Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
File: WXIYySXnbh6YCYdfftGvqX72950.mft (raw, json)
Hash identifier: gfUzHz9oUuXJz9mATRPNkK8kPUyV9gjITH2ILpcFrPg=
Subject key identifier: 58:56:B0:52:47:83:3B:97:25:34:CF:AB:CE:31:C5:29:6E:17:CC:26
Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Certificate serial: 019D2AE0C44EEC62E484B33A1F5AC11FB453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
Manifest number: 02BA
Signing time: Thu 26 Mar 2026 16:01:06 +0000
Manifest this update: Thu 26 Mar 2026 16:01:06 +0000
Manifest next update: Fri 27 Mar 2026 16:01:06 +0000
Files and hashes: 1: WXIYySXnbh6YCYdfftGvqX72950.crl (hash: +RVBN9B6lLD9BGgFbHnKMG4WkLjIFrRE44o9c6UXwB8=)
2: aK1p0V03sENOzaLlc1KewA9CT3U.roa (hash: f8RzDUWHRQzJBmXmb26p8Bvk4LyHwBeyt5E3IMhySvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:c4:4e:ec:62:e4:84:b3:3a:1f:5a:c1:1f:b4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Validity
Not Before: Mar 26 16:01:06 2026 GMT
Not After : Mar 27 16:01:06 2026 GMT
Subject: CN=5856b05247833b972534cfabce31c5296e17cc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:91:fd:85:1c:15:3a:1b:7f:89:2b:20:98:
99:16:7a:20:34:2b:8d:c1:35:1c:95:f1:1e:09:17:
27:40:aa:4e:11:86:76:ec:09:7e:33:2a:e7:d9:32:
a2:67:af:63:8c:52:1a:4b:c8:1f:3e:30:f5:f9:d2:
eb:e0:40:9d:34:83:d7:ea:dc:88:3e:ca:d8:bd:de:
a8:df:8e:b9:74:ce:36:f9:74:90:e1:a1:ca:50:81:
5a:27:fb:ad:2b:cf:50:3d:1c:22:ad:41:85:4b:c9:
1a:6c:c0:61:01:fd:4d:ca:e3:10:74:24:be:ef:3f:
d9:16:e9:64:20:cf:26:71:30:c1:ca:8e:36:03:5b:
ea:b3:cf:cb:e1:a3:23:a4:90:12:8e:70:4c:b7:d3:
89:f6:54:f2:d3:37:17:b5:4e:e7:14:d4:a2:da:f6:
e4:ef:40:15:75:ed:aa:ae:49:1a:96:ca:d2:e8:79:
34:65:e6:ae:b2:fa:41:ae:73:3a:d2:2b:2e:e1:b8:
7c:f7:b2:5e:a6:f8:28:d0:9a:08:03:4d:89:7a:4c:
c1:14:e4:a0:33:2b:0b:05:a2:8c:07:7f:7c:f7:23:
c6:45:50:3b:43:56:2d:7d:08:5f:30:8c:4e:c8:d1:
f0:32:e7:e7:d9:c0:9a:4a:7e:06:c8:fb:5e:72:e9:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:B0:52:47:83:3B:97:25:34:CF:AB:CE:31:C5:29:6E:17:CC:26
X509v3 Authority Key Identifier:
keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:e7:67:0c:83:e9:cb:ab:70:1f:66:5e:5d:fb:9b:fb:9f:
9d:5d:34:4c:7b:82:53:37:c9:4b:49:63:1f:6b:bc:33:e4:f7:
18:67:27:ab:1d:f7:82:70:41:54:0a:ff:8e:5f:14:c5:69:d8:
b8:05:62:da:bd:17:2c:67:14:fa:1f:1c:91:87:b8:98:4a:c4:
9a:a5:bf:d6:89:54:91:c3:8f:48:d2:4a:c3:ec:fb:aa:96:b9:
96:ec:e1:cd:48:b0:0e:c9:76:8b:6b:77:d4:62:a9:30:be:9f:
4d:f9:c1:d8:7c:a2:e1:30:de:0f:50:a1:cd:8a:69:11:7c:23:
fa:f8:fd:c5:a0:b8:f1:76:d6:84:11:1a:08:e0:d0:74:57:29:
60:30:e4:24:e9:a5:b3:9b:e6:26:b0:98:f7:69:5b:9c:18:3e:
95:25:26:71:e5:99:51:ce:30:d1:f5:bf:73:6a:7d:45:af:c2:
ad:31:34:e0:17:0c:45:29:b1:d7:e3:f3:86:88:16:f3:46:d1:
f3:91:bc:19:20:4b:9c:4f:dd:a2:2c:90:ca:86:5d:60:c6:35:
dc:8c:e5:8e:b3:f8:31:cd:15:bb:d9:bd:29:36:29:a6:83:ca:
15:05:e3:40:d8:4e:3e:b2:fc:5c:a5:1a:f0:bf:e8:b3:9e:49:
b9:01:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:54 2026 by rpki-client