Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: 1HHrXLFh5a7xXJy+84IzLvXOIGBZpk3HSrpS8xgv9bs=
Subject key identifier: 74:58:30:33:4F:6B:9E:64:EA:4B:87:A2:42:0A:AC:01:2E:54:43:A1
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019D2B171325D432361F490F3154D8C06B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1659
Signing time: Thu 26 Mar 2026 17:00:25 +0000
Manifest this update: Thu 26 Mar 2026 17:00:25 +0000
Manifest next update: Fri 27 Mar 2026 17:00:25 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: DWIRdRkr3fjJxy0j1tD3WPQV/QZ6xQxLFtvvfBmVFS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:13:25:d4:32:36:1f:49:0f:31:54:d8:c0:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Mar 26 17:00:25 2026 GMT
Not After : Mar 27 17:00:25 2026 GMT
Subject: CN=745830334f6b9e64ea4b87a2420aac012e5443a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:cc:ad:84:a5:77:6e:2e:b6:9e:61:c6:9d:
e2:85:ac:73:a7:2c:99:04:f0:d0:a3:3f:59:d2:aa:
f0:67:3c:f4:38:94:9a:6f:10:0e:da:de:f2:7a:3d:
5d:7d:35:e5:1b:72:00:d6:cf:c1:4b:a3:eb:f2:d7:
b9:22:16:cc:d6:3b:a6:75:2e:d1:91:4b:ab:55:6d:
1c:93:f1:49:46:fd:bd:be:fb:75:8f:81:bd:58:50:
11:a1:95:80:1d:aa:bc:97:07:1d:9b:a1:34:a8:f6:
6f:02:c6:9f:dc:23:dc:c5:63:c7:2c:08:c7:e6:56:
8d:6c:4c:30:97:31:13:9a:ce:ac:3b:42:c5:31:b4:
db:c7:e4:04:f8:15:c2:8f:a6:26:68:bb:7f:9b:8e:
ba:04:0e:03:2f:dc:54:07:86:9f:e4:7a:d0:c0:dc:
77:de:90:c7:59:32:ab:a3:09:e3:74:c4:a9:32:f4:
9b:06:17:82:67:94:51:ce:f8:ba:83:2a:7b:be:8d:
f6:78:b4:80:3d:7b:d0:58:e9:35:dd:ee:ca:dc:79:
03:72:60:b9:b5:ec:32:c7:bd:7c:40:c7:ad:e4:6d:
0f:24:9c:5e:0e:1c:7a:98:1c:1e:d6:d4:f0:8a:3b:
cb:cb:5c:bf:e2:ac:8f:5a:d3:2f:17:a3:40:38:9d:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:30:33:4F:6B:9E:64:EA:4B:87:A2:42:0A:AC:01:2E:54:43:A1
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:90:f3:a1:83:98:27:61:e2:8a:88:25:29:a2:32:eb:da:
6d:59:64:b3:d9:03:c6:0a:71:1d:99:08:09:ac:c1:71:94:af:
c1:21:22:5e:4b:72:73:b3:72:2c:3d:b7:fc:20:f7:cc:c9:d5:
0a:b8:6b:40:41:2d:91:4b:e3:b3:8f:3f:77:75:10:05:4b:79:
83:a8:64:7c:a5:e7:ef:c7:21:16:8a:44:44:33:99:9b:de:34:
e7:ed:68:8b:39:df:b5:b0:a9:04:f5:10:d9:19:23:92:52:a8:
66:b6:af:6c:78:51:f5:6f:01:5f:e4:6d:35:5a:f6:bc:90:b2:
3d:48:a8:c7:3c:50:b5:02:0b:89:07:63:88:fb:cc:25:7a:be:
b3:96:34:b8:ba:d1:42:24:b4:5b:1d:4e:41:eb:3d:64:e2:d2:
8f:4c:63:17:ad:d8:d1:2c:83:45:b1:64:b6:46:41:ec:1d:79:
94:a3:74:f7:17:c3:04:e1:b3:7e:62:d6:c3:3c:8e:3f:b3:77:
5c:75:0c:de:0c:41:4e:5f:60:97:69:6a:98:8a:be:63:32:e0:
15:69:56:72:41:c4:be:61:6b:2c:45:78:57:be:71:0b:f3:45:
ab:8a:be:58:4b:fc:80:7f:2c:59:71:fc:0f:8c:4a:99:70:22:
cb:2d:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:05 2026 by rpki-client