Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: pg7XPrVus80rLzszDi3CSSRK5oUgwS1P+IU/01esWxg=
Subject key identifier: 2B:9B:65:CA:5D:D1:5C:0E:35:E6:99:26:C8:52:47:35:07:B8:26:76
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019E21A3FC9D58C8B6183F68328F9E81714F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 1367
Signing time: Wed 13 May 2026 14:00:55 +0000
Manifest this update: Wed 13 May 2026 14:00:55 +0000
Manifest next update: Thu 14 May 2026 14:00:55 +0000
Files and hashes: 1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: tHcpzGCs4anRC05EMybn8ZLoxRD0Ypz0muJ5lpUUDo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:fc:9d:58:c8:b6:18:3f:68:32:8f:9e:81:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: May 13 14:00:55 2026 GMT
Not After : May 14 14:00:55 2026 GMT
Subject: CN=2b9b65ca5dd15c0e35e69926c852473507b82676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:b3:1f:f5:c5:8a:2e:35:d0:cd:97:09:d2:
93:0b:ef:4f:7d:2b:25:78:af:d8:ae:20:e4:85:ea:
ed:03:90:0c:40:8c:3f:da:b3:3c:f8:44:51:28:6a:
1b:1a:3e:0c:c4:98:64:27:1e:7a:f3:6d:4c:76:a7:
c8:79:6d:bb:fb:b3:0a:51:22:34:ee:ae:b1:8c:94:
30:73:55:e2:de:32:4f:b8:1c:ae:88:29:34:b6:f8:
7c:8e:a7:29:31:bd:ac:61:76:69:be:59:69:ba:05:
02:53:73:d0:fc:5d:6c:96:21:26:01:39:6c:18:e3:
ab:6d:d8:54:fa:8a:f0:8a:8d:fc:81:b9:76:95:f4:
4e:02:78:a4:1b:d0:40:7e:ec:73:1d:f2:ca:61:0a:
71:1c:76:26:63:44:53:78:f4:52:fb:72:40:39:27:
32:20:73:26:9b:df:bc:79:ec:c3:e0:8a:ed:87:cc:
dc:c1:0c:df:b2:a6:17:ae:73:ed:8b:cb:ce:b7:aa:
bc:ff:fc:ab:d5:d8:78:9c:d5:68:82:70:27:a9:6b:
45:79:82:5e:e0:2e:06:46:29:26:ad:4a:34:ca:9e:
ec:07:45:c3:81:64:54:8e:3d:14:0c:77:7c:b0:4b:
15:4f:bd:e7:fe:c8:1d:96:b5:63:92:3a:4f:2b:d8:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:65:CA:5D:D1:5C:0E:35:E6:99:26:C8:52:47:35:07:B8:26:76
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:a6:87:90:4c:aa:70:73:67:ae:53:00:a7:0f:0b:ff:96:
7a:ad:f5:cd:41:95:34:90:21:09:5c:22:37:2f:7e:fb:69:77:
e5:73:f7:31:fd:50:6c:cd:c9:4d:f2:cd:54:7b:b2:07:8a:0d:
7c:60:be:43:d8:49:b0:9f:c7:fc:0e:54:df:c6:d8:7b:f1:7b:
46:d1:09:f8:4f:ed:9e:1f:63:8f:87:09:69:a4:3e:46:50:d5:
5e:fd:23:de:fa:db:7a:55:1d:07:9c:d8:68:2b:60:a6:d8:49:
4e:45:60:9a:23:0d:ec:a3:f0:35:64:a4:bd:68:83:cf:04:49:
b3:32:1c:29:ad:5d:75:7a:95:b5:df:31:60:e9:9b:7a:09:3b:
85:18:dc:23:fc:97:f6:3f:1f:c9:9a:f0:8a:0f:59:52:d6:02:
93:c3:5c:f2:3a:ee:f6:f9:56:65:59:77:65:d1:61:4a:13:f3:
30:fa:b8:f3:98:34:a4:ec:4d:86:20:56:17:a4:42:37:cb:e5:
0a:e3:3e:13:c1:7c:66:c6:88:3f:09:c7:e7:81:1f:85:5c:ad:
7d:65:c2:9a:62:55:31:a0:70:c6:7b:f8:66:4f:92:f3:fc:32:
fd:50:1e:5c:29:35:9b:be:da:14:bc:7a:a5:2d:73:17:11:78:
63:ce:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:38 2026 by rpki-client