Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: ZG+Ca35EwqdkXxUXNqkEI4Hr9DtHqe3nz5iS4Z4Bbv4=
Subject key identifier: 78:3B:50:89:66:1D:F1:36:08:BE:F4:C0:0A:18:6C:83:F2:67:09:11
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019D9C9A6AFB1FE67A8467489D937267E488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0BDA
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: DWezhGxuCGjGoMOvL/6DHwtn4SOdjpjR/KAYs79FeO4=)
3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6a:fb:1f:e6:7a:84:67:48:9d:93:72:67:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=783b5089661df13608bef4c00a186c83f2670911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:8b:bf:6d:d0:a2:61:84:57:8d:48:11:b1:
b9:28:aa:e9:93:cf:8f:d4:9b:f6:51:71:ed:a4:10:
b2:33:6d:ff:54:b6:b9:8d:9b:20:2d:04:39:69:31:
6b:92:fb:e9:c8:67:ea:ec:05:1b:79:75:b0:6b:5b:
49:99:5d:fa:bf:ff:59:79:25:4a:84:39:f4:32:03:
66:ec:12:ea:63:95:31:4b:56:05:9d:9e:8b:28:dd:
ff:9a:a8:5e:7c:e8:5a:c4:de:18:37:80:85:11:a9:
9e:04:30:eb:4f:f2:ae:ff:cf:83:a9:42:72:6e:e2:
78:0d:27:44:4e:3b:9f:3a:ff:5d:30:12:92:c4:e8:
bb:ba:29:11:4f:e3:94:c1:08:29:2c:a9:bd:80:36:
5b:ef:7e:42:ec:d7:e9:6b:fd:9c:74:c9:bf:c2:bb:
85:36:0f:dc:09:b1:5d:39:75:03:5a:78:a7:fd:24:
aa:6c:ca:64:e0:d6:0c:45:23:22:aa:2f:e2:b4:95:
3f:fc:d0:cc:35:48:af:0b:b6:9f:da:72:76:10:62:
f7:c8:9f:81:b0:a5:80:5c:b7:78:9b:07:c0:16:f5:
5c:7a:35:a2:a3:96:97:c8:ab:c5:21:37:8e:2f:3f:
aa:e4:7c:80:ff:66:ec:98:7e:cb:31:14:2a:61:cf:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:50:89:66:1D:F1:36:08:BE:F4:C0:0A:18:6C:83:F2:67:09:11
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:3d:11:46:97:c4:64:8a:78:0a:86:fb:e6:e6:fd:7a:e7:
df:3f:b3:94:4e:9a:24:3e:e5:7d:c3:e7:b2:11:39:51:47:1e:
64:48:bb:40:c9:85:24:41:f3:e0:f7:2c:81:92:be:7c:f3:4f:
2d:ef:e7:a0:25:dd:59:1a:bb:24:01:de:71:2b:be:e5:e4:8c:
84:fa:55:03:87:e1:6b:3a:75:0d:a9:c3:25:2d:68:51:71:2c:
e8:44:e9:9e:ff:75:0d:48:16:5b:54:a4:53:78:28:0d:29:45:
07:e1:60:25:57:df:75:6c:6c:c0:36:98:31:98:50:44:4b:92:
a5:3e:07:bc:6f:c5:08:ec:43:a7:cd:68:ee:7d:8b:5f:6b:3d:
b3:6d:27:91:09:8d:56:c9:ec:52:8b:39:33:a0:de:5c:d7:ce:
3f:01:25:06:4b:88:65:f2:92:ff:e6:73:d3:32:4c:85:46:e9:
be:05:30:d5:e6:99:25:cf:96:25:29:5b:fc:1d:5e:e4:ae:e6:
3d:4d:e1:0f:b3:03:2d:07:03:13:b9:12:c2:fe:ab:d9:ae:62:
31:16:06:3e:23:31:52:10:84:50:6a:84:40:45:a7:4f:2c:85:
1f:54:59:c2:6b:ca:5e:31:39:75:49:19:04:15:f8:0e:03:05:
48:57:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:46 2026 by rpki-client