Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: IoqTTgWbgoL5txoF8Lb8Uhrn+IBgk0mAt5Mm+9UgTJA=
Subject key identifier: F4:6D:7E:19:9C:4E:25:65:13:68:AD:46:25:EB:7A:C4:AC:F9:37:29
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 019E1DFE74DFD0BC57F2315A267BEDC0FA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 066F
Signing time: Tue 12 May 2026 21:01:15 +0000
Manifest this update: Tue 12 May 2026 21:01:15 +0000
Manifest next update: Wed 13 May 2026 21:01:15 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: l7DKYJkUovoRP4HWLlXdubfFklbtEpS3/XbgcHlvnUs=)
2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:74:df:d0:bc:57:f2:31:5a:26:7b:ed:c0:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: May 12 21:01:15 2026 GMT
Not After : May 13 21:01:15 2026 GMT
Subject: CN=f46d7e199c4e25651368ad4625eb7ac4acf93729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:fd:7b:21:18:05:d8:66:9a:42:53:e5:0b:
0d:4a:1f:bc:33:fe:36:a9:2d:49:0f:02:9d:e4:d8:
a4:24:58:56:d3:80:90:65:00:0d:74:ae:6e:f6:ef:
76:bb:3d:6f:67:6d:45:0b:b3:d8:d2:b2:a1:c9:bc:
a0:50:8d:7b:7f:04:ad:52:7c:10:c7:7b:1c:47:3d:
eb:7b:c4:fe:3e:0c:b3:02:a1:05:4b:ee:7a:45:4a:
bc:d5:ad:8d:93:4c:78:3e:15:7b:83:28:b7:9a:a8:
3e:ff:e4:8e:34:3f:84:72:fa:7f:49:41:1f:f6:27:
e4:f3:62:3a:9a:8b:8e:85:38:3a:5a:b1:d8:2a:f4:
16:08:de:82:11:da:d3:0d:fa:c9:43:92:dc:d6:95:
68:fd:66:2d:a4:34:35:b6:44:da:95:da:a5:59:5c:
ce:19:a1:02:c1:79:19:7b:24:38:68:33:f0:aa:8e:
3d:87:b4:c0:e0:c2:02:44:27:ec:c0:f0:78:48:0b:
71:3f:d6:cb:38:69:a6:90:e3:75:1a:ec:7f:27:6a:
fa:ce:1d:69:a1:c6:15:26:31:40:fe:14:d7:e7:ec:
ff:fe:a6:6f:07:a2:4b:6a:4e:95:b7:59:7e:f2:c0:
9a:60:a7:f9:36:b7:0e:46:d4:58:8e:29:b3:28:78:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:7E:19:9C:4E:25:65:13:68:AD:46:25:EB:7A:C4:AC:F9:37:29
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fc:b5:40:83:ed:c6:5a:d1:cd:ce:d5:05:bb:8a:94:6f:55:
5c:75:f8:06:38:14:cf:40:e1:b4:85:b3:a7:7d:3b:ee:32:2f:
b6:83:79:13:b2:c0:3a:e6:08:fb:aa:39:4f:a9:78:bf:c4:7a:
84:cc:f9:8a:21:10:a4:34:77:95:f5:f2:a8:ab:8f:fc:96:c9:
58:1c:41:fb:30:f3:d4:ec:38:79:1a:bf:2c:ff:04:d2:9b:d1:
8e:d5:0a:30:7b:6c:fe:33:1d:58:d4:cc:46:7f:e0:55:f1:3d:
e5:49:7e:36:84:a4:17:66:76:a5:30:fd:d3:d9:61:f0:69:47:
45:25:e9:6c:b7:b2:7b:63:81:bd:d4:8c:86:d1:ff:69:c6:1f:
05:4b:22:aa:d4:0d:38:f7:eb:46:d7:fe:dd:97:2b:49:ca:7b:
9f:29:79:e6:82:cb:da:65:15:46:f3:7a:d1:86:c2:55:32:28:
11:26:70:df:cc:4e:12:ff:7c:65:79:cf:de:90:84:c5:a5:78:
e1:c8:38:9c:ac:59:79:37:dd:ed:04:01:91:8c:36:9a:1a:27:
e2:ad:17:47:01:39:20:28:83:7c:85:3b:b0:ed:f1:dd:a6:15:
a4:b0:d5:da:fb:7f:42:49:0c:9d:02:e2:7f:e0:58:6e:7c:64:
4a:81:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:41 2026 by rpki-client