Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: Wz+y2Ldy7h2wl9ABn21N+sTODsgxqVpZSDtT7zUTA3Y=
Subject key identifier: 93:6F:22:01:88:26:D4:1B:40:3D:7C:9D:90:0B:58:5D:8A:70:BF:0F
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 019D9A3E89653FD6AEB914E920815C3FE12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 0C4C
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: JF9uyQMwDP8E7foz0moeKJRu/DgaeJ9ALjp/EmqC6ek=)
2: _212wJQlWeYcBkxbC19a1SlrDyo.roa (hash: h2roho0ZuXP4gmifiDr6Me5QQTfPCj8NZhRd1vhy6yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:89:65:3f:d6:ae:b9:14:e9:20:81:5c:3f:e1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=936f22018826d41b403d7c9d900b585d8a70bf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:33:1a:29:0f:be:16:b6:73:ec:b5:1f:73:
27:1c:67:7b:0d:7c:19:b3:ff:e6:f1:72:ae:20:ca:
bc:9b:f7:0b:69:27:12:8a:4d:85:07:4d:71:9d:cc:
77:80:f4:39:60:91:dd:55:82:c1:c0:c1:32:53:0c:
62:2e:72:e8:1e:6e:76:9f:53:55:c8:bf:13:3e:1a:
5b:0f:3f:93:ec:7f:b9:8a:42:a3:43:d8:23:83:9f:
b2:94:c9:d1:c5:3e:da:32:2a:18:1f:6c:07:87:31:
55:41:45:c0:4c:f8:b8:65:ed:42:c0:33:60:3f:12:
df:cc:b1:bf:17:4f:70:6b:ee:34:19:a6:f3:db:18:
0f:83:41:cf:da:69:a3:b1:26:c7:08:79:b1:ac:d6:
07:0e:13:e6:05:e0:02:fe:16:63:bd:58:12:8f:07:
85:1b:1b:94:af:98:ad:8a:49:d3:fd:5a:95:0f:e8:
3c:60:e5:18:28:fb:90:8e:f4:f4:95:82:1e:ea:57:
4b:f0:06:01:71:70:30:69:a7:8e:93:2d:61:a2:43:
cf:5e:20:e2:c7:4e:7e:46:c1:6b:78:94:92:83:fb:
2f:e3:c4:2b:9f:df:6e:06:cf:d0:e5:5a:67:a9:19:
69:7b:38:b2:18:20:ce:52:e5:58:48:3e:50:15:3f:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6F:22:01:88:26:D4:1B:40:3D:7C:9D:90:0B:58:5D:8A:70:BF:0F
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:1f:32:bd:10:fd:e7:90:1d:39:d2:10:3a:71:16:01:72:
96:68:90:71:bc:44:9f:ec:c0:4a:74:96:f1:c3:be:9a:6f:bf:
ec:94:64:67:c4:f1:af:ee:1a:05:00:aa:e8:96:1b:77:20:be:
76:ff:d6:03:9f:c4:36:65:b1:4e:0d:15:fd:d0:86:e1:36:d4:
66:f6:32:67:b5:dd:1a:4c:9b:1f:12:e3:75:b1:b9:9d:77:78:
be:f4:c3:15:bd:9c:a0:a7:6e:86:27:af:2f:8f:02:1b:bb:52:
21:87:5e:c8:cf:72:72:ab:65:0c:da:2a:9c:58:1b:dd:7e:a5:
b0:c5:1e:0b:23:1c:35:68:42:77:10:34:6d:71:61:24:ac:29:
19:f4:e0:32:8c:cd:a4:36:e3:fa:eb:af:b7:46:c0:a8:c5:87:
08:05:66:3a:c7:70:47:35:d8:19:47:ae:2d:fc:00:6a:bb:97:
ca:0f:12:d7:fe:c6:14:c2:44:da:03:1a:d2:30:76:80:e7:47:
84:65:4f:9e:41:e2:2f:f8:51:51:e7:df:41:ee:f4:af:5f:07:
f4:42:d3:17:61:2c:25:4a:6f:14:b9:07:1a:09:a6:1b:f7:a1:
e1:46:9f:90:54:b8:a6:a8:cb:81:db:0e:7b:87:ce:c4:10:60:
07:25:8a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:05 2026 by rpki-client