Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: 06uRPGzySVPw7ccTcCCWYH4bXQP3PqpxctTMz47oCQ4=
Subject key identifier: 31:8D:E5:34:E1:BB:2A:63:A9:37:C0:D7:C2:81:16:DB:C5:05:F7:17
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019E1BD8E8B0CD10806366D9D3FF96C4BC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0D86
Signing time: Tue 12 May 2026 11:01:00 +0000
Manifest this update: Tue 12 May 2026 11:01:00 +0000
Manifest next update: Wed 13 May 2026 11:01:00 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: gXwW2NsdDSGTwsA6iQz5gGqlGpb/qIpauQ+aLq9osbY=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:e8:b0:cd:10:80:63:66:d9:d3:ff:96:c4:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: May 12 11:01:00 2026 GMT
Not After : May 13 11:01:00 2026 GMT
Subject: CN=318de534e1bb2a63a937c0d7c28116dbc505f717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:1b:6d:f7:9d:77:ea:14:5f:ef:95:c1:69:
73:30:c0:62:3b:8d:61:e6:b6:55:cc:81:60:5c:63:
57:e6:e8:3b:29:fc:7f:be:4d:14:49:18:37:99:9f:
58:0d:a3:5c:f7:c8:03:a1:a3:a0:ba:a8:70:2f:21:
b0:39:56:73:4d:ca:a6:ea:91:de:dc:59:c3:5c:91:
bb:de:f0:39:6d:e3:6c:35:ed:7d:8b:2c:0c:da:13:
c6:f3:4b:0b:52:e9:6b:37:71:9f:03:27:7e:f1:e1:
5a:7c:59:c6:32:0d:c6:c7:a6:87:c7:e8:ca:0f:32:
eb:f1:1d:2a:f9:5f:db:4e:8f:72:4c:2f:7d:a3:8d:
57:e3:65:f7:9a:42:c0:4f:98:51:aa:f4:f4:ac:ea:
ff:46:a0:bf:19:dc:ef:08:23:44:ea:f9:11:78:15:
71:71:6f:c2:11:45:bb:d0:cb:fd:37:ac:4b:e4:16:
4d:d8:22:0d:a4:80:d9:a4:99:34:66:48:3f:89:68:
e5:98:b8:54:75:6a:12:96:3d:2a:ea:05:9d:9c:f9:
88:11:74:91:81:6e:03:09:d8:37:ba:ef:83:e3:77:
36:89:81:2c:6c:fc:46:03:51:be:0e:42:c9:5b:da:
1d:ad:64:1c:0f:88:9f:69:51:fd:01:c5:24:0c:bd:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8D:E5:34:E1:BB:2A:63:A9:37:C0:D7:C2:81:16:DB:C5:05:F7:17
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:35:b7:32:51:93:1b:17:88:8d:d8:fb:5d:ea:ee:98:f3:93:
92:73:45:2f:d2:23:29:bb:fd:a1:6f:3d:e4:f6:62:c0:3e:ee:
66:58:f2:0e:aa:b8:a7:3b:cd:08:c6:04:e5:74:b5:23:97:78:
0b:25:f0:40:4e:66:05:f8:17:8b:b3:42:b7:dd:f4:6b:e3:2f:
6a:ad:fe:30:58:83:50:f2:0d:fa:e7:37:a2:53:af:4a:24:74:
27:ad:43:00:2c:18:03:50:4a:3a:37:33:2f:e6:7b:3d:c1:53:
1a:50:91:c0:71:0c:bf:84:5b:a0:9d:ed:46:b1:d1:80:64:cd:
64:76:84:b0:e9:61:1a:89:99:e9:77:33:dc:9f:2d:b9:8a:c1:
3a:db:16:e6:d7:18:cf:10:cf:37:4e:30:36:ef:88:e4:2d:02:
f4:70:87:ba:e6:d2:a7:df:56:bc:66:ef:64:92:26:a8:21:d3:
11:43:3b:9b:8e:21:64:ec:80:ac:b3:56:1d:3a:23:98:ad:2e:
47:dc:d3:6e:59:1d:e8:cc:bb:1f:c6:5c:89:a7:a5:d4:26:d3:
ba:86:e5:ae:67:ac:2c:81:db:00:3a:a2:be:44:41:1b:22:2d:
f1:93:3d:bf:09:e3:0b:0d:56:b4:93:68:99:21:8a:97:e5:62:
92:b2:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:34 2026 by rpki-client