Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: aLXbJtDa4nsC/X5aO9vmn8LXhCmq/qb/Plqv5z5evAc=
Subject key identifier: D7:A8:DE:5C:11:43:BD:2B:F2:26:AE:D7:6D:DA:09:E9:AC:54:89:61
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01A128B15F201379784148C08517C75E7387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 186A
Signing time: Sun 11 Oct 2026 02:01:15 +0000
Manifest this update: Sun 11 Oct 2026 02:01:15 +0000
Manifest next update: Mon 12 Oct 2026 02:01:15 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: ZDYTJBRPC8QskASCep5SD4oaQUzOff1cBlrUy2BmSfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:5f:20:13:79:78:41:48:c0:85:17:c7:5e:73:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Oct 11 02:01:15 2026 GMT
Not After : Oct 12 02:01:15 2026 GMT
Subject: CN=d7a8de5c1143bd2bf226aed76dda09e9ac548961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:75:a3:a6:b3:e2:bb:fc:02:e8:bc:a9:2c:
2b:75:9c:61:75:14:c6:02:44:95:3c:b1:b2:65:f4:
ba:87:29:31:72:d3:0f:50:db:0b:56:dd:5d:4b:f2:
00:76:3c:42:36:5b:e2:64:33:5c:15:03:06:1d:59:
26:13:a6:8a:f0:0a:16:a6:2c:81:ba:1d:f5:61:ab:
c4:18:5d:ef:98:3c:ab:3f:db:82:44:5b:f2:b1:4a:
10:31:f1:fa:5e:fa:fa:8e:8d:36:bf:98:40:71:ee:
e9:13:c8:96:30:33:0d:6e:cd:6c:99:84:6d:b5:e4:
18:a0:1f:0f:3d:5d:94:76:0f:c4:3c:3c:02:78:f8:
0d:bd:be:8e:3c:37:d4:4e:11:36:e1:d4:9a:0f:9d:
54:38:a6:9a:af:98:6e:4f:9f:a7:d5:02:33:47:f5:
2b:4d:b1:b3:ae:f9:d9:0d:5e:1b:57:01:9b:72:82:
85:2d:f2:d6:3f:30:7d:4b:7b:48:84:79:8e:a6:5b:
b9:9e:f5:95:7a:2a:a3:05:06:58:5c:c9:d4:d0:3f:
13:88:68:fe:d3:42:7e:06:30:cf:31:15:f5:3b:47:
1a:1f:c1:e6:a9:a4:bc:f2:76:b6:71:15:ee:3d:8d:
c3:e6:85:ed:fb:23:74:95:02:4e:03:c5:96:8a:d6:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:DE:5C:11:43:BD:2B:F2:26:AE:D7:6D:DA:09:E9:AC:54:89:61
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:59:f4:93:24:a8:e9:30:76:15:78:3b:ad:ab:2f:17:3e:2f:
55:e2:fb:01:82:1d:3a:98:30:85:0e:82:bc:53:9a:a1:95:78:
11:c3:09:a5:dc:4b:03:09:d0:06:35:f0:b7:e5:14:ca:79:4e:
ce:c3:6f:fb:53:bf:65:c4:b8:3d:c0:75:ef:51:e2:c8:c5:08:
3c:e3:61:4d:9e:c9:c7:2b:ea:f5:4c:e1:5b:1b:f0:1f:00:ed:
ac:9c:c5:46:c1:a9:88:4b:76:ac:00:79:86:6e:d0:04:96:86:
35:dd:dd:03:65:26:d6:b8:e3:80:f5:57:74:84:30:3a:5d:57:
99:d5:f4:81:ad:78:81:1b:00:0a:af:c4:16:6b:12:e6:5f:ba:
5c:b1:09:72:28:18:bb:74:a3:df:12:e9:e6:4f:85:54:ed:df:
9b:fc:2e:aa:54:11:4e:71:10:d8:f9:66:e0:3c:e1:7d:3f:e1:
12:54:90:ce:d8:75:64:ba:1a:51:f4:3f:86:ab:c7:f5:30:a4:
11:53:9b:f1:f4:ab:08:30:5a:b6:f3:f6:52:bd:cb:27:f2:56:
71:4e:cf:32:09:d3:46:09:1d:2c:ec:fe:b0:c3:95:1b:8d:c0:
bc:8b:f8:9b:0d:4a:cc:5c:db:89:99:f5:e4:29:2d:53:62:76:
22:f3:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:34:34 2026 by rpki-client