Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: RIE7UPd+5G6Xq66CR4Govq761F5wYjQ6ztpSVgttl1k=
Subject key identifier: 0D:4E:F6:DF:02:70:11:F6:6E:41:3A:BE:89:E3:0E:CC:D7:66:F4:C8
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019DA3E691F53166AC6886F2A22EE8538BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0AF0
Signing time: Sun 19 Apr 2026 04:01:29 +0000
Manifest this update: Sun 19 Apr 2026 04:01:29 +0000
Manifest next update: Mon 20 Apr 2026 04:01:29 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: 76D2WZ1UGbB5O4WXbr874Gw4kvCFnUrWUTW5aIQIC/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:91:f5:31:66:ac:68:86:f2:a2:2e:e8:53:8b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Apr 19 04:01:29 2026 GMT
Not After : Apr 20 04:01:29 2026 GMT
Subject: CN=0d4ef6df027011f66e413abe89e30eccd766f4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:ec:e9:11:58:8c:fc:ee:3a:5e:fc:bc:51:
25:0e:1d:83:9d:72:ef:7b:97:e8:a1:ad:b2:92:ec:
86:27:c5:4d:c5:f0:4f:45:7c:d9:25:93:dd:d4:48:
98:e1:ae:68:fb:d8:21:40:11:9e:2e:92:fa:83:28:
63:60:c3:88:c5:72:8b:b1:2b:33:c4:c0:27:ea:a3:
dd:03:49:91:82:c4:79:53:d4:7f:ab:2f:d6:da:2c:
48:43:9a:4c:fb:45:5d:d9:d4:42:f4:9b:74:b9:4f:
b4:34:c8:1d:ae:d3:40:ea:05:91:c1:42:8a:48:86:
cf:63:8d:12:e0:d1:01:3a:2c:f2:3e:58:36:df:df:
dd:1d:27:8d:41:53:b1:d5:18:8c:d1:d3:e9:fb:0d:
5b:ad:7f:26:5a:17:d7:80:ad:dc:6b:20:22:d3:a8:
d1:e9:d9:8a:a7:89:66:aa:a7:78:40:05:2b:1b:44:
c3:55:49:bb:c6:2d:43:c1:3b:8b:36:b9:dd:d0:70:
c1:15:28:1f:89:50:78:ea:a1:a0:b6:25:ee:10:37:
16:f9:19:65:6d:c0:8b:c3:1e:54:55:53:9d:7b:ce:
47:d2:ce:56:56:9b:d4:35:a5:50:08:7e:88:28:fe:
9b:32:59:00:81:f2:79:8f:1b:b0:dc:1d:5e:e4:e9:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4E:F6:DF:02:70:11:F6:6E:41:3A:BE:89:E3:0E:CC:D7:66:F4:C8
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:58:6b:12:74:f5:85:e7:52:21:84:3a:b7:66:32:1a:34:23:
b0:56:b2:f3:d3:77:a5:46:3a:4c:75:ae:bf:64:a1:07:a1:79:
9f:45:17:ab:fe:5a:7c:c4:fc:89:8e:ea:c7:c4:6e:fe:de:5d:
aa:2b:23:b3:57:90:42:a3:4a:ef:f0:c4:52:17:e1:7a:45:d3:
0a:98:1e:9f:c5:d9:72:d9:07:df:51:cd:66:f7:dd:14:2f:a8:
8b:46:fc:e1:31:9b:f5:34:4b:b6:9c:c0:53:22:c4:a0:3d:7b:
bd:33:df:7e:83:70:ab:96:5c:7a:a5:2f:c4:5d:ab:75:fa:48:
3d:53:5f:43:bb:14:a7:ad:0b:e1:f7:35:29:8b:60:4d:26:d7:
e7:6f:52:8b:ba:2c:81:ed:c7:92:0a:71:38:af:20:d1:df:73:
e7:0d:57:7f:66:f8:7a:dd:cb:3d:28:d8:73:0b:2a:29:e1:d8:
fd:0e:b9:fa:c5:22:2a:dd:45:c4:fb:7b:0d:49:24:3e:83:fb:
a5:3c:96:6b:05:28:96:04:47:d3:88:91:70:27:64:64:20:fe:
d1:80:a2:89:a1:3f:3e:ac:14:98:8b:7b:6a:d1:3a:43:35:3a:
90:84:27:45:81:20:d0:f6:80:de:2c:34:7b:c8:59:24:8c:5c:
c6:cf:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:23 2026 by rpki-client