Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: +TAcBlhqB20RshyljNVcoDv1uImEoQ3F9vuUTkQezn8=
Subject key identifier: E6:01:47:45:50:C7:F1:32:91:FC:02:41:1D:FE:B3:7E:1C:38:38:C3
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019D9CD1416F7E1FC1B0CDA1291265881D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 01CF
Signing time: Fri 17 Apr 2026 19:00:52 +0000
Manifest this update: Fri 17 Apr 2026 19:00:52 +0000
Manifest next update: Sat 18 Apr 2026 19:00:52 +0000
Files and hashes: 1: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
2: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: QbCRrmkdeiEaT1ThE9+oDix7AakAJD+Bw6GyutAR9wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:41:6f:7e:1f:c1:b0:cd:a1:29:12:65:88:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Apr 17 19:00:52 2026 GMT
Not After : Apr 18 19:00:52 2026 GMT
Subject: CN=e601474550c7f13291fc02411dfeb37e1c3838c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:47:26:2e:94:a2:1f:f2:bf:76:45:5f:a3:
5b:66:1f:b1:6c:83:ed:27:f9:ba:2f:4a:0e:63:b8:
77:b2:34:60:d5:0c:c2:69:c8:a7:d8:1c:21:19:5f:
58:8e:e2:cb:14:0d:88:95:4b:22:02:fc:fc:d0:d9:
c1:b1:c3:ed:4d:0d:86:64:9c:72:e8:44:61:8c:72:
9b:0e:38:eb:2f:94:77:34:52:45:b0:7c:bd:a7:de:
5e:b4:09:b4:0c:06:d9:ab:2f:6d:57:3e:15:41:e9:
2e:30:b7:49:36:11:26:06:43:d9:8e:9b:66:5e:a7:
0e:6d:05:f6:ae:37:19:17:95:81:82:73:60:2f:dc:
aa:dc:5d:6a:d1:98:e4:3a:31:2c:39:48:dd:54:b6:
d4:d6:15:79:aa:cd:b0:c4:3c:ac:6d:3d:ed:96:ac:
e9:5c:10:7b:e1:f3:f7:4b:df:13:b3:51:29:03:e3:
9c:20:37:a8:06:1d:74:5e:52:2f:da:9a:89:06:18:
f5:f1:ed:0f:e4:7c:00:04:0d:50:a2:3a:f1:c2:c8:
69:38:23:d8:e1:4c:f8:ec:66:4e:a7:ff:fa:3f:37:
19:bf:b3:d1:a5:7d:ed:89:6f:13:c6:17:7a:1c:af:
8b:0b:39:ed:27:d2:8e:98:7c:ab:80:54:c0:2c:15:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:47:45:50:C7:F1:32:91:FC:02:41:1D:FE:B3:7E:1C:38:38:C3
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8f:29:b0:32:0b:68:72:26:60:15:ab:af:5c:c6:71:04:4d:
41:00:e9:08:0d:47:7e:17:2c:2c:ed:ab:43:8e:a4:7b:00:9f:
01:62:9c:d3:60:29:26:3b:c9:1a:e5:a5:52:b1:f4:bb:3f:ea:
61:07:d1:66:ee:7f:95:02:23:18:62:d4:a1:c8:75:83:15:25:
53:2e:1e:25:aa:1c:86:b0:c6:82:85:0b:af:aa:0a:a3:69:ad:
90:cb:01:76:3c:eb:9d:09:66:36:3f:96:4b:44:8e:7d:b4:07:
d1:73:60:4d:f0:cc:d8:fc:de:bd:6e:01:5b:85:31:16:f6:aa:
9c:e5:90:e8:6b:8e:53:c5:39:5a:65:81:7a:b0:72:97:30:e1:
48:7c:2d:5f:1b:db:5f:37:88:94:08:63:5f:2d:6b:e4:0e:c7:
6f:a6:71:25:45:97:4f:ee:ba:fd:2f:79:fe:33:dd:36:73:f0:
f7:00:0c:91:78:17:95:18:c5:c7:fa:43:82:a7:06:a6:af:7c:
4e:e6:91:b3:47:9e:53:d0:70:69:36:13:32:60:4e:b9:3a:33:
e9:08:14:1d:6b:38:0c:c9:62:1f:b0:ff:ca:f5:49:1d:f5:18:
7a:5f:38:8d:41:b3:4c:a8:7d:b8:90:c0:29:4d:e7:84:b1:76:
6e:07:a6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:44 2026 by rpki-client