Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: IIpFrBLNwRbghYS7xd+XSjoStwhHHPvl/fe37zkvN1Y=
Subject key identifier: DF:D2:CB:39:01:91:5B:37:9A:27:36:4F:76:EB:34:52:8A:E2:36:05
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019D9AE2B5D5AE940C3EF32E24BEB798ED0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 01CE
Signing time: Fri 17 Apr 2026 10:00:42 +0000
Manifest this update: Fri 17 Apr 2026 10:00:42 +0000
Manifest next update: Sat 18 Apr 2026 10:00:42 +0000
Files and hashes: 1: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
2: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: QTzcUZwXsC0iJ+79yxPCZ2jN7nAQKol3UVIEuNfzVew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b5:d5:ae:94:0c:3e:f3:2e:24:be:b7:98:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Apr 17 10:00:42 2026 GMT
Not After : Apr 18 10:00:42 2026 GMT
Subject: CN=dfd2cb3901915b379a27364f76eb34528ae23605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:10:3c:3b:fb:91:df:ff:07:27:1d:99:d5:
bf:d7:58:92:f8:ae:0f:0f:4a:bc:5f:fe:39:4a:a0:
37:a7:af:a1:b9:d2:da:57:22:e0:22:84:a8:ad:90:
26:83:6e:c5:4d:1d:66:41:f2:bf:bc:2d:9e:db:9b:
58:20:90:ff:30:e9:02:8b:6a:85:fb:95:bd:ba:f7:
5f:de:e1:25:04:55:2b:ec:08:f7:5c:ed:5a:28:44:
a5:d7:03:71:1d:48:14:c3:be:46:35:3e:5b:06:e2:
c7:46:77:cb:6e:86:11:28:b0:ac:ba:ce:3c:61:70:
da:77:7e:53:f0:fd:3c:5e:b4:4f:3d:b1:90:7e:5d:
6b:79:ca:f6:0e:20:c4:61:74:a0:ab:21:48:6d:2a:
7f:13:ca:05:a6:bc:76:6f:d5:5a:60:9c:bb:0d:11:
6b:be:2f:cf:60:c1:0e:20:ce:dc:57:58:0c:1f:a3:
a0:96:0a:27:ef:c1:d2:09:b0:2a:f5:06:fc:b8:54:
9c:6e:6d:58:19:f2:41:7c:02:db:68:80:1b:04:39:
3c:e9:41:12:20:13:2d:5f:3d:49:d1:6e:78:db:72:
cc:c3:e2:09:63:fe:26:58:52:7b:7a:65:40:66:71:
ea:5d:5d:b2:8e:6b:ea:a4:69:74:6c:20:24:27:b1:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:CB:39:01:91:5B:37:9A:27:36:4F:76:EB:34:52:8A:E2:36:05
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:3b:cf:f9:2b:7b:80:86:8b:80:3e:7d:0b:e8:2d:09:d4:
42:a4:5b:e9:f8:f2:df:7c:91:2b:95:28:28:96:33:4b:85:6a:
ff:98:7a:aa:cf:73:67:d9:68:ec:24:44:08:fb:03:fb:24:96:
61:13:53:dd:e5:1a:bc:b5:a5:2d:13:7b:78:07:8d:42:ad:88:
d3:73:7a:39:a4:d2:ce:be:f0:e5:d7:8d:97:ab:f6:0e:6a:63:
99:74:46:69:f3:9b:62:85:de:18:a3:64:22:39:00:26:59:9d:
d4:67:6c:20:a7:32:c2:95:8e:a9:6c:ea:28:8f:58:fa:6b:c2:
2e:8a:c2:57:71:cf:3a:bd:3c:67:84:d6:19:c6:76:74:54:b0:
d8:7d:23:db:39:08:3d:e0:8f:41:61:fa:47:d8:d3:53:08:e5:
fe:76:a5:1b:c7:bb:5b:46:71:98:ac:5d:02:22:e0:6f:21:d2:
cc:a2:f8:58:b4:76:9a:66:d6:ff:e1:38:a5:32:25:1d:6a:10:
2f:46:4a:87:42:89:50:db:7a:e2:dd:6a:e7:77:32:73:ef:c3:
68:08:a6:41:b1:25:a0:0f:88:7a:49:9b:ca:f0:9d:00:96:d5:
3e:17:34:f4:37:24:f1:4f:46:7f:0e:01:71:e1:32:e0:6a:2c:
88:d0:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:36 2026 by rpki-client