Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier: etl8QZESYILG3UnA+grZ9CImAlx2SAFBoxSs0jQDkn4=
Subject key identifier: 0C:AA:6E:26:E6:B2:09:1F:27:3B:7E:0D:A2:87:46:AC:C3:48:D6:E5
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 019F9135E774FAB04E6771891B83D00105C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number: 08E8
Signing time: Thu 23 Jul 2026 23:00:56 +0000
Manifest this update: Thu 23 Jul 2026 23:00:56 +0000
Manifest next update: Fri 24 Jul 2026 23:00:56 +0000
Files and hashes: 1: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: zEoyuP3H+UrrJeE9Xq6SQMO74vnMNX6/8d+gFgs0wSA=)
2: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (hash: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:e7:74:fa:b0:4e:67:71:89:1b:83:d0:01:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Jul 23 23:00:56 2026 GMT
Not After : Jul 24 23:00:56 2026 GMT
Subject: CN=0caa6e26e6b2091f273b7e0da28746acc348d6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:2c:0f:49:5f:2a:27:36:19:83:fa:e5:a1:
06:42:bf:ee:fc:ad:19:c7:22:af:89:1a:3a:01:76:
bf:eb:29:d3:12:53:f4:fd:c9:19:0e:63:28:d0:94:
6a:5f:dc:cf:c7:60:7b:10:d2:c3:69:dd:d4:f8:cb:
a9:d2:a4:05:f2:6f:bd:95:88:ca:ea:92:4b:82:75:
c3:9b:d0:d4:96:53:0f:9f:57:8c:42:44:35:0a:38:
8c:42:8a:9e:cf:02:6a:2f:34:b4:40:0b:1a:59:e2:
b4:e0:ec:a9:39:eb:8d:ae:64:9c:a3:1d:42:b2:9d:
95:85:dc:cd:ec:01:11:20:a7:b6:9b:3b:79:d1:e7:
b7:90:cb:31:9f:54:f7:3f:6d:ea:83:ec:19:42:62:
42:73:fa:f4:5a:c3:fd:9a:8d:1f:c4:d5:90:70:79:
ad:5f:14:99:98:be:80:54:88:34:ec:df:a1:89:d8:
fc:c7:c8:1f:cf:63:4c:54:2c:09:53:37:16:6c:df:
b4:da:55:22:17:0d:f2:85:72:a1:2c:f7:f1:e5:a0:
de:88:72:81:52:50:82:70:51:ab:fb:14:0f:b1:50:
6a:4e:d3:8c:94:80:5e:f4:38:6b:04:88:35:9b:87:
d1:6f:23:b3:9d:6b:cf:db:7c:7a:62:be:06:17:2a:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:6E:26:E6:B2:09:1F:27:3B:7E:0D:A2:87:46:AC:C3:48:D6:E5
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:94:dd:11:23:a4:c7:9d:2a:a8:f5:b0:e2:39:a7:23:88:
6c:8b:92:6f:76:09:01:b0:01:ae:36:13:18:7f:b1:10:59:a1:
42:89:92:8f:31:84:f1:3f:c6:9c:7f:13:ec:d9:cd:24:ba:9b:
db:7b:9f:16:c3:6b:aa:fc:72:87:33:84:39:5a:5e:38:28:66:
45:9b:bd:bd:8f:b2:bd:d1:5c:71:3d:dc:52:29:8f:a5:76:bd:
1a:1c:22:0d:9a:b8:3f:97:20:c6:ee:b5:cf:b5:19:0b:ab:16:
cf:ec:0e:6e:c3:a6:9a:91:ac:07:d9:09:94:52:19:3a:ac:36:
2a:3f:04:c6:c2:13:ee:37:67:c3:a7:05:49:10:a1:03:ab:2b:
67:03:d8:14:a5:cc:f8:5e:6c:b4:97:f5:bd:0e:89:dc:c8:28:
be:c5:cf:1e:87:d1:44:27:72:b0:65:2c:be:64:32:1d:a8:51:
8f:f1:4c:8a:80:7f:64:96:35:14:aa:80:21:1a:77:3e:e6:d1:
13:13:d8:df:61:0d:83:bb:cf:de:45:35:03:ff:86:c0:40:85:
f9:dc:9b:de:41:70:e5:d0:9e:a6:6c:6b:ce:59:7a:17:94:b0:
93:89:17:82:43:96:34:ad:0b:67:a7:50:4b:c6:11:c6:43:dd:
98:51:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:54 2026 by rpki-client