Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: /HAr+wU6AU58BrkbI3Z8QXt8f28vyoL9XSfC/ZCGbfc=
Subject key identifier: AA:07:50:D5:FC:E3:82:0A:67:F0:C4:AE:3C:8E:9C:C2:C3:35:DB:E4
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019F9323FB488776DB737466D2E7CB6D8EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1798
Signing time: Fri 24 Jul 2026 08:00:36 +0000
Manifest this update: Fri 24 Jul 2026 08:00:36 +0000
Manifest next update: Sat 25 Jul 2026 08:00:36 +0000
Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=)
2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: yek/1Mf8HY9Pu7gY44cm1gQOnb8hpYED1FnJbm36NLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:fb:48:87:76:db:73:74:66:d2:e7:cb:6d:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jul 24 08:00:36 2026 GMT
Not After : Jul 25 08:00:36 2026 GMT
Subject: CN=aa0750d5fce3820a67f0c4ae3c8e9cc2c335dbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:1d:38:bd:a1:8e:3e:17:b1:c4:09:4f:d4:
51:a4:1f:5c:82:0d:8f:de:9e:cb:db:f0:4a:27:a7:
8e:76:90:14:de:a6:10:cb:7f:3a:1c:37:61:06:cd:
c8:de:a6:1d:c1:5e:4b:41:3e:31:b0:e5:97:f8:6a:
71:2e:90:6b:bf:82:9e:9c:c1:17:c9:0d:84:97:86:
cd:c4:3c:64:14:55:27:d1:de:9f:31:85:8f:50:de:
0a:7c:a5:92:5a:d8:76:e0:94:58:f1:18:bf:48:c2:
6d:56:32:3b:30:97:25:75:77:cc:3f:7d:6e:13:f6:
2c:38:b8:71:2c:c9:c3:78:7d:fd:4a:e1:4b:08:55:
59:8a:7c:1b:a7:11:50:26:61:f1:0b:dd:9a:d2:67:
12:78:5c:49:b3:66:e2:32:f2:ae:8f:e0:aa:83:00:
5f:a9:19:4c:ed:d2:6d:8e:36:de:ee:08:5f:3b:52:
90:ab:e8:dc:07:91:3d:28:af:33:40:1c:d8:f7:2a:
bb:65:3f:fe:d8:c0:f9:43:b8:fd:7b:60:b4:27:f6:
b6:ed:71:a6:c5:4f:1a:48:f7:bc:b1:eb:d5:1d:1b:
fd:95:2f:70:e6:be:c0:8d:6d:c8:fc:17:e7:f9:0b:
b1:ee:ec:25:85:a6:c5:c8:27:08:96:d4:29:9a:ad:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:50:D5:FC:E3:82:0A:67:F0:C4:AE:3C:8E:9C:C2:C3:35:DB:E4
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:70:c5:23:ec:3c:3d:aa:e4:5d:e6:f3:c3:4d:87:cb:b8:c9:
44:7f:ed:79:0c:57:51:43:a7:9f:84:50:62:67:4e:ec:a0:7e:
82:cd:18:11:9f:ae:a3:37:fd:7d:50:b7:d4:dd:44:ea:dc:56:
ed:d7:6f:3c:9a:f3:2a:04:e5:cc:35:08:07:25:fd:8a:6f:48:
6f:aa:34:a0:dc:8b:6c:b5:f4:25:8f:97:f9:0f:04:45:f3:51:
c1:a5:d9:76:82:d2:3b:00:b2:bb:df:3d:c9:66:e3:13:92:e2:
bf:92:ce:de:33:23:18:60:5e:fc:ca:1a:87:0a:12:83:24:38:
17:e3:5c:8d:97:04:2f:05:87:5a:ed:fd:0d:38:59:b6:36:94:
66:30:a3:e9:4e:fe:17:72:a2:ce:69:ec:08:96:03:a1:f7:0b:
40:f5:49:75:c1:c2:93:e3:6a:ae:24:0d:30:25:80:2d:c8:0c:
d3:a9:bc:f1:22:b5:7d:ac:ae:c0:1a:90:7e:b3:26:af:36:5f:
3e:fc:4a:96:57:5e:59:c2:41:dd:d2:02:a1:4e:56:cd:f8:09:
79:d2:37:3f:fc:74:88:cf:ea:01:fd:c3:3c:97:2c:4b:3b:7b:
86:ad:9c:3d:6a:41:91:22:91:3b:3f:8f:4c:00:db:f9:a4:f5:
c6:e2:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:46 2026 by rpki-client