Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: eHjv7o2WOho0iukW1Bmi5TlQHA0qzajyZPA0QyUl3Dw=
Subject key identifier: 4A:9A:45:AD:BA:C7:3A:23:36:A7:3B:05:E6:71:A8:5D:E3:B7:E8:28
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 019D9A75135604E6E11F19B112B0B8D6BAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 0893
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: 42Ji29vqDAxpdndaWxEQMipFjyU.roa (hash: aVLNPW2DwaXPkiMoRdCmxUWjB3XXnvtot9VBLL1K0cY=)
2: ME6vRLxkNmOkJwq_oQkZ9OQRI14.roa (hash: ztigzmBI+Nqg3JYL/aEqwd3HX52y65/qJXje8DI37qo=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: so0JEMTjVYI35Hc3GvKBioSG0bgS6MsZ26FuAa8n+IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:13:56:04:e6:e1:1f:19:b1:12:b0:b8:d6:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=4a9a45adbac73a2336a73b05e671a85de3b7e828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:57:9e:93:e2:a7:58:8c:5b:e6:36:9f:f4:
40:6b:df:c5:31:c3:9b:1a:e0:58:35:0e:35:66:31:
43:77:57:d2:9a:c2:cd:5e:17:06:7d:04:61:b6:5d:
df:60:b1:b2:4c:35:9c:cb:0d:03:56:52:da:77:0c:
4c:d0:fd:50:cf:5a:a9:48:3b:3c:d5:b3:eb:d2:af:
64:d3:5b:c3:bd:a3:36:e9:6a:59:fa:a4:df:34:c2:
59:68:19:37:ff:d7:34:bd:64:46:0f:a2:84:8d:fa:
fd:d7:20:da:1a:c6:e9:cc:23:34:05:e9:ef:34:2e:
ad:c5:c4:79:93:3a:e0:2c:39:1b:67:24:f9:6d:f9:
07:37:85:7f:7b:a6:3e:37:66:cf:97:6d:0a:a7:67:
04:08:48:d2:f1:01:25:76:f5:6b:97:4c:f2:39:73:
5b:25:a7:cc:b4:a2:96:16:cd:af:43:3a:05:e9:6d:
0f:ed:70:52:d7:5e:31:a8:97:30:03:de:44:8e:42:
21:ac:a0:b0:9a:41:e4:1a:09:75:46:ea:41:b8:9d:
2c:25:eb:5d:68:83:83:34:2d:1d:77:ee:48:7f:bd:
eb:57:ff:30:03:94:c7:b5:1b:15:37:2c:bf:f2:83:
a5:46:1e:1e:76:54:99:44:e0:05:c3:33:2e:34:b2:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:45:AD:BA:C7:3A:23:36:A7:3B:05:E6:71:A8:5D:E3:B7:E8:28
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:d2:87:ee:45:27:d0:ab:9f:86:b9:1c:e7:e5:2b:1b:81:a9:
18:30:ce:2a:4f:92:29:24:89:08:75:dd:8f:f7:10:49:42:75:
96:b9:88:a3:be:b6:3a:d8:4b:f6:ba:9b:62:ee:0b:10:9c:d1:
90:df:55:d3:8f:43:5c:07:d2:a6:3f:97:94:46:ee:6a:5c:b8:
21:a3:3e:af:8c:a4:c7:2c:3a:84:41:15:3d:d1:9e:53:8e:ee:
38:76:78:07:22:87:96:c5:d3:b6:de:b2:9d:8c:c9:4f:ad:dc:
8a:d9:53:cb:8f:0c:d8:f6:a7:ad:38:a9:b2:52:09:af:57:6c:
70:5a:ac:43:8e:a6:cc:ad:56:81:14:54:7c:0c:5c:99:c9:bf:
7f:0d:72:30:4d:52:bf:07:f6:32:87:30:f6:a5:7a:60:ff:55:
4b:8e:d5:45:2e:fc:2f:81:8c:02:cb:c8:69:33:d8:63:51:61:
d3:04:35:8d:15:92:eb:76:7a:33:ee:d3:fc:32:59:86:cc:3e:
d8:9c:e9:1a:85:37:9e:ca:13:8d:5d:91:29:d6:52:34:b6:33:
d2:97:9b:85:c4:dd:2a:11:a7:76:09:90:ad:45:de:45:a8:44:
11:91:dc:17:c0:4c:b9:17:94:30:58:ad:75:c7:cf:75:00:e7:
8e:fa:9f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adRNWBObhHxmxErC41rruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjYwNDE3MDgwMDU3WhcNMjYwNDE4MDgwMDU3WjAzMTEwLwYDVQQD
Eyg0YTlhNDVhZGJhYzczYTIzMzZhNzNiMDVlNjcxYTg1ZGUzYjdlODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUFXnpPip1iMW+Y2n/RAa9/FMcOb
GuBYNQ41ZjFDd1fSmsLNXhcGfQRhtl3fYLGyTDWcyw0DVlLadwxM0P1Qz1qpSDs8
1bPr0q9k01vDvaM26WpZ+qTfNMJZaBk3/9c0vWRGD6KEjfr91yDaGsbpzCM0Benv
NC6txcR5kzrgLDkbZyT5bfkHN4V/e6Y+N2bPl20Kp2cECEjS8QEldvVrl0zyOXNb
JafMtKKWFs2vQzoF6W0P7XBS114xqJcwA95EjkIhrKCwmkHkGgl1RupBuJ0sJetd
aIODNC0dd+5If73rV/8wA5THtRsVNyy/8oOlRh4edlSZROAFwzMuNLLmGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqaRa26xzojNqc7BeZxqF3jt+goMB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2tKH7kUn
0Kufhrkc5+UrG4GpGDDOKk+SKSSJCHXdj/cQSUJ1lrmIo762OthL9rqbYu4LEJzR
kN9V049DXAfSpj+XlEbualy4IaM+r4ykxyw6hEEVPdGeU47uOHZ4ByKHlsXTtt6y
nYzJT63citlTy48M2PanrTipslIJr1dscFqsQ46mzK1WgRRUfAxcmcm/fw1yME1S
vwf2Mocw9qV6YP9VS47VRS78L4GMAsvIaTPYY1Fh0wQ1jRWS63Z6M+7T/DJZhsw+
2JzpGoU3nsoTjV2RKdZSNLYz0pebhcTdKhGndgmQrUXeRahEEZHcF8BMuReUMFit
dcfPdQDnjvqf1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:46 2026 by rpki-client