Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: k/OGEUyuuc/tJVKDBW4z2zQvOfVdRJZa2blE6SiYCQY=
Subject key identifier: 3E:5A:F4:FA:3C:39:84:1A:0F:FC:64:F3:9E:58:EF:A6:D7:8E:17:D4
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019D9DE3F1A28974626F77884EFAE9272BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 0379
Signing time: Sat 18 Apr 2026 00:00:54 +0000
Manifest this update: Sat 18 Apr 2026 00:00:54 +0000
Manifest next update: Sun 19 Apr 2026 00:00:54 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: GeAyoR1VXjRAvLcEFQqY4BhhdrsjY/OdEelWwMcI24c=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:f1:a2:89:74:62:6f:77:88:4e:fa:e9:27:2b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Apr 18 00:00:54 2026 GMT
Not After : Apr 19 00:00:54 2026 GMT
Subject: CN=3e5af4fa3c39841a0ffc64f39e58efa6d78e17d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:0d:ed:52:23:e9:2a:5c:94:d7:50:4b:d8:
56:66:09:b0:f4:93:ca:54:f5:d8:6e:38:f5:ef:45:
43:1e:d6:86:c5:02:e9:07:82:24:28:77:c8:60:9c:
3f:84:2f:70:1c:8b:7b:6d:a7:9e:bb:d4:81:d5:93:
2c:74:9e:44:1a:9d:e1:bc:10:66:49:e4:38:85:3e:
45:9f:c8:eb:78:a4:1a:00:35:0c:62:fc:61:ec:6f:
9d:f0:0b:35:ec:c5:6c:ee:b0:54:fa:2e:d4:ea:67:
ef:19:41:09:0c:99:30:6b:a8:bd:db:20:29:b6:73:
8a:6d:7e:f7:2f:a0:b9:8b:39:8d:65:ff:6a:bd:72:
d3:d0:f6:08:e9:8d:cd:af:13:23:53:88:34:75:4c:
b4:59:c0:4b:f2:67:36:36:1c:72:f0:47:8f:dd:fb:
e4:b6:55:f0:9c:45:31:92:7b:22:a9:5d:1a:fc:26:
cf:13:97:8a:23:f1:0f:80:a1:01:ec:f5:44:c6:bc:
af:02:c8:74:b5:8b:b7:6f:45:d1:9b:91:2d:b9:68:
08:16:55:14:f3:04:b4:70:f4:1d:d9:ba:da:18:e7:
f0:61:e5:b1:46:97:93:c3:42:a2:38:9b:74:2c:ef:
d6:16:a0:40:24:a7:f0:03:5d:c8:72:af:e5:94:8e:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:F4:FA:3C:39:84:1A:0F:FC:64:F3:9E:58:EF:A6:D7:8E:17:D4
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:49:c1:04:3f:72:4a:d2:97:de:a0:4f:18:fa:34:04:42:
82:2a:4a:1c:ed:55:14:06:7e:3f:d1:a2:90:0a:74:2c:51:01:
ea:4d:78:c7:ef:a3:49:0d:d8:82:2e:57:18:20:b9:a0:50:eb:
70:38:55:a9:df:85:ad:f4:90:1f:80:00:f5:01:f2:ff:69:53:
da:3c:09:e3:7d:09:0c:e7:46:e1:0e:a3:26:ca:66:e1:5e:ba:
9d:27:87:cd:34:83:f0:95:94:ea:fe:aa:09:64:fb:1d:a9:4d:
a3:d6:9e:db:79:05:15:ec:70:da:11:03:e7:c4:e5:4c:07:80:
15:a3:72:f4:c8:da:b4:cd:dd:3a:cb:7a:b8:2a:b3:cc:80:b7:
9e:c0:3f:39:ee:54:d0:15:ce:25:46:ae:80:00:4f:e5:01:57:
95:1a:8a:a9:56:ed:16:88:b0:39:c9:f1:9b:62:6e:c9:24:29:
14:66:4e:40:66:d4:d9:01:4d:2a:56:0c:a0:db:e0:63:b3:c2:
b9:41:fd:94:9b:9a:1f:b9:54:fe:9e:be:48:4d:91:87:02:08:
4b:93:ca:98:34:10:e0:48:63:45:ac:92:14:82:1e:b8:d3:a6:
a7:7f:b6:62:5d:75:fa:fb:b2:c1:79:6b:33:65:57:de:3b:7b:
3d:6d:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:51:57 2026 by rpki-client