Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier: dOVqw6aWybDCDFy3XF6GX3REyx2Exz3W+sFPkmFHOZo=
Subject key identifier: 73:D7:AF:42:87:32:06:99:DE:ED:D5:41:C1:7D:CB:DA:79:E4:39:71
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 019E1E6C20AD146DC454A091C5FA091C5BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 23:01:03 +0000
Manifest this update: Tue 12 May 2026 23:01:03 +0000
Manifest next update: Wed 13 May 2026 23:01:03 +0000
Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: saaIMNUxBpC9WwO81i0mWAh1RbnIoax3YXCzRn+626g=)
2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:20:ad:14:6d:c4:54:a0:91:c5:fa:09:1c:5b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: May 12 23:01:03 2026 GMT
Not After : May 13 23:01:03 2026 GMT
Subject: CN=73d7af4287320699deedd541c17dcbda79e43971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:96:ac:88:84:5a:ba:0f:54:bb:0c:1f:9d:
d2:d9:32:9f:35:4a:42:84:d0:cf:fe:b4:42:ae:19:
d5:64:85:89:b5:bf:89:3e:5d:f6:9b:bd:26:9d:1f:
e9:c8:13:5f:f9:aa:66:a4:ec:cf:63:e0:b6:9c:1a:
a0:11:a5:64:1a:2c:ae:72:9c:95:ac:d7:48:95:4a:
73:72:e4:ea:fe:7d:18:04:ab:c6:bf:41:ed:af:0b:
7a:e9:e2:2a:8c:27:1d:dd:ff:7e:69:d8:2c:bb:bb:
62:34:62:b7:65:c1:39:c8:dd:97:a7:53:70:42:77:
f9:69:5a:15:87:7a:9d:18:8b:33:b4:28:0e:97:83:
6c:67:ba:fa:45:e7:52:95:04:67:5b:18:4a:31:31:
a1:d1:2a:06:cb:63:10:64:0f:c5:bd:54:c3:5e:36:
4c:bb:4d:33:93:c6:d8:8c:a6:c2:c1:70:28:b0:7a:
d9:59:d5:d4:a6:7c:60:f2:74:ca:d7:61:9d:68:c8:
09:0c:5b:d9:39:2b:af:20:f6:f6:42:63:62:48:2d:
ec:63:c9:fd:20:92:bf:bd:64:70:a6:a4:d5:56:f6:
0d:6d:cc:77:21:f8:1e:22:28:0e:16:18:19:03:f3:
c2:f0:45:97:13:22:1d:c4:9e:76:9e:a5:38:2e:17:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D7:AF:42:87:32:06:99:DE:ED:D5:41:C1:7D:CB:DA:79:E4:39:71
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:a8:67:e2:84:19:c3:f5:73:e6:e7:fe:62:e6:88:11:b8:
b8:f1:ed:05:f9:2e:60:27:c1:a2:37:f0:a3:54:2c:b9:b1:de:
34:90:83:74:05:68:df:58:83:90:81:dc:be:6d:74:07:73:83:
9e:b8:83:46:b0:83:cf:b8:98:20:58:2a:65:2a:1a:0e:7f:23:
97:9d:51:a7:c5:58:0b:6b:0b:ca:eb:5e:e6:4a:67:70:32:17:
b6:3f:44:26:08:79:29:d2:80:6a:b8:d7:67:66:a7:93:45:af:
e3:9b:5f:7a:25:07:ef:4b:84:2f:d5:55:4a:5a:48:cb:f6:a5:
b4:91:32:c8:30:be:17:6e:b6:2f:95:5b:4a:9f:ae:cc:aa:f8:
51:33:0e:03:2d:7d:31:95:77:5c:8c:00:b1:c7:d8:bd:20:e6:
28:10:f2:ac:d5:dd:cc:15:4b:b4:be:fa:ba:37:08:41:18:0a:
a3:b9:be:bb:17:a6:db:86:c8:fc:29:de:70:5a:66:46:e4:e6:
f2:bc:84:ed:4c:82:18:04:3c:98:84:8b:a1:b1:4a:1a:8e:01:
0f:19:13:e1:e8:13:7b:95:81:12:41:8e:7c:c1:ce:e4:31:5a:
19:09:a3:89:e1:69:fb:c0:f6:dd:f3:15:e4:6a:75:c4:59:57:
62:8d:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:13 2026 by rpki-client