Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: nwWnZm9SudtdPe2FCpUoOQJvI7I43c+DQfKSbY38SYQ=
Subject key identifier: B1:4B:82:41:F5:A3:44:1A:87:AF:B0:68:A7:BE:AA:CB:D5:A4:E7:87
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019D99D07DC411EA7A3A7C17B4A9FFCFA35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 15B7
Signing time: Fri 17 Apr 2026 05:01:10 +0000
Manifest this update: Fri 17 Apr 2026 05:01:10 +0000
Manifest next update: Sat 18 Apr 2026 05:01:10 +0000
Files and hashes: 1: OBjM2iKRMxSjqa98ychsixD6X5g.roa (hash: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: 0j5dpZ8CYxeUQAa+3OeqNHDOqlPQwM/Zqy6Gmmbc0L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7d:c4:11:ea:7a:3a:7c:17:b4:a9:ff:cf:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Apr 17 05:01:10 2026 GMT
Not After : Apr 18 05:01:10 2026 GMT
Subject: CN=b14b8241f5a3441a87afb068a7beaacbd5a4e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:ec:60:21:75:4e:9c:02:dc:72:f4:c5:a8:
99:ff:88:50:e0:8a:d8:ff:0f:6c:10:25:60:6a:4e:
ae:06:65:63:2d:c5:22:43:ec:db:75:fa:d8:c0:87:
97:f8:8a:0e:80:4e:db:45:b1:53:fe:e7:75:5d:64:
5f:93:e4:5b:de:94:e3:68:c4:a7:bd:43:65:c1:26:
85:d4:f3:c7:2f:45:90:14:4d:2c:b7:fc:98:56:b0:
a3:50:bc:97:b3:6a:21:6a:08:0f:c9:86:ce:c1:69:
33:79:78:25:cb:8a:5f:77:b4:59:4d:0c:36:ab:c5:
a4:73:a7:79:f1:93:69:ae:a6:14:be:00:74:2f:f7:
f0:e5:a3:27:8e:06:50:e6:b5:89:d2:55:54:8d:07:
d9:92:bd:1d:e3:ad:52:e5:12:b1:df:a8:9d:47:02:
91:de:6b:0b:65:76:e6:7e:92:a5:4d:3c:ff:8c:d2:
7e:63:d8:17:47:02:e8:20:3a:8b:d8:94:64:23:68:
38:7a:6f:95:d3:e2:55:d8:a1:e7:25:38:fd:9a:5e:
5f:c7:6b:e7:5e:08:50:35:a8:b5:fa:63:37:8f:20:
71:c1:49:55:ee:96:3d:bf:02:01:72:39:15:66:99:
fe:02:ee:1c:b8:0a:65:53:20:1b:3a:de:b2:90:fa:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:82:41:F5:A3:44:1A:87:AF:B0:68:A7:BE:AA:CB:D5:A4:E7:87
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e8:a4:97:b7:6c:d9:aa:3b:ec:91:d8:e8:10:3c:a1:2a:c5:
f6:70:33:10:f7:8a:b9:78:b6:10:c8:b3:c8:a3:d5:40:be:d1:
6d:b7:30:68:1e:e9:eb:6e:6d:f3:a7:e5:5a:be:83:ee:1b:6e:
95:2b:6d:db:9b:62:41:10:29:f5:83:f8:58:3b:77:35:33:c2:
d8:9b:6a:e9:bd:8b:39:e2:8a:86:e7:3b:2d:03:3c:d5:9f:e7:
86:66:3f:bf:09:eb:ea:6d:72:b7:b3:a3:6b:3b:51:b8:33:e3:
95:53:07:cc:f8:3c:f5:20:36:32:45:bf:d1:a9:4f:33:96:07:
dd:1e:f6:18:d4:ce:39:34:1e:fb:61:82:00:f9:04:b0:64:a0:
c2:fa:e0:cf:96:5e:d8:d2:3f:13:78:c2:48:9a:e7:a5:1f:ca:
72:05:72:37:0a:31:ed:ca:31:c3:9d:0c:8e:f0:cd:a1:c7:53:
08:84:3a:5b:d9:06:17:68:11:03:6c:d1:a5:2d:b5:31:3e:46:
01:6c:e8:01:df:0d:d5:e0:51:3d:6a:2c:91:1b:5d:00:00:89:
33:3a:6f:6d:61:14:48:fb:ea:2c:65:f1:c2:53:78:c5:3e:19:
c5:4e:eb:9c:36:e1:8c:00:cc:30:dd:4c:88:77:a2:ea:16:22:
a3:8b:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:19 2026 by rpki-client