Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: wOhvTgOpP9gmVTTY4AI/gC0juofXvI0em24fIQsE6yw=
Subject key identifier: 61:9E:AB:EE:B8:80:4B:DC:2B:A1:9E:26:72:2D:C4:C6:CD:91:6A:BF
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019D99D0BA5D864EE5B87515A484304E1232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 06A5
Signing time: Fri 17 Apr 2026 05:01:26 +0000
Manifest this update: Fri 17 Apr 2026 05:01:26 +0000
Manifest next update: Sat 18 Apr 2026 05:01:26 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: Z7ML6Ckf70LOTPpvD+FO5F1ldKpfpv1Lm7hA/ENfhd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ba:5d:86:4e:e5:b8:75:15:a4:84:30:4e:12:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Apr 17 05:01:26 2026 GMT
Not After : Apr 18 05:01:26 2026 GMT
Subject: CN=619eabeeb8804bdc2ba19e26722dc4c6cd916abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:9b:20:93:83:99:3b:b3:7a:48:83:ec:2e:
04:f4:56:24:a7:c4:75:63:7f:04:fa:ba:a8:22:b6:
87:84:03:97:09:1a:55:b0:dd:26:75:d5:7c:da:63:
6c:e3:d2:a5:d8:c5:87:e7:dd:e9:a0:cb:8f:87:d1:
9a:1b:96:10:69:b6:31:f3:58:ef:94:42:49:46:09:
cd:15:06:d1:58:c9:58:b6:c8:2c:17:48:21:c6:5c:
5d:28:cf:c4:c7:f3:17:73:c1:bd:4a:02:c6:3b:bb:
da:98:fb:fc:a5:db:1e:64:f6:73:28:18:ad:b9:5b:
68:22:29:d4:b9:97:95:7e:2c:81:24:8b:e8:51:f2:
01:07:53:b7:25:7a:26:80:52:c4:d9:ae:2b:03:bf:
b5:ea:de:48:ae:ff:f3:5a:c6:02:47:82:f8:89:65:
ca:8f:0c:ec:7f:0b:f2:e0:e3:85:30:b7:20:18:af:
21:f8:a0:7e:71:d9:63:12:d8:86:b3:8f:c3:a2:ba:
f0:bf:fb:94:41:05:e9:32:6e:c2:c3:a8:c3:3c:33:
2a:50:28:93:00:cc:08:62:e6:f4:a8:5d:91:57:fd:
5e:00:d5:b1:2a:ac:55:0b:e9:d1:91:6f:9d:c2:05:
da:0d:7f:cd:d0:1c:67:59:0b:7f:84:ca:c6:ca:09:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:AB:EE:B8:80:4B:DC:2B:A1:9E:26:72:2D:C4:C6:CD:91:6A:BF
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7c:3c:88:30:1f:10:4f:ea:0f:13:4a:4d:31:77:d2:92:e2:
83:bc:1c:24:7d:e5:2a:41:91:e7:c7:d4:88:8e:6a:a6:ee:43:
e5:dd:62:5f:de:15:68:bb:91:91:4f:09:3f:b8:cd:be:74:3c:
3f:d0:f4:ee:9d:d2:90:2f:5a:75:2d:62:b9:bf:ef:68:c3:53:
97:09:57:b8:5e:89:1d:7e:6f:b2:8b:5c:a1:6e:02:31:e8:48:
f3:8d:12:fa:43:fe:2a:06:fe:61:02:ae:dd:b4:2a:c0:48:66:
56:22:b0:1a:f4:ae:d4:f9:b2:e3:b4:09:c1:86:62:a2:3f:37:
cb:6c:4a:b7:21:92:ff:13:b4:ae:5d:78:6b:05:1d:3a:db:ad:
f9:aa:fe:0f:74:01:4c:ae:33:43:dd:e7:c0:0b:93:ec:f8:c7:
0b:15:48:dc:b2:8a:9d:a5:c8:68:1e:64:3d:18:0f:30:ca:1c:
04:83:6f:1e:32:6a:b5:48:1c:c6:a1:36:6c:57:13:83:75:7a:
cc:83:ab:61:2a:d3:c2:4e:fe:63:7d:ab:01:7f:f5:b7:e7:6c:
90:08:54:18:80:94:82:81:41:95:8c:30:04:cb:80:1f:8b:e3:
7b:34:c2:85:f1:fd:76:47:8c:5b:cd:93:9a:1a:08:37:9b:82:
61:dc:43:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Lpdhk7luHUVpIQwThIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjYwNDE3MDUwMTI2WhcNMjYwNDE4MDUwMTI2WjAzMTEwLwYDVQQD
Eyg2MTllYWJlZWI4ODA0YmRjMmJhMTllMjY3MjJkYzRjNmNkOTE2YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW6bIJODmTuzekiD7C4E9FYkp8R1
Y38E+rqoIraHhAOXCRpVsN0mddV82mNs49Kl2MWH593poMuPh9GaG5YQabYx81jv
lEJJRgnNFQbRWMlYtsgsF0ghxlxdKM/Ex/MXc8G9SgLGO7vamPv8pdseZPZzKBit
uVtoIinUuZeVfiyBJIvoUfIBB1O3JXomgFLE2a4rA7+16t5Irv/zWsYCR4L4iWXK
jwzsfwvy4OOFMLcgGK8h+KB+cdljEtiGs4/Dorrwv/uUQQXpMm7Cw6jDPDMqUCiT
AMwIYub0qF2RV/1eANWxKqxVC+nRkW+dwgXaDX/N0BxnWQt/hMrGygnLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGeq+64gEvcK6GeJnItxMbNkWq/MB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHw8iDAf
EE/qDxNKTTF30pLig7wcJH3lKkGR58fUiI5qpu5D5d1iX94VaLuRkU8JP7jNvnQ8
P9D07p3SkC9adS1iub/vaMNTlwlXuF6JHX5vsotcoW4CMehI840S+kP+Kgb+YQKu
3bQqwEhmViKwGvSu1Pmy47QJwYZioj83y2xKtyGS/xO0rl14awUdOtut+ar+D3QB
TK4zQ93nwAuT7PjHCxVI3LKKnaXIaB5kPRgPMMocBINvHjJqtUgcxqE2bFcTg3V6
zIOrYSrTwk7+Y32rAX/1t+dskAhUGICUgoFBlYwwBMuAH4vjezTChfH9dkeMW82T
mhoIN5uCYdxDcA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:24 2026 by rpki-client