Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: qWTgdF0/n+ryxnubi51j/85VXwwBiylnJKuHe98BzGk=
Subject key identifier: 4A:A5:B7:1E:7A:AC:7D:81:BE:30:49:94:7B:F6:FC:C7:77:B0:E5:28
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 019F94DC29F98FC4A8A3BB305633BE37D294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 16:01:24 +0000
Manifest this update: Fri 24 Jul 2026 16:01:24 +0000
Manifest next update: Sat 25 Jul 2026 16:01:24 +0000
Files and hashes: 1: Sq8500KhQRP1l10Z1msF9d2ysQw.roa (hash: ReVbiMOhRmv6RCWB0b28trkVO+ZZwLBYu/yBa/+30Dw=)
2: V6JPaEYI_A430h4XiTPHTg3pH9Q.roa (hash: cJrgnz2SqNu03F38EzPAz9CCWIpMgD1Jz/dKPwQAOAg=)
3: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: OCanZuW8nUgsfOFlGI2atN0IGY88kvMAIbSM/b7XJxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:29:f9:8f:c4:a8:a3:bb:30:56:33:be:37:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jul 24 16:01:24 2026 GMT
Not After : Jul 25 16:01:24 2026 GMT
Subject: CN=4aa5b71e7aac7d81be3049947bf6fcc777b0e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:21:ef:ad:b5:c3:87:8c:1d:1d:78:76:e0:
1a:67:96:1e:3a:b7:95:20:b7:38:19:19:ae:aa:64:
0f:ec:8f:8d:04:75:68:fe:5c:4d:c7:20:ef:c8:59:
ab:a6:f8:ea:59:d9:0e:20:55:45:74:b5:fa:ae:8d:
4c:77:98:68:d1:25:6d:45:da:0e:59:7a:30:f0:78:
8d:3e:07:2d:3c:4c:ec:aa:c4:43:25:8f:7d:8b:c3:
da:d3:84:4a:c9:76:79:70:18:10:c4:b1:52:86:44:
d6:67:25:e3:da:87:23:c9:18:c6:75:c1:b8:01:79:
66:51:68:cc:21:71:42:ae:35:61:19:a3:54:17:c5:
b1:42:61:9b:69:1b:e8:06:a8:cc:24:53:b4:8a:51:
67:97:0a:1f:33:78:2c:5c:7c:83:db:a6:fe:f3:ec:
15:ac:4a:a7:4a:af:84:38:0d:c3:32:b1:be:f0:81:
5e:fb:30:c0:f0:80:5e:c1:8e:09:bf:ce:7c:fc:e4:
61:35:2f:e4:4a:e2:bb:9e:07:0b:1c:aa:04:13:29:
46:e6:da:36:8e:db:6c:27:87:a5:50:4a:69:cd:c8:
64:0d:f9:dd:ce:74:c8:64:2d:82:92:4b:05:df:c8:
c5:64:7c:f4:a0:58:09:80:ee:7d:ac:ed:91:39:41:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:B7:1E:7A:AC:7D:81:BE:30:49:94:7B:F6:FC:C7:77:B0:E5:28
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:59:e4:89:41:80:04:e5:ec:c6:7b:07:08:00:a3:8e:84:
f9:5a:86:c7:6f:03:a2:c6:af:25:8f:04:8e:1e:dc:9a:c1:1c:
b4:4c:7d:06:39:6f:f4:9d:12:8c:d1:64:eb:3f:f6:1a:31:cd:
92:b3:71:64:68:b2:77:58:56:58:82:a2:90:c5:34:e5:87:39:
d9:f3:84:79:07:1e:ac:a7:30:15:b3:d9:82:b3:67:c4:b4:31:
b0:1c:d5:1f:e9:49:92:d7:2a:75:6d:06:a2:58:1a:aa:8d:45:
69:9f:c6:5c:a0:d6:9c:89:de:44:53:e8:dd:0c:56:6f:63:64:
2c:b2:e3:ea:44:38:f7:79:1c:25:38:e6:37:8b:44:24:b4:a8:
82:76:fc:3a:09:36:8a:eb:fd:6b:4d:68:c0:d0:dd:86:d7:10:
c3:60:44:85:27:da:01:91:63:ec:03:df:f7:44:f8:1f:80:10:
6f:b7:f7:61:5e:4f:a8:e7:73:b1:c0:a0:91:9a:56:93:84:9f:
fb:ce:7b:d9:5d:ef:a1:07:bc:aa:1f:b8:81:70:c3:34:4b:d7:
b0:f7:99:12:74:21:c7:b8:89:45:7d:85:de:e1:8e:13:02:86:
bf:04:60:a3:68:9a:64:78:97:0d:41:05:9b:62:44:b9:92:09:
5d:52:43:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:36 2026 by rpki-client