Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: S4P5E1LvWMBXdBT6zCmUi7J20M0WrbqW4+S/quntB1Q=
Subject key identifier: 8E:88:94:8F:71:AA:C0:9C:7D:8E:A0:71:BA:90:6F:63:3D:DF:0A:B7
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 019D97E15D12CB51EF6D92BD33F1376C7A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 1620
Signing time: Thu 16 Apr 2026 20:00:22 +0000
Manifest this update: Thu 16 Apr 2026 20:00:22 +0000
Manifest next update: Fri 17 Apr 2026 20:00:22 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: 61wJROBkgPs85BIBN+8S3hx/j++QCU22KAnEI6riViw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:5d:12:cb:51:ef:6d:92:bd:33:f1:37:6c:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Apr 16 20:00:22 2026 GMT
Not After : Apr 17 20:00:22 2026 GMT
Subject: CN=8e88948f71aac09c7d8ea071ba906f633ddf0ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:4e:cb:75:b0:46:b3:4a:09:46:8c:97:33:
38:99:da:b5:3d:e6:c3:c5:15:da:94:5e:ca:12:1f:
6c:3f:10:13:68:d1:70:08:fd:2e:e2:76:8a:9b:a5:
0b:9d:92:03:0c:5e:42:76:86:09:ef:86:3f:90:78:
36:95:a6:8a:24:b2:54:78:db:d6:90:ae:cb:71:11:
cf:4a:ce:0c:2f:30:f1:87:6d:2d:64:4e:b2:47:8d:
d5:91:05:e2:d6:0c:50:48:60:ea:c9:bc:63:a7:8c:
60:03:07:3b:23:68:0a:c5:a0:3d:95:0c:e7:5a:3d:
d1:5c:a1:65:48:51:c7:32:a6:53:e4:f6:5d:8f:45:
bc:fb:1f:73:4e:2c:0f:0d:bf:46:c1:e4:aa:65:60:
18:81:b4:a9:23:30:4e:1c:ee:cc:6e:b1:de:ca:1d:
d2:81:f3:41:c8:84:df:09:20:62:bd:e4:96:7d:14:
4d:0b:47:ee:74:93:a9:f1:af:dd:ec:31:0b:55:b5:
f3:f9:47:2c:6f:7f:74:18:9f:bc:78:c4:82:ec:45:
74:e0:ea:5c:8f:2d:ab:7f:49:e9:a7:1e:de:ff:18:
52:de:ed:0c:b2:a0:87:e4:4c:7c:6b:18:2f:49:8d:
6d:50:6e:11:40:c9:ab:f1:36:87:8b:8d:1c:e3:6c:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:88:94:8F:71:AA:C0:9C:7D:8E:A0:71:BA:90:6F:63:3D:DF:0A:B7
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:2a:11:36:1f:d7:37:77:cb:02:27:f7:3a:5d:e4:a2:9e:
30:57:ef:34:c6:a2:29:d8:3c:46:1a:13:b0:94:67:6c:c1:bd:
82:81:2f:51:36:43:1d:8d:3c:77:2f:90:97:8d:83:dd:38:de:
fb:73:99:ff:90:d8:d9:4e:7d:0f:4b:b6:b1:b6:87:03:4f:08:
e4:57:83:35:56:79:2b:c1:d9:60:fb:08:4d:43:a7:d1:b7:82:
d1:53:08:82:7f:eb:1e:f3:77:cf:d4:52:32:80:40:0b:dc:82:
4a:c6:89:2c:eb:51:f3:85:80:4d:53:3a:7d:a9:29:06:8c:bf:
7c:99:20:6d:da:26:31:45:22:a8:28:af:6b:31:7b:f1:1a:6b:
1f:89:39:f4:7b:95:ae:22:a5:2f:99:f3:59:60:df:aa:8b:f2:
8a:56:2b:09:a0:98:f8:39:7f:d6:07:c9:b4:d2:db:1c:d3:ad:
13:f8:45:d9:d1:d5:1c:14:fa:91:4c:73:6e:46:89:d8:ad:6d:
86:9a:c5:6f:42:01:bd:2e:1f:a5:89:80:22:f4:71:a6:91:67:
85:e0:d2:f1:47:72:32:d2:4d:e4:49:f6:5a:f4:01:65:17:17:
48:84:dd:00:b0:36:ef:f8:4a:d8:84:18:4d:a6:fc:33:06:23:
59:ab:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:40 2026 by rpki-client