Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: lMofJGcROAacd1kJtfTvzQdYt6drZCr2sDCUtY3f0ks=
Subject key identifier: F1:0C:3F:2A:5F:F3:9A:C8:91:46:3A:68:C3:B3:C8:8E:7F:AD:1A:37
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019D98BDB41A6556646C432DE39B812F2050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 16C8
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: 0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa (hash: kZAZ+FtKOmvNUJYXZ93DTfdC6kgpQf3D40b45bZU8Bg=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: jFfbQAYpGlu4ybSfsJS1NUH91NW/x7Cx1KM05qFImKg=)
3: hjf42_UdZaBcTmMxK9JfIjVnYF4.roa (hash: XYP9CSJ0v1KuulLYS04N8rRaMuUIS0Lpmjnr6cJWmek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b4:1a:65:56:64:6c:43:2d:e3:9b:81:2f:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=f10c3f2a5ff39ac891463a68c3b3c88e7fad1a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:2c:b7:43:d0:e2:85:db:60:2e:7d:25:31:
e9:ec:a1:fb:14:8c:2e:62:12:9d:d3:36:9d:71:6c:
c4:d4:e5:38:cc:a9:fe:b0:c3:62:ed:45:a7:8c:39:
60:57:72:a6:b9:9a:72:f6:a5:c7:ba:bd:90:c4:64:
b2:e2:80:9b:f5:65:9d:d5:c2:5b:d0:b2:0c:78:93:
1b:be:58:06:1e:a9:03:f7:1a:a6:0e:82:d8:e7:93:
55:ce:22:61:2f:8a:0c:c3:1a:1f:c5:0b:79:e0:41:
88:d9:32:d7:c6:1f:3b:97:98:7e:46:04:ac:b4:08:
b5:bb:52:a4:3a:b9:82:b5:83:f7:d4:cf:34:de:45:
10:f7:1b:d5:f6:9c:68:7d:73:d9:51:bc:5a:f2:dd:
d6:ca:0d:49:84:fa:cd:4a:28:96:62:01:9f:af:aa:
3e:91:90:c7:76:31:68:42:c5:71:64:e5:5e:60:bb:
67:c3:73:a4:40:c6:99:5a:95:9c:4b:83:e5:e5:35:
1a:7d:ca:33:d9:8c:40:31:fb:e4:23:47:8c:07:08:
59:e6:6c:00:6c:39:93:ce:bc:63:98:5c:de:3c:30:
41:57:0d:5b:e6:7e:a3:9c:7a:a5:e2:00:9e:4c:46:
03:86:28:17:23:4d:14:96:cb:82:4e:9c:19:24:d8:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:3F:2A:5F:F3:9A:C8:91:46:3A:68:C3:B3:C8:8E:7F:AD:1A:37
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f3:66:6c:41:24:e8:3a:6b:80:0f:53:79:f9:5c:14:b1:9c:
76:6b:b0:c2:71:91:8d:2d:32:d4:ae:a1:48:43:d6:15:27:52:
c5:91:51:ec:bd:a9:26:d7:6c:92:07:0d:b1:b8:d0:d5:e6:c1:
87:1e:25:f5:0f:17:6d:c2:a9:e3:3e:95:61:0e:bf:99:31:02:
67:4b:82:c4:f1:4b:42:d1:13:14:68:d4:97:6b:41:6f:e9:a8:
c0:cb:cc:6e:57:1b:6e:b9:ec:99:f7:9a:43:27:d9:ee:e0:23:
c0:f6:4e:a7:4d:54:69:96:34:59:09:08:38:c0:ad:e1:3e:00:
e9:dc:50:5a:4c:af:36:6b:ef:b0:9e:b1:f6:95:23:c5:7c:ee:
a5:1e:ff:24:f9:4c:9b:9d:35:47:fd:25:3b:e3:4c:b7:3f:d7:
d8:db:5b:d6:98:9d:9d:3a:65:39:46:a9:e2:f2:69:4a:d4:4a:
03:40:d5:92:21:0f:90:33:fc:75:3b:a3:35:af:1f:33:d0:47:
30:3d:7b:25:b8:d9:2e:cc:d9:84:a5:06:8e:15:3d:46:59:4c:
62:17:4e:b5:8d:2e:7f:d8:a0:96:ee:fa:b8:a7:14:1d:27:09:
aa:5a:91:da:07:bb:bb:ad:d8:1e:a1:11:3e:56:90:3f:b2:a5:
30:a2:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:51 2026 by rpki-client