Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: +Q4NH5Y/g4jLKgfX+HGORSjj+xl6ngvVSxNwmXUeLvU=
Subject key identifier: 42:0C:B2:81:DC:90:62:F4:9A:EC:FF:30:BD:CF:12:D1:5B:DF:03:D8
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019F946D514175475BA58EA6247296493BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 05BA
Signing time: Fri 24 Jul 2026 14:00:19 +0000
Manifest this update: Fri 24 Jul 2026 14:00:19 +0000
Manifest next update: Sat 25 Jul 2026 14:00:19 +0000
Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=)
2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: IZTeKqLsHSVdSPJAHT6PubZpH1TtuMKdmnZJmK+iyG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:51:41:75:47:5b:a5:8e:a6:24:72:96:49:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jul 24 14:00:19 2026 GMT
Not After : Jul 25 14:00:19 2026 GMT
Subject: CN=420cb281dc9062f49aecff30bdcf12d15bdf03d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:99:76:f5:da:4f:f6:f1:e6:32:93:ee:88:
ac:5e:fd:e4:a2:d5:26:6a:6c:bb:06:f7:66:72:1f:
27:ea:21:8f:e2:23:5d:a2:82:9b:42:8b:90:cb:af:
9d:9d:fd:4f:ef:9a:5a:f4:03:4f:80:5f:b2:9b:c9:
53:8a:68:25:bd:01:ab:8a:c7:76:d7:79:d3:89:e7:
77:b9:32:b3:5b:98:53:4b:81:37:48:98:01:33:f7:
c9:95:bc:64:11:9b:a5:df:52:e7:b8:53:3d:22:89:
84:0c:52:8e:a7:33:fd:ed:e3:3b:13:cd:f3:f4:29:
d0:a2:22:ff:e1:ea:53:4e:80:20:54:35:3b:87:24:
0b:04:53:5e:b9:3a:0c:aa:6c:58:65:42:b7:2e:9f:
34:17:11:f3:4f:b0:7c:98:92:a3:0b:21:bd:39:e7:
d1:dc:8b:96:d8:6d:3f:7d:51:82:cb:4a:ca:93:9a:
db:60:4b:ac:15:10:e7:9b:87:40:2d:de:1d:0e:75:
33:1b:af:ec:23:1e:31:cd:04:08:e5:87:72:73:fd:
61:e2:db:36:7b:7e:09:70:89:23:4c:a3:e3:fe:f2:
fc:7f:13:68:14:d1:4e:69:15:c0:3f:62:c4:5a:43:
f8:37:25:9d:c6:03:69:7f:ff:ca:55:94:99:c3:89:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:B2:81:DC:90:62:F4:9A:EC:FF:30:BD:CF:12:D1:5B:DF:03:D8
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:87:e3:2b:87:0b:89:d5:c7:5d:77:f6:6d:0c:af:85:06:
44:06:92:04:8d:b2:1d:fa:cc:ae:27:8c:8a:a3:bc:f5:33:7a:
f4:a1:90:b6:09:48:bd:e4:96:80:fb:d7:bb:67:b8:83:0a:63:
fb:17:79:07:68:7b:4f:aa:97:e5:8e:02:36:ba:ae:b6:92:9f:
5e:cf:b8:9e:9f:69:72:15:d3:32:2a:6e:6e:52:bf:4a:9d:05:
2f:2d:17:a9:53:ee:af:87:5d:f7:bf:d0:36:9e:d3:72:1d:d4:
a6:cc:e2:d9:ec:75:7d:33:d3:aa:c8:54:d5:e0:4a:55:30:26:
58:15:59:6e:de:51:55:1b:49:6e:d5:9b:e1:c0:aa:6b:1f:c2:
0d:f8:ca:79:98:ba:fc:5a:cb:ff:9e:ab:71:ce:8c:af:d4:57:
bf:2c:72:21:dc:bd:d0:e9:42:47:32:13:26:9a:48:d1:36:d4:
e2:58:ce:1e:05:44:c2:d3:64:d4:c8:d1:15:7d:7c:38:e9:8d:
30:d8:f6:fe:84:9f:a2:17:14:f0:fa:16:db:e4:de:77:94:87:
d2:05:59:41:b5:67:37:33:3e:b1:15:66:9e:b2:60:f4:a7:f0:
36:f5:b7:9c:55:f9:4f:5c:b6:c3:66:30:9a:23:0b:60:9d:74:
07:e1:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:22 2026 by rpki-client