
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: HWpSyOf/1hvIgj6SPZzs4sHxWIGHqin24jQYa0Ufojw=
Subject key identifier: EE:7D:B8:6C:D0:78:0F:EA:F7:46:E5:BB:7A:9B:DE:22:3E:F0:C9:91
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019E1E6C5664AC185950D52816F0486E2CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1921
Signing time: Tue 12 May 2026 23:01:16 +0000
Manifest this update: Tue 12 May 2026 23:01:16 +0000
Manifest next update: Wed 13 May 2026 23:01:16 +0000
Files and hashes: 1: PHg3Ww569zMDLEj_XkzXkt_l28U.roa (hash: 5pJ4hX6iwllF4hbtS1Bn9jqzOhPSmXxQOqAVEn4F03k=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: DXN9rmE56ABhlDf/ZIgFGuOz6bO0Wh60gbTn1RkyAfA=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:56:64:ac:18:59:50:d5:28:16:f0:48:6e:2c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: May 12 23:01:16 2026 GMT
Not After : May 13 23:01:16 2026 GMT
Subject: CN=ee7db86cd0780feaf746e5bb7a9bde223ef0c991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:3a:5c:cf:e7:5a:54:5e:43:3b:e8:35:2f:
4a:65:f9:fe:31:54:11:cf:37:0c:eb:b7:16:e8:36:
81:8d:0e:42:cc:bf:e7:6f:b0:dd:b4:10:5f:74:b4:
c0:42:30:86:55:d8:27:83:9e:5d:e6:e9:56:3a:fc:
aa:e4:1f:a4:08:fb:f0:99:ad:0c:95:bf:e8:92:9e:
fa:a9:04:ea:d9:31:7b:5d:72:31:0c:ce:37:82:62:
eb:48:cc:0b:2b:f1:3c:a1:bf:e2:db:c1:dc:44:04:
fc:de:20:f2:27:6d:e4:74:40:60:1d:90:de:22:e1:
81:18:b5:16:ed:88:52:e3:51:30:1a:82:9b:e9:82:
a0:4b:f0:15:dd:e2:76:24:38:44:21:bf:8c:2d:f4:
75:15:e3:d1:82:c3:85:39:21:ad:b2:73:e7:ea:f5:
f9:cb:5a:d4:be:35:47:0b:41:37:19:94:c9:b0:1a:
ff:db:b3:16:2c:13:d9:ba:05:6a:65:73:29:56:42:
a2:cd:e8:b2:59:35:10:a9:3f:4c:ab:d5:0e:a4:71:
37:38:d3:18:5a:65:2d:ad:69:53:cc:ab:10:16:b4:
1c:8e:b7:26:b2:38:13:d4:b3:47:ec:83:7e:28:d7:
d3:63:00:ff:89:61:98:e2:06:fb:c1:67:e1:79:fb:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:B8:6C:D0:78:0F:EA:F7:46:E5:BB:7A:9B:DE:22:3E:F0:C9:91
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:82:5e:d5:62:17:a3:4b:e1:78:7f:82:6f:b7:56:bf:4a:d3:
fc:1f:8a:06:e7:28:98:5f:d0:d9:bb:70:a7:f4:36:29:89:4f:
cf:38:62:0a:47:b6:cb:83:63:d5:d1:fa:fb:6e:3f:9b:a1:cc:
1b:83:2a:fe:51:f5:9d:d8:71:e9:28:75:f1:eb:fe:85:bd:0d:
80:76:ae:eb:e6:8d:88:32:13:1b:a7:c9:d8:0a:79:a1:96:79:
f7:64:47:32:92:c8:85:64:29:2b:b8:e4:1f:a4:34:7f:f3:65:
8f:ca:63:8c:40:2c:3f:0b:9e:3d:6f:67:e5:71:92:ba:96:6b:
4f:b5:3b:88:8f:c9:78:4e:f1:c7:22:94:0c:2e:b4:f3:17:b5:
4f:4d:2a:d5:9b:02:70:3f:6f:9f:a8:52:01:2b:31:25:c4:1b:
8f:9e:be:d9:7e:54:d1:63:91:43:95:b4:e4:b0:18:ec:54:8a:
c3:df:15:9a:39:9d:aa:8f:e3:5f:94:ea:e4:3a:a3:d2:09:e3:
34:58:ea:48:3f:b8:84:3f:81:24:09:3d:3a:da:f4:d1:10:99:
01:d8:ed:a9:cc:6b:c4:22:9b:63:45:e2:72:4a:63:15:2c:9d:
1e:2d:a3:00:73:bf:83:36:4c:c6:8d:95:e0:bb:fb:6e:b6:44:
b2:73:16:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:13 2026 by rpki-client