Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier: 2P3Y4c1SHDyP9m5s1drgiet0Yrpc8BfbLGg5Cey56QU=
Subject key identifier: AF:25:C5:A2:78:D7:E4:89:19:0F:A8:2E:6F:DC:4B:12:A8:16:CC:B1
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 019D9AAB9CE2EEAA02FEF6F681A4C337F259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number: 0E0B
Signing time: Fri 17 Apr 2026 09:00:31 +0000
Manifest this update: Fri 17 Apr 2026 09:00:31 +0000
Manifest next update: Sat 18 Apr 2026 09:00:31 +0000
Files and hashes: 1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: ynVgaPi2JximJBwOePcJPEbEtDhLICg3gmhpjke3asc=)
2: b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa (hash: o8XoU14Iw4MJitDTGOKpTt9lHXFFyCkBas20Hr7/Z5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9c:e2:ee:aa:02:fe:f6:f6:81:a4:c3:37:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Apr 17 09:00:31 2026 GMT
Not After : Apr 18 09:00:31 2026 GMT
Subject: CN=af25c5a278d7e489190fa82e6fdc4b12a816ccb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:39:e9:58:93:db:81:70:e1:85:77:3d:3f:
f6:b9:70:0c:8d:d1:e7:21:6d:dd:d0:10:42:25:54:
5b:06:26:d9:b9:9a:4c:50:e0:fa:67:c3:9e:4f:5a:
7d:d3:94:cf:c3:81:d6:50:5c:f1:16:69:a8:ab:09:
93:d2:be:e1:1b:5f:a1:71:76:f5:2e:a4:57:26:cf:
00:e0:a2:de:25:74:bc:3b:89:33:99:de:6d:f0:30:
f6:c4:9b:58:35:c9:68:64:16:0d:26:80:58:c0:a9:
65:92:f2:11:da:65:b5:23:06:6e:6f:c5:51:91:02:
ff:91:3e:cb:49:8e:15:b7:b6:f7:f5:7d:09:a7:48:
56:d7:d4:a2:6e:a2:bc:2f:67:b6:a2:d2:43:02:e1:
b4:18:74:8a:c0:4a:3f:a6:d4:32:69:3d:bc:61:1f:
4b:ad:6a:97:b3:c3:04:1a:18:e8:b2:cc:60:27:f0:
86:b7:a9:43:3b:96:e6:57:36:f8:2b:5e:fe:69:a5:
f7:52:7f:b0:ba:20:b5:15:63:41:6f:57:67:48:d6:
8f:d3:82:99:6f:21:01:b3:c1:5d:46:1a:4b:7e:78:
81:dd:7f:79:46:e5:c9:27:e5:59:25:74:fc:68:95:
8e:2a:0f:aa:d1:06:ae:bf:ab:63:74:b7:88:c6:0d:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:C5:A2:78:D7:E4:89:19:0F:A8:2E:6F:DC:4B:12:A8:16:CC:B1
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:f6:7b:ff:2e:51:77:c1:bf:60:dd:2a:34:12:2a:32:8e:
93:a0:c4:ff:43:73:24:ee:ca:7b:7f:ff:23:aa:23:31:a6:39:
1a:3d:c2:5a:5b:d6:dd:97:05:f7:a1:aa:54:97:8d:7d:7c:06:
cb:1b:d7:99:9a:bf:e9:16:f5:72:5a:2c:39:16:b0:0f:d8:57:
76:c7:f7:74:7a:50:84:ac:9e:27:5d:8a:80:68:59:00:e1:8b:
de:5b:88:e5:7c:25:bc:86:b9:b1:15:df:58:96:3d:a2:2f:e9:
20:30:f5:77:64:ef:49:00:c8:be:e8:41:eb:05:1f:e8:36:04:
a0:e1:9f:7c:e3:d9:88:e9:b2:71:61:d4:69:6a:a6:0b:83:8a:
88:3a:f6:8b:d1:4b:56:d4:66:68:2e:4f:39:2f:16:99:6c:73:
51:3d:d8:60:62:b9:a7:c2:ee:ba:9a:2b:0a:11:7c:4e:15:39:
a8:5f:2d:62:78:f7:83:6c:28:6a:cd:34:89:ff:21:42:df:da:
33:eb:a5:1f:4d:ed:1b:0d:37:3b:93:88:2e:9a:0e:79:ef:3f:
8e:b5:4d:fc:5d:1e:8e:ff:a2:6b:74:e3:f2:a1:f2:81:31:fc:
04:5f:31:6e:77:e5:98:e1:0c:d6:e7:8e:ef:ea:f9:19:e3:73:
79:a8:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:08 2026 by rpki-client