Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: zkdjFgGbSY+wnUllLX6oR7gU4DEog/zdqsYBP3/PVhU=
Subject key identifier: A5:CC:D9:E7:3B:F1:46:ED:15:66:F6:83:79:B6:CB:E2:F0:26:41:D0
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019DA30B2B2382FD3F6125F89342FC57BF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1327
Signing time: Sun 19 Apr 2026 00:01:51 +0000
Manifest this update: Sun 19 Apr 2026 00:01:51 +0000
Manifest next update: Mon 20 Apr 2026 00:01:51 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: hPbvVcaskNwvkeIhK6IKPjensMFWFvnAUsjdbARWZs0=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0b:2b:23:82:fd:3f:61:25:f8:93:42:fc:57:bf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Apr 19 00:01:51 2026 GMT
Not After : Apr 20 00:01:51 2026 GMT
Subject: CN=a5ccd9e73bf146ed1566f68379b6cbe2f02641d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:d6:b3:41:30:04:2a:24:77:e6:8a:26:32:
56:7a:a2:82:c5:62:3c:19:d0:40:44:be:0e:5b:8f:
3f:f4:46:2f:8a:9d:83:ac:16:59:eb:67:bf:06:d6:
07:b8:0f:1a:64:d2:c7:41:3c:df:26:63:ba:db:c9:
40:4c:b3:a2:ca:04:f3:cb:42:0f:86:86:bd:b9:2a:
f9:22:03:e5:82:57:63:aa:11:82:9e:cc:70:6d:cd:
59:d2:05:35:98:db:55:3d:fb:98:5c:26:4b:d1:39:
e4:ed:5a:80:a1:db:12:bc:c2:e4:61:66:e3:e2:20:
c7:9c:2d:12:cf:73:db:c7:94:50:48:e6:44:f5:51:
99:08:d7:fe:9c:11:7d:2c:4c:36:86:7f:62:0a:54:
f5:11:05:1c:21:7c:80:a9:fb:5b:f0:0b:d9:da:6c:
88:a1:f4:06:65:7c:3f:5b:b7:d2:49:28:58:5d:67:
51:49:87:a4:20:66:83:11:54:06:60:68:38:71:e9:
52:1c:a8:4d:46:25:b1:2e:44:e2:44:f7:fa:d2:2f:
f2:4a:e0:72:f1:36:7a:72:93:89:fd:6a:a9:b7:cb:
8a:17:29:a0:e5:1c:6a:dd:48:85:15:c8:d5:f4:a7:
d5:62:2b:d4:93:bf:83:7a:4b:ed:6d:dd:38:bd:89:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:D9:E7:3B:F1:46:ED:15:66:F6:83:79:B6:CB:E2:F0:26:41:D0
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4c:6c:31:c0:37:f9:30:3b:cc:d9:46:9e:ee:eb:f8:ca:38:
b8:a9:ee:25:36:83:5c:89:34:0e:37:c8:07:c2:86:93:79:c1:
e3:e0:ee:8f:b8:af:96:7a:db:72:66:9b:39:d8:81:57:84:4a:
cc:92:bb:f4:e1:e6:63:37:45:90:0b:31:f1:e3:1f:88:b2:f0:
d0:9e:6e:55:a1:eb:90:43:f4:a8:c0:79:45:f3:f8:bf:27:03:
bd:ea:19:dd:5b:2a:64:a6:93:f5:8b:42:5b:d3:48:a7:b9:66:
fa:6a:48:10:0d:f7:33:c2:43:f7:3f:bf:78:85:58:43:d1:34:
8b:97:eb:e3:a2:e4:c2:d6:bc:15:f2:a4:17:7c:2c:ad:22:5e:
8b:76:5e:35:42:09:11:30:1c:a8:17:da:27:b2:4d:50:91:16:
20:8d:cc:30:95:3e:27:b9:60:f9:e5:68:84:9c:20:16:00:00:
0f:1f:65:f8:59:f3:27:92:32:5d:50:8b:aa:27:db:a6:11:09:
3b:87:42:e5:82:81:46:4a:39:77:bd:16:ad:37:ac:ca:c6:5d:
d8:be:14:79:19:62:97:c2:ba:64:e3:7a:02:4d:47:1d:a9:73:
a6:1b:3d:6a:54:49:d7:63:75:a2:78:74:30:8d:4d:b2:48:61:
34:a5:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:34 2026 by rpki-client