Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: q/wpsmdZT/jFPj2kWVtVQBkkiN5qAyBK17KmDlLfKcc=
Subject key identifier: D0:8F:3E:FE:89:AC:40:58:2E:CA:83:D6:4E:AD:13:36:4E:86:2E:FF
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019D9886C690616EEEDD82D00DDE6AD0F65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 094F
Signing time: Thu 16 Apr 2026 23:01:02 +0000
Manifest this update: Thu 16 Apr 2026 23:01:02 +0000
Manifest next update: Fri 17 Apr 2026 23:01:02 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: ylwxf45hiyqK04eiw7XmCAC+A39dslNrRp7bmkFQGjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c6:90:61:6e:ee:dd:82:d0:0d:de:6a:d0:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Apr 16 23:01:02 2026 GMT
Not After : Apr 17 23:01:02 2026 GMT
Subject: CN=d08f3efe89ac40582eca83d64ead13364e862eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:ef:31:3a:40:75:c5:2a:3b:ff:22:16:75:
e7:8b:73:ac:b1:60:c4:33:f7:36:96:ec:35:52:97:
f8:39:32:e3:ad:9e:9d:0e:fd:cb:a8:8a:c3:13:81:
88:7d:8a:ff:6b:d8:90:ca:c6:50:57:18:52:c5:91:
99:50:2d:62:6d:27:51:2c:43:88:14:d0:4a:fb:9e:
d6:4d:ae:4b:9a:cc:77:b4:38:c8:20:21:ae:50:21:
5c:40:2d:e8:fa:97:72:d1:4a:93:0b:40:ae:19:27:
53:e7:bf:77:16:e0:f6:64:61:4a:aa:30:73:ed:21:
f0:e3:39:67:1c:b0:40:a3:15:8f:fd:be:cc:c2:d3:
93:cb:24:27:17:fc:11:db:8f:5b:43:f5:33:d5:0c:
4c:2e:fe:f2:9a:e1:90:f5:5e:76:39:00:3e:0e:b4:
e6:0e:6e:9e:66:f2:f0:96:4d:af:ad:42:93:8f:c9:
98:a6:16:23:39:59:b7:31:d9:84:b2:9c:b0:cb:2a:
2a:8b:d4:86:e8:15:13:e1:36:07:26:03:63:2d:81:
2a:17:db:e4:29:80:d6:45:fd:e9:53:4d:45:f5:59:
82:a9:55:1f:63:07:82:fb:1d:6d:5c:4e:fd:a8:02:
a9:79:8c:1b:32:87:d5:03:14:8a:4a:90:a8:06:7f:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:3E:FE:89:AC:40:58:2E:CA:83:D6:4E:AD:13:36:4E:86:2E:FF
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:53:0f:b9:f0:7f:22:2b:99:da:04:8a:47:e5:f7:63:85:ac:
6d:24:40:2e:08:a1:0f:a9:28:5e:b1:35:cc:84:0a:84:d1:47:
22:e7:8f:c3:11:c5:fe:b5:d0:c9:bb:27:61:f5:32:4f:3d:dd:
89:a1:ee:8f:2f:c2:8d:5d:0a:89:52:35:c1:69:cd:1a:91:9a:
d8:45:cb:03:09:68:59:cc:b5:b0:e9:96:8a:0e:1f:01:a7:4a:
31:8f:bd:d9:e9:3e:c2:b3:3f:ca:60:9d:d5:ec:fe:8e:d5:33:
65:ae:19:32:72:4c:d0:3b:0e:35:a6:9a:93:f9:fc:aa:e1:61:
0f:db:54:1a:7b:64:83:61:3b:5f:b6:16:2b:b7:62:56:e4:a2:
91:91:98:c6:81:07:50:05:28:40:0a:f6:f7:40:25:b5:12:40:
8e:c1:43:ae:e6:6f:79:d9:df:1f:04:a0:39:13:f6:74:60:ce:
95:3f:ce:bb:6f:3a:fa:35:36:09:26:42:0f:28:16:1c:f2:ce:
cb:11:49:ab:e1:9f:99:08:50:95:24:9d:d0:ac:f3:2e:1e:87:
58:f2:fc:c1:8b:ee:7b:de:3d:27:be:49:4b:b6:4b:37:60:7d:
6d:44:30:3e:bb:66:bf:77:dc:2d:f0:91:11:84:38:5d:a0:db:
82:ed:b3:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhsaQYW7u3YLQDd5q0PZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjYwNDE2MjMwMTAyWhcNMjYwNDE3MjMwMTAyWjAzMTEwLwYDVQQD
EyhkMDhmM2VmZTg5YWM0MDU4MmVjYTgzZDY0ZWFkMTMzNjRlODYyZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjvMTpAdcUqO/8iFnXni3OssWDE
M/c2luw1Upf4OTLjrZ6dDv3LqIrDE4GIfYr/a9iQysZQVxhSxZGZUC1ibSdRLEOI
FNBK+57WTa5Lmsx3tDjIICGuUCFcQC3o+pdy0UqTC0CuGSdT5793FuD2ZGFKqjBz
7SHw4zlnHLBAoxWP/b7MwtOTyyQnF/wR249bQ/Uz1QxMLv7ymuGQ9V52OQA+DrTm
Dm6eZvLwlk2vrUKTj8mYphYjOVm3MdmEspywyyoqi9SG6BUT4TYHJgNjLYEqF9vk
KYDWRf3pU01F9VmCqVUfYweC+x1tXE79qAKpeYwbMofVAxSKSpCoBn8s1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCPPv6JrEBYLsqD1k6tEzZOhi7/MB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlMPufB/
IiuZ2gSKR+X3Y4WsbSRALgihD6koXrE1zIQKhNFHIuePwxHF/rXQybsnYfUyTz3d
iaHujy/CjV0KiVI1wWnNGpGa2EXLAwloWcy1sOmWig4fAadKMY+92ek+wrM/ymCd
1ez+jtUzZa4ZMnJM0DsONaaak/n8quFhD9tUGntkg2E7X7YWK7diVuSikZGYxoEH
UAUoQAr290AltRJAjsFDruZvednfHwSgORP2dGDOlT/Ou286+jU2CSZCDygWHPLO
yxFJq+GfmQhQlSSd0KzzLh6HWPL8wYvue949J75JS7ZLN2B9bUQwPrtmv3fcLfCR
EYQ4XaDbgu2z0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:01 2026 by rpki-client