Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier: aGgvsmIOdahObRgHqdw5R8NKIBfoRNAyqA5d6n/FEyg=
Subject key identifier: DD:A4:9D:97:88:84:0D:E9:D4:55:0F:6A:52:B5:2C:0E:A5:85:D8:AD
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 019DA453F74675D0B88475650C8F4744F90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number: 0A5B
Signing time: Sun 19 Apr 2026 06:00:59 +0000
Manifest this update: Sun 19 Apr 2026 06:00:59 +0000
Manifest next update: Mon 20 Apr 2026 06:00:59 +0000
Files and hashes: 1: BvmBDu9gUylydSFpdWFHr27-_DY.roa (hash: d2SU0ny5FTlBkZIC6ubpt8gy5sJqNewyGcnF2XElBAw=)
2: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: ejI/W8+vCJXVNgPvlI0ubRosi8bKh4gi/vzravr5ymE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:f7:46:75:d0:b8:84:75:65:0c:8f:47:44:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Apr 19 06:00:59 2026 GMT
Not After : Apr 20 06:00:59 2026 GMT
Subject: CN=dda49d9788840de9d4550f6a52b52c0ea585d8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:96:91:b3:65:7f:41:9c:9b:c7:9d:01:f1:
91:be:fe:18:20:03:50:a5:5e:8e:68:b6:d5:4f:90:
5e:06:f0:7c:4d:81:5b:37:71:be:a6:39:68:a5:a1:
6e:7c:74:b5:23:f2:cf:26:16:2b:21:36:47:14:18:
97:95:77:04:97:81:38:8b:a8:8c:95:26:c6:64:7c:
1f:b0:05:49:cc:63:c6:22:93:cc:f1:2a:2f:49:3f:
67:1f:a9:2f:ca:e0:ad:cc:68:33:3e:7f:b7:de:29:
10:2a:7c:73:b3:8a:90:98:c6:5b:b0:44:f3:48:18:
ad:41:cb:84:1f:29:17:a3:b6:03:90:d5:48:14:fa:
67:4f:0c:ad:a2:25:fa:47:23:a4:e5:db:85:da:96:
47:af:b2:76:c0:21:37:1a:80:d3:d4:c5:60:18:40:
bc:03:8d:a4:fc:91:12:97:61:40:ef:08:e9:39:46:
23:db:b4:8a:19:d6:c1:28:41:22:33:74:6b:9c:19:
8b:cc:92:0e:e0:07:0e:ef:62:2f:a3:ed:84:09:1b:
4e:fd:c5:22:38:42:40:f9:5e:71:fe:e3:be:98:f6:
56:3f:9e:c0:ae:dc:12:fe:e0:8e:f4:60:60:0b:f9:
c9:d4:83:ac:26:4b:64:0d:e4:e3:10:c5:b3:92:11:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:9D:97:88:84:0D:E9:D4:55:0F:6A:52:B5:2C:0E:A5:85:D8:AD
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:e7:59:66:4e:d0:08:4b:28:a2:68:40:ea:72:7d:19:d1:
b1:36:9b:80:03:e5:64:84:c2:4f:63:d6:75:cd:ec:4d:2c:d0:
22:48:ca:43:8a:05:53:95:49:ca:e9:22:d3:de:97:20:1b:64:
14:45:b8:33:50:5c:6b:ed:c5:ec:42:d2:e6:85:62:50:a4:b5:
c5:25:bc:fd:75:b8:7d:69:1a:de:35:ee:59:04:62:07:af:03:
87:c5:11:9b:7b:7e:88:f9:d6:eb:d2:ca:dc:c8:42:4a:39:36:
cb:f7:22:c5:09:f3:d2:e5:d5:70:6f:8d:52:be:3a:4a:ed:d8:
57:d0:0b:9a:60:91:11:7b:20:63:f7:10:a9:ab:66:e7:ca:60:
16:a4:03:2c:cd:9b:d5:4a:28:c8:86:09:70:bf:39:fb:7f:7b:
3f:cc:8e:c6:1b:79:a0:db:c8:4e:73:a3:41:e4:ed:e1:02:ea:
9f:39:0f:b0:ab:72:77:b7:ad:d7:35:14:28:fe:0c:67:1a:2d:
4d:75:ee:12:c4:90:aa:60:76:33:98:c6:fc:cd:cb:72:9a:57:
08:50:96:f8:a7:70:f0:ac:4b:fe:e2:fe:ac:e1:64:79:23:8c:
21:3a:31:0f:df:c0:d7:68:87:74:08:40:85:20:a1:89:e2:04:
85:eb:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:21 2026 by rpki-client