Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: EBIYtVfMsso4PCfAWBXerp0kEPBk5Jf5qBIg25I8Q2k=
Subject key identifier: 5D:AF:E4:71:F6:BF:AE:C6:86:DD:4C:5B:83:67:64:4F:1D:F0:D9:00
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 019F94A47369C492C98D72EDEFB9F671FA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 112F
Signing time: Fri 24 Jul 2026 15:00:33 +0000
Manifest this update: Fri 24 Jul 2026 15:00:33 +0000
Manifest next update: Sat 25 Jul 2026 15:00:33 +0000
Files and hashes: 1: 59YcII7vwSrelszgVXfE1Zyv6ic.roa (hash: q6jTMI6TImBNKUCWPMApFyq9F6Fxj9YmbzWV3XM+69w=)
2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: 5D67fxpwVuAx6W0HG4V3uBfbOlyXIpLKS6S5ssPKTQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:73:69:c4:92:c9:8d:72:ed:ef:b9:f6:71:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jul 24 15:00:33 2026 GMT
Not After : Jul 25 15:00:33 2026 GMT
Subject: CN=5dafe471f6bfaec686dd4c5b8367644f1df0d900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:51:4f:5a:aa:43:8e:c0:f7:d2:46:93:8c:
9d:2a:1a:5a:5f:d6:5e:39:65:27:31:e3:2b:4f:36:
f7:9d:63:8d:ff:75:03:ce:6a:82:8f:05:be:20:55:
77:ef:ed:aa:b6:78:68:ff:06:00:4e:b5:3a:76:d0:
47:c8:28:1c:e4:59:3e:5c:84:64:00:1c:31:11:6f:
31:32:3e:dc:59:b9:af:31:9d:c8:42:a9:98:6f:c9:
0a:8c:44:9f:b1:da:18:86:3e:dd:62:bc:a7:2e:c6:
da:e1:5f:93:0f:60:f2:de:7b:23:73:e2:a2:a6:72:
db:82:c9:39:68:f6:9e:f3:f4:d9:55:89:15:20:8d:
72:0a:8f:74:d2:e6:b4:6d:47:d8:a3:25:4f:ae:ff:
89:32:ee:39:d2:f0:7d:28:5c:d2:27:c2:31:12:fc:
ba:3f:4a:ba:49:27:ad:87:aa:03:d0:a8:b3:ed:e5:
fb:12:47:84:30:a8:b5:f2:9d:7f:25:fd:ca:ce:2d:
2a:eb:b8:af:bb:45:d7:43:cd:2c:79:7d:ff:5e:b5:
11:77:47:d0:7c:92:60:2a:87:ec:55:dd:2f:90:f3:
ca:5f:89:72:21:20:81:e1:2f:a3:96:0b:8e:63:11:
29:3b:a8:b7:e6:d1:bc:d6:1f:32:55:49:64:a6:2a:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:E4:71:F6:BF:AE:C6:86:DD:4C:5B:83:67:64:4F:1D:F0:D9:00
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:86:8c:ed:3f:f4:3a:99:7f:87:07:98:0e:a6:8e:fb:2b:
df:f4:bb:4c:08:90:b6:73:ad:ea:df:cf:bb:ed:c7:f5:cc:a8:
0a:57:1e:49:06:23:d4:73:39:68:ea:f5:46:40:eb:b4:25:a5:
6e:7a:44:b8:ed:3d:0e:fa:96:59:ed:f7:3e:3a:70:9e:25:35:
29:f4:23:0a:83:ec:74:25:99:be:6b:b9:33:89:3d:ce:db:6d:
ab:e9:84:ee:bd:de:61:ef:8f:5d:f8:a6:9f:e6:ea:8b:cd:de:
15:6d:4d:88:5e:e4:46:62:04:59:b5:b6:18:d7:87:07:95:c7:
58:52:4f:33:a1:14:9f:d9:53:d2:7f:fc:f9:cf:fc:5d:a1:a6:
a9:24:3b:5e:00:bd:7a:09:b8:a2:d1:7c:51:52:ba:ca:e5:ed:
55:d7:f4:a6:ee:d4:90:83:76:a5:b3:2a:86:db:8e:1d:41:ca:
bd:bd:7b:91:8d:d6:c0:e7:44:4f:ff:1e:06:f2:9a:57:e7:30:
2e:60:ea:37:ed:c7:06:9f:ef:87:ad:69:84:c8:99:95:8c:da:
3c:b1:8d:73:6b:38:b7:f4:14:b4:63:dd:49:db:5d:47:e0:02:
11:90:16:e9:5f:f9:c1:15:f2:d2:14:4a:e4:36:87:a7:3d:51:
6b:74:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:13 2026 by rpki-client