Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: VvsTXtLIbYTpWHQ2Em1sGtsIAkV0cKZt+xOakQHDGX4=
Subject key identifier: 97:C1:C7:43:9A:50:E4:1B:E9:D1:FD:65:0F:69:14:38:2A:FA:56:66
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019E1FB5C5BE606B18AA577F2F82471C257D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 04F9
Signing time: Wed 13 May 2026 05:01:06 +0000
Manifest this update: Wed 13 May 2026 05:01:06 +0000
Manifest next update: Thu 14 May 2026 05:01:06 +0000
Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=)
2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: ie0nVvXAPEdFUC2e8SDda8Ndl5pbI5urB3QtK75htiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c5:be:60:6b:18:aa:57:7f:2f:82:47:1c:25:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: May 13 05:01:06 2026 GMT
Not After : May 14 05:01:06 2026 GMT
Subject: CN=97c1c7439a50e41be9d1fd650f6914382afa5666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:6f:96:57:14:4c:4e:c2:07:fa:66:ec:fe:
35:f5:56:8b:b1:ed:a6:77:49:f5:87:87:f7:84:73:
5a:53:78:38:59:2c:d6:f5:0d:c3:f1:6d:66:1f:e6:
55:b8:36:10:fc:69:53:b5:c1:0f:e5:48:66:76:9c:
6d:fc:e8:e5:f0:18:17:76:d2:64:a6:ca:56:c6:4f:
87:50:6c:35:cd:bb:07:2a:02:b2:de:84:e1:70:73:
c7:5b:7d:9a:1a:39:3f:6b:93:dc:de:c4:cd:4d:5f:
0f:12:d7:1d:e7:af:31:19:cc:a7:0d:4a:bf:62:e3:
8f:67:c6:0f:89:f3:04:78:f0:77:39:a7:ef:f4:13:
24:dc:a6:15:93:97:68:d0:08:ae:ff:9f:e4:a1:e4:
e5:4e:8c:a9:73:3c:a3:7e:ca:69:ee:76:74:0c:3c:
66:f0:96:ec:40:0e:ca:71:52:d2:51:07:03:96:4f:
97:8f:44:74:0f:64:fa:81:fb:8f:92:61:4a:55:21:
fb:8d:a6:f6:8f:38:1c:c1:fa:b4:d2:d2:6b:fb:f0:
6e:96:d5:f6:5e:e6:2c:85:b9:d0:87:9e:36:35:e4:
95:48:f7:18:1c:39:9c:2f:41:cc:cd:41:b0:00:34:
73:a0:43:8f:fa:f6:4f:8c:22:07:e5:c9:08:80:a0:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:C7:43:9A:50:E4:1B:E9:D1:FD:65:0F:69:14:38:2A:FA:56:66
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:97:fa:41:72:36:91:b5:5f:f8:0b:be:5f:30:fb:41:df:
31:b7:00:bb:c6:27:d8:21:b4:fa:ff:a1:c9:22:09:92:42:c5:
7e:35:43:78:65:54:68:02:3a:06:6a:19:ab:36:b5:c2:a5:f5:
c6:5e:db:ab:6c:c0:25:99:6b:b2:4b:10:9c:f2:2c:b3:6f:1c:
9a:52:58:f1:df:53:bc:d2:4a:de:20:49:04:b2:50:1b:da:00:
8e:19:9d:34:a4:c4:3d:c3:00:a2:a4:5e:8f:6e:72:2a:a3:b4:
1a:e4:43:18:27:f4:9e:8c:11:3c:05:38:74:e9:6c:2e:8a:58:
0a:f3:fc:7b:3b:29:b8:b2:e3:40:85:02:4a:d8:05:cf:23:fc:
22:94:7a:10:dd:0b:00:63:2d:50:d2:d0:38:5d:4c:54:21:a5:
a1:14:9b:67:c4:ad:32:a9:4d:10:11:cb:f3:21:ff:8d:79:39:
41:78:37:7e:12:9d:bc:df:b0:ea:7e:d4:6f:70:c2:c7:bc:ed:
92:f4:73:f0:4a:c8:a0:5a:49:f8:d8:e0:0e:c9:53:92:b5:7b:
6d:22:24:76:1a:45:e2:03:33:02:94:cb:77:45:58:9e:97:d8:
13:2e:d3:ff:27:d0:0f:dd:5e:5d:f0:6a:cc:cc:2a:b2:04:a7:
e2:58:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:33 2026 by rpki-client