Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: Zjc90hi6MV79pDHhGjAzKAfwNdDbkBA2W0eusLg73ck=
Subject key identifier: 51:FE:4C:24:5D:24:5F:AB:48:D6:79:B2:7C:D5:5F:46:0D:A1:01:82
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019D9B5089AE5DA1954A5719D784BB72CB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 02D3
Signing time: Fri 17 Apr 2026 12:00:39 +0000
Manifest this update: Fri 17 Apr 2026 12:00:39 +0000
Manifest next update: Sat 18 Apr 2026 12:00:39 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: m1zOAbqCAECXUtG7TIMUVltvLJbXoVcwXwio3HC9w20=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:89:ae:5d:a1:95:4a:57:19:d7:84:bb:72:cb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Apr 17 12:00:39 2026 GMT
Not After : Apr 18 12:00:39 2026 GMT
Subject: CN=51fe4c245d245fab48d679b27cd55f460da10182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:67:0d:b1:72:ac:b6:45:00:ed:42:a6:17:
e1:2f:3e:cb:c3:18:20:10:12:cd:94:8c:36:9b:ee:
2b:f5:47:42:08:e1:04:6e:26:d9:74:b6:f7:7c:73:
9b:81:53:d6:95:c2:60:12:32:e5:34:56:de:85:1b:
0e:92:70:fd:56:8a:5a:39:c3:cf:ca:a5:09:a5:35:
db:fe:8b:44:8d:44:17:af:13:be:22:15:0b:14:ad:
a0:f0:4a:e8:62:a7:b0:e5:ee:f4:8c:27:81:38:34:
3d:e9:9d:4b:5a:ee:0e:9b:99:2c:9a:45:cf:1f:60:
6d:e1:20:ed:56:ad:2d:cf:06:ac:70:8d:22:28:21:
61:c3:11:9a:ba:63:5b:b9:7d:9a:04:39:98:0c:ef:
a5:96:b2:c1:d2:43:3b:25:09:aa:08:0c:1d:33:c5:
39:b0:a2:97:23:d2:1c:06:6b:26:dd:3c:67:14:3f:
5e:cf:b6:ae:27:7c:43:00:aa:f2:57:90:5c:e2:1a:
45:eb:7b:8d:02:85:c8:d1:fe:17:c9:90:a7:09:a4:
d9:aa:6f:fa:01:8c:d6:b0:5d:9b:a2:89:71:b9:66:
08:ee:c6:f6:bb:da:02:e0:46:7c:54:8d:c7:08:d6:
10:e0:e9:47:ab:e9:17:71:14:a6:14:8c:57:b1:7e:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:4C:24:5D:24:5F:AB:48:D6:79:B2:7C:D5:5F:46:0D:A1:01:82
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d3:6e:b3:44:f8:07:81:ff:69:fc:a4:b4:f0:a9:af:1f:57:
e3:0c:8c:0f:ca:31:81:0a:58:ef:c1:59:5f:8f:14:90:94:9d:
37:f9:de:a7:65:2a:26:60:43:94:bd:35:b4:f0:76:4c:03:86:
d7:78:79:73:1c:a8:cd:8d:d4:1b:3c:af:1b:da:a2:98:70:9c:
95:4a:e6:2a:c3:2a:47:0a:12:cc:86:6b:a7:ef:8e:61:96:96:
56:3c:20:4f:03:45:c8:f2:56:1d:67:7f:29:d3:c3:45:ed:4d:
b9:a2:ee:04:e0:e2:87:d0:8c:8f:d3:09:b2:86:41:62:a3:c2:
af:d6:1a:8f:07:da:db:6b:00:55:5c:c5:a4:51:62:98:33:34:
e2:49:85:64:8c:10:46:6b:4a:ef:ad:cc:22:f0:4a:e3:98:67:
18:e9:b3:85:4b:f8:66:dd:9e:63:20:46:7d:a5:e0:13:00:1e:
cc:62:4e:42:7c:a6:d6:5d:fc:f9:8e:1a:1c:ce:97:73:3b:8c:
be:24:21:33:79:8a:3f:cb:4d:f1:c7:8a:22:ca:b0:9c:49:4f:
c6:04:5a:f2:fd:da:1d:78:3f:2e:44:c1:3e:e6:d4:8e:5d:ab:
2a:36:0f:e7:22:1d:44:c3:43:88:ad:1e:10:1c:dc:3e:83:c0:
1a:c3:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:20 2026 by rpki-client