Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: U5ux0VyMqcdKwM9pDkFaMgR2pqYgH/YCkc9QS9P5Y5U=
Subject key identifier: 87:0F:EA:E8:DB:F8:DE:38:C4:3D:44:4F:70:0F:9F:8A:26:87:30:87
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01A1E05F96C2647CB402156B862889B62092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1559
Signing time: Sun 15 Nov 2026 18:02:03 +0000
Manifest this update: Sun 15 Nov 2026 18:02:03 +0000
Manifest next update: Mon 16 Nov 2026 18:02:03 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: gcHywG5G7BjfSzRcntdJmKMf32G83HbbltMaGhvXqDw=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:96:c2:64:7c:b4:02:15:6b:86:28:89:b6:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Nov 15 18:02:03 2026 GMT
Not After : Nov 16 18:02:03 2026 GMT
Subject: CN=870feae8dbf8de38c43d444f700f9f8a26873087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:ec:a5:4f:ef:b5:7c:db:2a:68:5a:b4:4f:
f1:98:06:3f:5f:1e:73:28:8f:2e:9f:38:01:a4:c8:
89:4c:7d:da:cd:7e:15:cd:ba:97:e3:82:0d:ea:e4:
57:af:9f:da:7f:03:62:af:df:b9:79:59:56:6b:dd:
d7:81:bf:14:81:df:c4:81:93:80:1e:7a:de:e2:a4:
20:6b:28:6f:f6:5d:32:5f:bc:c5:62:0b:38:96:5c:
bf:3e:94:a3:ac:6c:ce:cc:97:a9:65:a2:5d:3a:31:
a1:67:8f:20:48:32:d0:a9:0f:fc:e4:ce:18:a3:b0:
b0:38:44:05:42:d1:5d:93:aa:54:81:30:b9:3d:1e:
1d:56:49:9e:34:b4:70:cd:a3:40:29:02:45:69:4a:
5a:91:ee:14:23:23:1c:51:f8:68:72:4a:19:d5:40:
d8:a6:27:ce:38:c4:e6:43:c7:ea:e5:a2:25:64:fc:
f1:cc:0d:8d:d2:cf:7d:08:00:0b:e3:be:59:23:5f:
95:5e:a8:09:e8:71:dc:33:a4:21:48:c5:8d:9e:47:
a3:57:18:2c:44:70:e8:eb:de:e4:ef:60:ec:8b:14:
88:77:d6:d3:9f:30:19:1c:03:b6:1d:7f:ad:63:c0:
1d:8e:1a:bc:2b:9b:46:2a:45:5f:92:72:fa:6d:96:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:EA:E8:DB:F8:DE:38:C4:3D:44:4F:70:0F:9F:8A:26:87:30:87
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:be:33:8c:d8:3b:44:27:44:63:44:de:f5:45:aa:ea:eb:07:
80:6d:1b:cd:14:7d:6d:07:ed:a1:f2:fe:4c:37:1b:ba:c3:06:
c3:89:56:2e:6a:9d:0b:92:c6:52:dc:fb:33:16:f3:b6:9f:e7:
1f:17:62:bc:93:4d:4c:b0:10:78:18:42:d7:9b:65:40:7f:6d:
94:b5:1d:bc:43:46:d8:1c:b7:18:59:3a:1b:33:06:11:a0:0b:
64:02:b2:dc:e1:8d:55:84:54:de:c9:8a:ec:48:ce:68:b8:13:
2f:11:a8:5d:da:ec:59:ff:14:cd:13:9b:f1:0d:b8:39:de:0e:
e2:da:4a:ab:76:8a:fd:21:f9:d1:e3:5d:5c:e4:f9:c3:e2:ea:
c8:1f:8a:33:73:d8:22:b2:ca:d9:03:a6:4b:c8:1b:f3:e2:b0:
8b:4c:85:50:73:91:d3:85:76:f5:05:59:dd:05:7b:df:34:ee:
7c:0e:8e:ab:d5:cd:b7:d1:c4:3f:92:f2:70:6e:19:25:3c:b4:
e9:91:f2:7f:37:8d:0d:12:43:75:ae:6a:ca:b6:1a:27:6d:99:
73:d2:de:b7:fd:c4:8a:59:3e:03:18:b6:d7:18:ca:02:f1:12:
7e:47:de:70:b6:53:cf:61:64:f2:f3:59:13:46:ff:c9:1d:5d:
b7:43:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:49 2026 by rpki-client