Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: qn9r4nrnpAleqDdQSVbeXd/INqfWhSI3uYg9NSg7y4I=
Subject key identifier: 65:11:92:D2:AC:6C:C8:20:D3:36:22:01:82:94:9B:54:E0:C8:09:2A
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019E1EA38ED816D21826026E7644E2C96EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1367
Signing time: Wed 13 May 2026 00:01:35 +0000
Manifest this update: Wed 13 May 2026 00:01:35 +0000
Manifest next update: Thu 14 May 2026 00:01:35 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: 0CxCLdomG5cbfHooCHoYKcva0NKhSx9ZteoaxjsftbU=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:8e:d8:16:d2:18:26:02:6e:76:44:e2:c9:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: May 13 00:01:35 2026 GMT
Not After : May 14 00:01:35 2026 GMT
Subject: CN=651192d2ac6cc820d336220182949b54e0c8092a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:31:37:8a:b4:45:b9:d9:f0:2b:9e:62:95:
a3:00:71:c2:f9:ce:aa:d1:1b:08:ec:17:04:25:f2:
6e:6d:6e:de:ee:de:6a:a0:46:aa:b1:05:65:07:b5:
b7:ca:02:86:62:5c:e3:f4:80:b2:78:d5:a6:10:14:
96:f8:07:45:c8:65:ec:83:11:61:49:45:5b:4e:8e:
48:a8:94:4d:aa:6a:6f:1b:31:5f:61:37:de:f1:a5:
d5:2f:13:31:26:f2:3c:1c:8b:89:38:7d:f5:65:08:
09:5d:2f:88:57:1a:9e:55:94:6a:60:24:fe:d2:18:
a5:38:20:88:c2:eb:51:7b:6d:51:b5:e2:e1:17:2d:
cb:28:4a:2a:5e:50:d7:d6:78:c3:72:c1:1f:3c:bc:
56:67:33:08:0f:6a:a0:b4:fe:f6:2a:cd:58:cc:9d:
70:df:f2:2c:3b:95:56:93:1e:c8:98:03:f3:a6:47:
d2:fd:1a:44:2b:81:05:f5:77:da:3b:a2:79:51:7c:
0e:2a:61:17:1a:66:5d:1f:71:7b:a8:76:3e:25:f9:
bb:65:15:e5:a2:07:ac:f3:e9:b5:18:9a:9b:c2:72:
48:cb:fb:48:d0:45:be:9f:42:85:85:ce:c1:3a:a6:
53:90:21:79:14:bd:c7:b5:14:01:8c:1b:c3:e0:28:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:92:D2:AC:6C:C8:20:D3:36:22:01:82:94:9B:54:E0:C8:09:2A
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:2d:bf:1b:08:38:01:68:72:ec:fa:39:ae:6e:15:97:08:
a0:61:1d:d1:f0:6e:66:bf:a4:16:d8:96:4d:66:e3:f9:4e:67:
64:83:cf:85:18:5a:bc:dc:29:25:f7:28:46:74:bd:ac:1d:ae:
14:94:f6:8a:eb:e7:ae:6f:cf:6f:7e:98:5a:e9:69:92:93:ab:
ca:56:72:0c:8f:b5:d8:c7:d7:39:09:49:c3:7f:46:60:a2:a6:
80:3b:59:16:27:af:f6:9e:cc:55:9d:50:d2:11:30:0c:3a:42:
38:3c:90:2a:8e:b4:b9:25:4b:40:8d:2c:d8:08:d1:eb:e6:74:
60:fc:14:e3:01:5c:87:86:9d:8c:d0:1d:de:00:4b:28:1b:bd:
e2:a9:53:72:ea:4a:e1:f8:0c:96:20:0f:b0:a5:0c:b8:cf:5d:
87:8a:c9:e9:43:53:3a:1d:73:4e:52:47:8d:00:e6:a6:60:2d:
19:7f:26:02:e9:eb:2e:17:9d:4f:4f:cd:fb:df:90:ce:6e:5f:
ce:8a:3c:cc:b6:48:d3:59:d7:6d:cd:27:79:32:8e:3b:39:cd:
69:a3:38:b8:b4:25:d2:22:84:10:a8:84:0e:db:8f:12:4c:0f:
39:5f:3f:7b:e2:45:30:5c:8f:6b:4c:bd:ad:77:8f:75:b7:13:
80:d9:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:30:11 2026 by rpki-client