Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: hxHSPBJfrwXevZ/z+1QnD7BASmYyYcEU0/3LbPtO1X4=
Subject key identifier: 6A:3E:2C:8D:43:BC:2B:FB:EF:CA:2B:03:BF:2B:9E:08:80:3D:8F:1B
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019D9D76599D3AEF51E7B3738DD423A0CF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 042D
Signing time: Fri 17 Apr 2026 22:01:12 +0000
Manifest this update: Fri 17 Apr 2026 22:01:12 +0000
Manifest next update: Sat 18 Apr 2026 22:01:12 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: q3gLzyc9ShQ+GRa6gwwewi53+uc1TpadVmhvsXMhjVA=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:59:9d:3a:ef:51:e7:b3:73:8d:d4:23:a0:cf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Apr 17 22:01:12 2026 GMT
Not After : Apr 18 22:01:12 2026 GMT
Subject: CN=6a3e2c8d43bc2bfbefca2b03bf2b9e08803d8f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:e1:b7:65:46:53:aa:8b:fe:a9:ce:93:e2:
54:9a:1b:a6:5c:74:52:1e:01:a7:0c:75:44:b8:ab:
6b:09:ea:28:65:d4:a1:ed:76:76:5e:89:8b:76:9e:
e9:80:e0:89:e0:27:e0:e7:be:7f:0e:d5:42:34:a7:
a4:66:ec:58:89:5e:e5:e5:bc:0b:14:53:f6:89:f2:
43:2b:26:1d:1e:9e:39:b9:b1:f5:af:b1:b6:fa:3b:
4f:c3:ba:57:9f:0c:10:85:d3:4b:18:39:c9:c7:b4:
d6:e4:ca:e4:c2:8f:e6:f4:ce:46:69:f1:49:c7:b0:
52:58:cd:71:4b:ae:2d:ce:11:bc:78:5d:35:b7:10:
3c:76:8d:85:2b:3d:54:d3:0f:94:87:71:bc:b0:7a:
74:f0:d7:95:d0:12:e4:fa:fd:26:64:1a:7c:d7:37:
28:54:75:81:1b:67:77:04:75:38:eb:ac:81:0d:63:
48:1a:09:5a:b8:9d:24:26:b2:c2:a9:08:e4:4d:57:
a7:a3:cd:8e:9b:b8:85:3c:07:65:41:07:ee:44:ed:
b5:09:99:5e:de:19:17:98:7c:90:7f:eb:ae:b4:3d:
3d:a0:7f:a8:18:2c:11:25:3c:47:fe:dc:58:63:5c:
f9:ad:2c:3b:ea:ae:6c:37:9d:27:fa:a1:4c:c4:70:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:2C:8D:43:BC:2B:FB:EF:CA:2B:03:BF:2B:9E:08:80:3D:8F:1B
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:00:6d:d8:4d:f4:46:a4:20:58:4c:cd:f0:f0:98:52:d9:19:
e9:f7:ca:18:cc:24:f5:1c:3c:42:3c:65:8e:74:7b:48:69:0b:
7c:33:ea:41:a8:49:81:2e:58:c1:bc:98:42:bf:5d:47:d5:2f:
ad:86:ed:2e:14:e1:09:fe:fc:38:13:a4:61:64:6f:ab:aa:ff:
9c:bc:c0:de:19:4e:f5:97:e9:91:0a:c6:92:90:1d:5a:3e:8c:
97:96:51:65:05:80:bb:d6:8a:91:12:34:25:26:fb:7d:be:85:
90:0c:ef:ff:08:73:89:b0:0c:c9:38:fd:34:0c:7a:ef:32:fa:
fd:f9:9f:d5:e1:4e:83:9d:de:39:d6:4d:3a:57:39:fb:2e:cc:
25:0e:27:42:b9:0b:fe:ba:63:9b:fc:be:1a:8b:48:89:44:9b:
8b:3f:d9:b9:ff:22:a8:0e:4b:de:ea:b3:6f:a1:a9:ec:32:44:
86:b8:e2:1d:99:c4:05:98:c6:fa:1c:8a:37:28:4a:4c:84:b0:
99:14:d2:c0:94:ac:56:45:b2:c2:bb:66:7a:36:7b:4e:eb:81:
c1:fe:a6:2f:1b:e3:d4:04:08:26:8e:4c:94:96:28:5a:f7:11:
2b:19:5b:e1:24:1c:80:f8:d2:78:91:69:63:6b:1e:33:91:0c:
8b:3f:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:39 2026 by rpki-client