Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: ewVXrfytmAflrqu+jfbcMSFdIvwXe3c7ylPkGaj32YA=
Subject key identifier: 9A:E4:89:99:3C:28:A8:8E:43:6E:C6:0B:D3:11:61:3B:53:0D:00:89
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019E1D59B2578B7C39E28E964E3FF6C5E41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1720
Signing time: Tue 12 May 2026 18:01:17 +0000
Manifest this update: Tue 12 May 2026 18:01:17 +0000
Manifest next update: Wed 13 May 2026 18:01:17 +0000
Files and hashes: 1: 2fDUlbNk_TjJfNmL8k7Qpaq_A4k.roa (hash: AoEFyUvMFK7WBCJaTliv+GG29q2nziZw8E359o15zN8=)
2: gMvc_sE40m271NPynEOBrQzKYWQ.roa (hash: OeLSYnjbKMmBS4VGXJ744NmGmYrVy7bxB46xBnCaSmA=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: 8NQQiUdjQmrOA4eOxGITfr0RDprh70uT3EEMMnoz88s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b2:57:8b:7c:39:e2:8e:96:4e:3f:f6:c5:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: May 12 18:01:17 2026 GMT
Not After : May 13 18:01:17 2026 GMT
Subject: CN=9ae489993c28a88e436ec60bd311613b530d0089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:ac:bf:9e:a6:c2:e9:8f:22:da:3d:cf:ba:
a8:97:a9:2d:9c:4a:af:43:55:dc:e0:18:78:3a:44:
1c:ad:b6:bc:c4:fa:38:e4:f7:37:86:ea:90:ae:e9:
e3:33:17:c3:b5:08:de:b3:6a:7a:5e:b4:2d:72:97:
57:0e:f3:33:81:49:8a:af:26:2e:d4:e1:83:89:06:
1b:73:15:f8:7b:13:f0:8c:38:15:93:ed:2e:e7:fd:
55:1c:b9:74:dd:59:b4:f2:81:a8:9d:d4:25:fe:4a:
46:22:e0:bc:9c:64:fc:1a:ba:7b:37:ea:1b:9e:60:
2a:03:2e:12:4f:a2:6f:d3:ec:59:b5:af:72:23:1c:
f3:3d:35:a9:0f:8e:b7:d3:47:0f:85:30:5f:b5:19:
87:e7:b5:94:4d:b4:15:f1:47:9e:7d:24:53:84:b9:
32:b9:5d:a5:27:5e:6f:2b:e5:c1:81:40:6e:5e:d7:
01:88:78:06:42:ce:77:16:a7:ee:63:40:54:d7:2a:
e2:6f:b2:c0:b3:6e:36:fd:9e:f6:d5:13:cd:86:3e:
e1:da:9b:11:10:b0:8a:16:d2:14:38:bf:24:2b:4c:
94:ba:85:00:f0:66:76:1d:6a:4d:1e:3b:6b:33:6b:
45:84:1f:37:93:6d:8c:1d:cc:ff:61:ca:68:27:eb:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:89:99:3C:28:A8:8E:43:6E:C6:0B:D3:11:61:3B:53:0D:00:89
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:3e:b1:02:41:cc:e1:24:8b:32:99:d1:83:cb:58:ea:e8:
1d:73:e9:97:2a:10:f2:8e:d9:3e:0e:ad:aa:03:56:41:d2:48:
e7:cd:42:ae:b8:ae:7d:d4:69:b7:e6:cd:8c:e1:d3:d7:0c:b3:
ad:70:9c:ca:af:f6:e1:a9:fe:cb:9f:0a:89:eb:00:7e:f1:6c:
cd:0f:92:9c:14:fe:59:01:d5:85:62:3b:54:85:ce:5e:2c:0a:
32:c0:b3:bb:d5:9e:10:56:66:94:a1:af:44:a6:6e:aa:30:fd:
da:91:7c:89:dd:db:65:3b:bf:d6:5e:d3:43:69:35:1e:9d:2b:
9a:e9:c8:f1:ab:39:9b:1f:d5:2d:d1:ef:bf:2f:c6:cc:f4:f0:
0b:cb:87:42:5e:01:fa:f7:2c:f4:19:48:89:2d:aa:db:02:a0:
92:6d:73:2d:d5:e2:22:86:a2:8a:5b:92:eb:4f:9e:07:5c:ac:
76:c9:b5:f9:9c:94:0c:78:5b:a6:59:26:ef:c8:3a:3e:55:f1:
92:bd:7c:bc:75:57:dc:8a:59:4c:51:fe:51:b7:1a:ab:00:96:
64:15:96:48:2c:20:88:a7:fe:e9:ea:0b:9d:76:f1:a9:db:8c:
94:f0:3c:d7:c5:20:f6:9c:20:11:1e:df:38:48:6c:0e:bd:a6:
28:cb:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:36 2026 by rpki-client