e:6f:00:ce:28:cc:
d6:27:01:a0:0b:60:7f:2d:94:1a:56:7e:91:6c:6e:
60:65:1f:07:79:98:c4:9b:ff:fc:8b:18:5a:ce:21:
02:4e:8a:76:a8:79:27:93:c8:20:1f:27:a4:c4:c0:
88:ee:63:91:64:01:84:66:86:ab:a0:c4:e5:8c:f2:
58:fd:88:9a:ea:ba:65:95:52:61:4c:e1:ed:31:92:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:10:12:34:37:6F:D4:5F:6C:95:1D:47:16:B0:18:AD:A1:88:79
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:44:91:ca:7e:0d:ff:83:0e:d7:48:a6:61:25:9e:79:12:f3:
92:b5:1f:37:41:25:59:24:cd:87:fe:94:38:3b:55:39:59:00:
7f:4d:33:dd:33:2f:0c:90:26:27:42:af:34:f2:09:52:ab:65:
3a:b1:59:d4:f1:61:72:7b:c1:c1:5b:f3:75:30:90:10:d1:9e:
fc:f0:56:57:f5:61:be:81:de:f5:f4:9e:ce:02:68:be:c7:ee:
59:84:c3:ea:35:70:28:3d:7e:c7:ca:59:5a:54:5a:c8:79:b7:
88:b3:ed:22:36:8b:26:1e:ff:40:ce:9a:62:b1:05:3e:bb:2a:
d6:a8:91:f2:bd:39:11:75:0a:71:98:1a:bf:4d:a2:8d:1e:6d:
be:f9:6e:21:93:74:8a:7d:e8:15:e4:2e:43:71:3e:82:4a:5e:
eb:91:85:81:2a:a6:35:c6:b2:b0:59:23:e6:53:e3:e8:24:bb:
ad:06:a2:16:0e:87:2c:00:43:c7:9d:87:96:8a:0a:00:b5:9f:
ff:bf:26:70:f8:b7:73:77:c9:19:db:e7:6f:25:6b:35:ed:40:
3a:3c:fe:ec:9a:59:fe:a0:66:88:7f:d2:ca:9f:20:e5:f4:9e:
a9:95:34:a9:6b:40:25:e0:d7:85:59:ed:a7:0c:dc:4c:03:a2:
b7:28:02:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:29 2026 by rpki-client