Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: ikgDSwJWbaLbXdBWSqq/YGsh7JkNNdAtg3eCun26xM0=
Subject key identifier: BD:57:2A:E7:D9:EE:1D:13:8D:73:1C:C1:B7:D9:4D:A8:D2:C0:B1:55
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019DA30B0AC0A9B242C4788D340586700F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0E20
Signing time: Sun 19 Apr 2026 00:01:42 +0000
Manifest this update: Sun 19 Apr 2026 00:01:42 +0000
Manifest next update: Mon 20 Apr 2026 00:01:42 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: bgryp/5kU0VJ7C2fsjU+oBMktye6t8msLuFyb6UxACo=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0b:0a:c0:a9:b2:42:c4:78:8d:34:05:86:70:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Apr 19 00:01:42 2026 GMT
Not After : Apr 20 00:01:42 2026 GMT
Subject: CN=bd572ae7d9ee1d138d731cc1b7d94da8d2c0b155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:0d:3d:ca:ff:5e:e3:ce:91:e6:3e:26:35:
89:4b:c8:81:80:31:d7:43:27:15:72:38:45:17:08:
82:84:c6:cb:79:a4:c7:5a:33:4c:85:58:f2:b8:d1:
23:a4:e0:44:c5:ea:61:64:84:c6:e3:f5:ad:5c:65:
78:92:4a:cd:41:52:15:70:c9:f0:38:57:fb:ad:74:
68:a2:f1:eb:83:1a:34:44:15:0d:a6:1b:15:43:d6:
65:37:b0:2d:41:36:b6:7e:b4:cd:d6:1c:1b:fc:0f:
8e:2d:de:10:25:a7:6a:f8:33:6e:0d:a6:b3:7f:a1:
31:01:50:2e:22:46:c6:bf:ce:9f:48:80:b5:f4:fd:
3f:af:2e:f6:f7:c7:f2:9c:53:fc:92:9c:88:0d:0c:
07:35:33:a9:79:c7:9c:77:e0:7e:6b:d2:c2:15:0e:
e9:31:6d:e3:19:a8:81:5c:9e:87:45:10:47:3c:ce:
aa:5e:de:19:1b:f3:66:d8:b2:7e:a0:5a:0a:f7:dd:
70:ff:0c:b1:4d:4d:af:53:7c:c0:6e:dd:9a:97:75:
23:0c:7a:3e:8a:0e:b8:52:09:37:a2:32:c0:6e:b4:
6f:1a:2b:07:05:5b:11:a6:3a:ef:b4:cf:72:16:4d:
55:47:67:f9:bb:7e:62:8c:02:e9:21:d8:ff:21:bc:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:2A:E7:D9:EE:1D:13:8D:73:1C:C1:B7:D9:4D:A8:D2:C0:B1:55
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:72:d5:7c:4f:46:b5:16:dc:88:a1:bc:53:9d:82:e3:62:72:
27:81:ed:59:fe:4b:4e:86:30:59:39:5b:88:a1:f6:99:b1:cc:
9c:66:37:71:3a:68:df:a4:c6:a2:a6:6f:6e:f8:01:a8:33:30:
b5:9f:b1:27:ef:b6:da:ad:88:74:44:b9:4d:66:9c:ae:06:db:
8d:4c:52:d2:f7:7c:78:26:a3:48:e3:df:df:9b:c5:5e:99:e7:
13:81:71:d6:60:92:aa:37:8c:72:72:f7:75:ad:9c:cc:27:c9:
27:70:2a:c1:b5:80:11:63:f0:e3:f0:e2:70:8c:7a:61:48:dd:
13:f5:b1:63:fd:7a:e0:53:5b:30:ff:37:7b:9b:c4:47:a4:4d:
c3:4b:42:fb:88:f9:36:89:71:59:5b:3e:96:5f:27:24:e3:5b:
27:09:9f:27:da:b4:b0:5f:93:d4:a5:0b:24:71:7f:c4:1e:a7:
56:c6:e3:59:21:2f:0a:90:d2:02:73:7a:9f:8a:6b:9a:a7:97:
76:4c:b9:69:ac:43:79:32:1a:f1:73:33:0f:ef:8a:db:3e:9b:
f8:f2:62:62:31:76:6c:e6:27:54:8c:a6:66:a1:2d:85:9b:c1:
5a:20:3b:8b:50:95:e5:81:7f:e1:10:21:aa:6f:e3:e0:35:20:
37:25:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:35 2026 by rpki-client