Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: 0vqixw5DW3mbqcjkdJ2zvzVJLWMqvjzIYrosVzX9xIQ=
Subject key identifier: 1A:23:6D:55:C4:13:2E:BB:BD:8C:33:41:29:2C:01:6C:20:B5:0D:59
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019D9B5077CC8063740983524CA8BD386CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 16F4
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: cAyRnbCX1+e0HRqXh148KdN08Wl9N1A1JAH/q4H0B6Q=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:77:cc:80:63:74:09:83:52:4c:a8:bd:38:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=1a236d55c4132ebbbd8c3341292c016c20b50d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:f7:33:04:d8:1d:8b:a0:43:ea:62:11:1b:
e1:b8:d1:d4:e5:88:4c:4a:5d:56:f7:54:5f:20:5d:
8d:82:e4:e2:b3:c3:8d:c3:74:da:4f:d0:14:db:1f:
a2:65:1a:47:e0:82:7f:e8:4c:7e:19:b7:f6:8f:89:
6c:5f:6a:40:e5:26:16:65:e1:d3:6d:4f:1d:3b:be:
f7:fb:69:9e:4e:32:d2:91:be:32:79:da:1f:3e:04:
72:7a:f2:80:3b:60:96:93:c1:76:b6:b7:88:2a:af:
a7:14:9d:8e:b4:93:a6:83:8b:19:82:02:e6:77:9f:
fc:6a:a2:b7:21:da:d9:94:79:e3:d4:fe:7b:df:d3:
6b:8a:84:7d:ce:d7:ac:0c:23:47:2e:ad:a8:e4:46:
72:55:8f:1e:4c:5f:cd:cd:9f:d3:e0:93:30:10:ce:
e9:fe:f6:6d:f2:2c:f5:99:6e:fe:1c:ba:55:45:73:
79:2c:d2:29:64:7d:ca:ef:d5:7e:7f:0f:5f:21:bc:
6f:38:77:74:5f:cf:6f:05:0f:04:9f:cd:52:e3:14:
72:e4:1f:0b:69:42:25:09:e2:11:35:ba:d8:07:7c:
b2:ea:92:95:cc:86:a2:b7:90:4e:68:3b:e6:fa:92:
f4:b2:f9:8a:27:c6:b0:27:ba:f7:8f:b0:bd:d0:b5:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:6D:55:C4:13:2E:BB:BD:8C:33:41:29:2C:01:6C:20:B5:0D:59
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:d9:6a:3d:6c:cd:69:85:5c:5d:cd:38:43:f3:b7:35:3d:42:
09:4c:fe:bf:8c:bd:d9:65:81:fc:ba:bc:74:57:fd:c1:23:1c:
08:9d:6c:8b:15:ed:de:82:fd:94:85:93:25:87:18:78:e0:8c:
0a:18:74:84:3f:50:1b:f9:ba:46:25:81:92:b6:aa:78:f4:0d:
9e:a8:a4:d4:24:87:b8:bc:81:7e:5f:01:22:31:cb:c9:b8:6b:
51:9a:f3:0e:94:9b:1b:f8:b9:5f:15:c1:73:2d:bf:68:71:28:
7a:3f:21:36:93:78:8d:c6:9b:18:f3:65:ec:f0:b3:4d:8a:bd:
1f:b5:be:3f:dd:7b:bb:47:04:4a:33:42:ac:47:99:36:2d:20:
ba:06:59:b4:14:74:94:99:ad:f8:3f:3a:7d:95:01:f6:09:f5:
09:43:4f:b2:ea:21:9b:96:43:5e:a1:8f:2b:78:15:ef:12:55:
b8:9e:d0:fc:a0:5a:82:9f:ec:a0:7b:1a:ee:72:f9:97:ae:19:
d8:ab:95:ff:a7:2f:c0:bc:f7:08:eb:ae:3b:9c:78:2c:ab:f1:
64:8b:88:74:45:4a:ea:3f:3e:06:9c:8a:60:0b:20:e6:cb:d0:
5b:e1:3a:70:8d:7f:8a:59:5d:55:9a:09:94:db:0b:ed:cb:30:
8d:a3:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:03 2026 by rpki-client