Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: YgN0ZXdN4NQQerUkGK19ztwSjv+0zr9LGyaedcVSvQo=
Subject key identifier: 06:86:E2:30:7D:74:16:95:10:43:1B:9B:34:57:EB:2B:D1:5B:94:6F
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 019D9B511C7512FE3B1D4EBFB44736F336E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 14E1
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: TlfmAzV7GWwY3rXMRpeYUl7aKdw.roa (hash: 5eOHO+lm41+VyItnXbH9JnN/kNKtBVpRjgRNWcBchwM=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: tu+P6cfwOErCIeUEpv8cSQVLUFGUZ/KtqvMQX191KXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1c:75:12:fe:3b:1d:4e:bf:b4:47:36:f3:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=0686e2307d74169510431b9b3457eb2bd15b946f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:36:cc:21:75:0a:02:85:79:22:3a:bd:de:
0f:59:d2:7d:ca:1e:db:be:c3:92:20:fc:49:cf:2b:
49:80:c5:67:4e:c0:7b:c4:33:a6:69:98:62:a2:91:
60:a3:d9:57:d6:18:66:cd:b4:61:d3:e7:ff:62:fd:
9c:07:ba:db:29:42:11:9f:6a:40:16:81:b8:80:08:
a2:d0:16:32:d1:89:b5:7d:34:69:6b:e2:48:2e:de:
d8:31:d0:31:37:db:56:79:33:77:ae:ba:7f:aa:80:
1f:f1:90:e0:ab:42:10:5c:c3:c2:86:09:98:b2:29:
0d:bd:2f:39:de:4a:ff:3b:47:31:41:10:75:53:59:
d2:ad:3b:7b:2b:77:2a:5b:5f:a4:e8:1c:0c:91:16:
2b:2d:e6:f2:3e:e9:3d:27:e8:60:f7:cb:4d:95:39:
20:cf:c6:51:d4:2e:c8:51:c4:f1:ca:ad:3a:ac:07:
8c:dd:dd:c6:9c:e5:b0:ac:a3:c6:17:7b:09:44:cd:
37:7c:aa:b0:dc:2a:86:b8:1f:cf:5a:05:55:a9:a4:
df:f8:36:2e:95:5e:f0:bb:cf:10:36:14:7b:2e:68:
e5:81:ac:04:f5:89:05:b5:2f:93:d3:16:67:86:4c:
71:9a:84:6c:40:eb:42:c0:50:49:8d:dc:f3:56:51:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:86:E2:30:7D:74:16:95:10:43:1B:9B:34:57:EB:2B:D1:5B:94:6F
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:64:f1:69:07:68:8c:b4:63:c3:07:03:4e:d6:a7:bd:9a:
7b:d9:e7:ff:ec:52:43:6d:df:fe:d0:0b:ba:d0:6b:bc:44:a2:
7e:10:77:3f:8f:bd:72:b9:c8:4f:9e:d8:32:67:44:57:ee:9b:
77:3a:a5:0c:23:a6:4d:9d:b9:e8:0d:55:1c:35:01:b0:1e:3e:
50:ec:87:21:2c:0e:d1:06:2a:20:ad:9f:a0:b4:06:a1:c0:eb:
e3:3b:9a:99:61:63:2c:6b:41:34:06:25:b6:06:39:4c:c2:47:
66:b5:d2:18:50:42:54:c4:6e:23:f3:1b:6a:ec:92:b9:4c:e1:
a7:e0:35:94:e8:af:ea:52:05:c8:f8:69:12:65:c3:16:84:71:
15:d7:33:ee:65:90:c1:f1:da:62:a7:0e:62:32:33:d5:e8:b3:
e7:54:1b:b8:e9:6f:5a:bb:c6:f1:c4:a1:b2:0c:c8:1f:e1:fd:
2d:e8:7e:7c:3f:f4:9b:44:5f:8c:27:cf:52:2f:1d:94:30:c7:
b1:18:d9:b7:c4:d9:45:33:89:35:30:89:d8:cd:7b:fe:95:ae:
dc:c8:98:99:11:f9:44:f4:09:25:84:4d:66:bc:34:fc:71:52:
67:2f:47:6f:f2:c2:e4:f0:f4:45:81:b0:09:18:10:d1:6a:e9:
65:0a:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:28 2026 by rpki-client