Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
File: WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json)
Hash identifier: VJGIqxkDxTghT9t/k6eaTLVejwkIxhowUhljLemJb0E=
Subject key identifier: 22:4C:A2:3A:EB:21:06:D9:E4:94:0D:1A:AB:42:88:CF:04:B9:5B:CF
Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Certificate issuer: /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Certificate serial: 019D9962E822691E1C794B6A16182FCAA633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
Manifest number: 1887
Signing time: Fri 17 Apr 2026 03:01:29 +0000
Manifest this update: Fri 17 Apr 2026 03:01:29 +0000
Manifest next update: Sat 18 Apr 2026 03:01:29 +0000
Files and hashes: 1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: cvCCq4ZBPLt8aLZlRARYB2O11PE+t/Qmx6BUXwoYrHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e8:22:69:1e:1c:79:4b:6a:16:18:2f:ca:a6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Validity
Not Before: Apr 17 03:01:29 2026 GMT
Not After : Apr 18 03:01:29 2026 GMT
Subject: CN=224ca23aeb2106d9e4940d1aab4288cf04b95bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:4e:03:3b:dc:09:da:3f:a6:87:97:0b:27:
ea:eb:3e:8f:60:a0:a3:3e:57:2b:e2:29:dd:c2:a4:
e7:db:af:ca:54:81:33:07:43:51:72:eb:5b:34:d1:
71:8d:59:8c:83:f5:67:20:38:ae:48:bd:e6:18:a8:
0e:63:0d:92:aa:45:2f:51:a7:e4:d3:ed:32:a5:fa:
fe:b9:1a:fa:57:f7:98:06:ca:13:bc:1a:23:c8:d8:
88:a4:e7:66:34:2b:5f:1c:b1:b1:6a:f4:0f:de:d6:
c9:2c:de:0b:64:c8:25:13:14:8a:c0:72:07:d3:aa:
41:ea:29:8d:db:61:f7:48:0c:f9:80:e9:53:d8:b5:
e6:5f:1c:7e:c6:d6:f3:8c:2e:54:57:8a:16:4d:07:
2e:1e:c9:5e:b2:e9:9b:1b:40:e7:c1:18:7f:3c:7b:
f1:ef:e3:33:42:31:39:e7:00:bc:c4:08:68:04:40:
41:43:ea:fe:86:42:fe:83:21:a4:a9:cf:c1:08:6d:
a9:09:84:22:e4:1a:4b:34:a6:1f:38:b5:02:f2:b4:
61:c0:e9:b7:d7:01:79:b8:04:ba:f8:e6:85:05:25:
c0:aa:53:c3:72:05:e9:5e:e2:b5:cf:6b:a2:fe:59:
d8:cb:4f:36:15:ca:66:ea:55:64:98:3a:ca:4b:27:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:A2:3A:EB:21:06:D9:E4:94:0D:1A:AB:42:88:CF:04:B9:5B:CF
X509v3 Authority Key Identifier:
keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:f6:22:99:6a:41:20:36:29:a8:a3:62:0d:fb:58:fe:88:
4e:5d:a7:f1:fd:fc:5f:dc:4d:d5:85:b5:ba:40:56:47:41:85:
3c:f7:a2:0c:13:e5:49:53:a8:39:60:10:72:2f:ee:2b:67:3d:
b8:41:f9:50:6c:a6:1a:3e:2e:dc:ec:6e:dd:94:83:1f:40:34:
af:8d:2d:05:90:3e:32:35:52:ef:52:e6:c9:a0:46:7a:ca:48:
02:94:37:fe:e7:2a:14:ba:d8:ac:ca:0b:43:f9:34:4d:f4:0f:
47:9e:e8:76:2b:6f:c8:49:06:fd:d0:9e:a4:e3:61:6c:7c:d3:
de:ee:8d:88:5e:81:5a:1f:aa:68:ad:02:b6:9d:b4:c2:3e:17:
03:4c:18:29:46:b1:1a:a0:a5:2c:63:c1:d8:a2:e3:14:9e:5f:
98:60:54:4a:87:3e:2b:57:dc:4c:fc:32:06:ec:cb:a9:98:d6:
12:cc:37:a2:2c:a2:73:d1:0c:a6:fb:26:92:23:5d:37:29:11:
4c:ed:03:ae:55:83:df:55:aa:eb:60:00:25:25:be:75:20:d6:
ab:07:30:12:75:4b:54:5b:e8:7c:ea:a8:57:55:4b:af:bb:b1:
eb:8a:e0:f4:e3:d6:db:f6:60:7e:62:d7:00:73:38:e7:0a:af:
71:78:f7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYugiaR4ceUtqFhgvyqYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTQ1YjlmYmQwMWQyOGMwZWE2ZDA4ZjViNDcyZGIzNGZh
ZDJlYTMwHhcNMjYwNDE3MDMwMTI5WhcNMjYwNDE4MDMwMTI5WjAzMTEwLwYDVQQD
EygyMjRjYTIzYWViMjEwNmQ5ZTQ5NDBkMWFhYjQyODhjZjA0Yjk1YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2VOAzvcCdo/poeXCyfq6z6PYKCj
Plcr4indwqTn26/KVIEzB0NRcutbNNFxjVmMg/VnIDiuSL3mGKgOYw2SqkUvUafk
0+0ypfr+uRr6V/eYBsoTvBojyNiIpOdmNCtfHLGxavQP3tbJLN4LZMglExSKwHIH
06pB6imN22H3SAz5gOlT2LXmXxx+xtbzjC5UV4oWTQcuHslesumbG0DnwRh/PHvx
7+MzQjE55wC8xAhoBEBBQ+r+hkL+gyGkqc/BCG2pCYQi5BpLNKYfOLUC8rRhwOm3
1wF5uAS6+OaFBSXAqlPDcgXpXuK1z2ui/lnYy082Fcpm6lVkmDrKSye0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJMojrrIQbZ5JQNGqtCiM8EuVvPMB8GA1UdIwQY
MBaAFFhUW5+9AdKMDqbQj1tHLbNPrS6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Y2ZjNzktOGJkYS00ODYyLWE3ZDgt
NGY4ZDkzNTVkODYyLzEvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85Y2ZjNzktOGJkYS00ODYyLWE3ZDgtNGY4ZDkzNTVkODYy
LzEvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSj2Iplq
QSA2KaijYg37WP6ITl2n8f38X9xN1YW1ukBWR0GFPPeiDBPlSVOoOWAQci/uK2c9
uEH5UGymGj4u3Oxu3ZSDH0A0r40tBZA+MjVS71LmyaBGespIApQ3/ucqFLrYrMoL
Q/k0TfQPR57oditvyEkG/dCepONhbHzT3u6NiF6BWh+qaK0Ctp20wj4XA0wYKUax
GqClLGPB2KLjFJ5fmGBUSoc+K1fcTPwyBuzLqZjWEsw3oiyic9EMpvsmkiNdNykR
TO0DrlWD31Wq62AAJSW+dSDWqwcwEnVLVFvofOqoV1VLr7ux64rg9OPW2/ZgfmLX
AHM45wqvcXj34w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:42 2026 by rpki-client