Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
File: WA7nOx5qibTvUVvGfcmBcpak2Ks.mft (raw, json)
Hash identifier: JMfR/aA8ZCfwCqlGCn04pqRykyQ3XiHfn6S+Ccxhzi4=
Subject key identifier: EE:C6:17:94:71:45:25:08:3F:5C:2F:DE:B8:65:70:F7:D8:24:F2:86
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Certificate issuer: /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial: 019DA3E705BD076DFE0896FA8B8A8B9C2EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
Manifest number: F5
Signing time: Sun 19 Apr 2026 04:01:59 +0000
Manifest this update: Sun 19 Apr 2026 04:01:59 +0000
Manifest next update: Mon 20 Apr 2026 04:01:59 +0000
Files and hashes: 1: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (hash: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM=)
2: UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (hash: y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=)
3: WA7nOx5qibTvUVvGfcmBcpak2Ks.crl (hash: 6dkPjc23E1skkAwBT8KewObMxZZRbPTSPDUERYRMbvU=)
4: mJY88gnCtE0_lJEMctYDc3XreZc.roa (hash: dILiJ64ptgJlU6ZR8SsCAYYl2fBgysDyRuWNcNNxdXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e7:05:bd:07:6d:fe:08:96:fa:8b:8a:8b:9c:2e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Validity
Not Before: Apr 19 04:01:59 2026 GMT
Not After : Apr 20 04:01:59 2026 GMT
Subject: CN=eec61794714525083f5c2fdeb86570f7d824f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:57:a9:c3:ba:f9:c0:c0:25:b5:06:f5:1c:
99:cb:35:3d:13:f8:bc:30:b9:24:d1:05:43:dd:cd:
6c:72:c4:bf:a7:d4:75:b3:04:fa:a9:8c:50:b2:c9:
7a:1c:c8:01:51:82:23:f8:78:69:8d:aa:ac:a2:d8:
e9:a1:ab:1d:59:03:c5:02:77:1f:58:15:29:f3:f2:
15:a2:e7:40:83:b6:18:0b:0a:21:ba:b7:2e:d2:23:
c3:4c:09:91:7f:69:37:f9:36:a1:3d:60:34:ee:fe:
27:b9:b9:3b:41:dd:9c:2b:0a:b5:c0:87:94:ed:c5:
44:d3:f1:a3:b0:b2:80:68:61:aa:44:c4:b4:9b:70:
a9:27:b9:4e:51:c5:e0:59:f7:88:ce:ac:12:66:2a:
fe:ff:44:14:04:d4:02:82:b5:11:a1:cf:9d:e8:ff:
32:1c:f0:cc:03:6d:7b:3a:81:30:99:6d:58:9f:a0:
61:b6:3c:4e:e9:26:ff:c8:e3:3e:ed:f6:9e:ca:f8:
e2:25:a5:d1:7e:36:05:be:61:ab:85:af:de:9f:73:
73:aa:aa:32:9d:c5:30:80:75:20:35:36:c0:39:98:
a9:9f:3a:82:b7:88:ea:36:3a:3b:dc:c4:17:63:4b:
5a:be:8b:6c:ad:be:97:c0:9c:b5:5b:30:38:c0:c9:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C6:17:94:71:45:25:08:3F:5C:2F:DE:B8:65:70:F7:D8:24:F2:86
X509v3 Authority Key Identifier:
keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:9c:11:80:c3:1e:73:2b:fb:cb:03:ab:bf:4c:68:9a:6e:
95:6b:cd:29:b8:3d:46:98:bd:7e:72:74:2f:cc:c6:d8:a3:4b:
ae:57:94:9e:d6:85:98:7a:7b:6b:1f:de:a0:53:45:0e:cc:68:
63:6c:a6:5f:3d:e8:94:ef:47:0f:cc:51:cc:a4:46:ee:7c:b0:
ca:ee:ef:e8:5d:83:09:5a:3d:b3:a2:85:37:5e:95:fc:9b:da:
ea:60:fa:d6:d2:d2:92:2a:46:d9:df:2b:73:2e:e0:03:45:f3:
59:b6:5d:54:40:ae:03:ac:cd:09:33:4b:8c:e4:ce:8a:98:39:
97:cd:fb:f9:0d:a4:23:03:48:7d:7d:d5:cd:8e:4b:e2:a0:42:
10:16:34:c8:75:0b:71:70:74:50:96:f4:1d:b8:ee:f3:c5:9c:
02:6a:0b:6f:2f:8e:e3:bc:b1:9e:dc:34:83:10:bc:bb:24:78:
d7:41:eb:aa:a9:cd:ca:04:8f:60:44:b1:bb:33:eb:7b:c2:89:
0a:41:6a:6c:c1:35:bf:c9:7d:67:b7:57:a0:ad:21:45:6c:92:
1c:4a:86:f7:7a:8b:b7:ac:1a:5b:26:eb:fc:4f:97:20:85:59:
ad:b1:ba:7f:8d:24:65:e9:28:fe:d2:13:7f:38:4e:ae:b9:ea:
4f:23:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:35 2026 by rpki-client