Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: PczpwwgbtZ5l5IVh/P+ixXKcIQdVy58e+ZRhGLq1b8o=
Subject key identifier: 9C:1A:86:8E:FA:4C:50:C3:1F:5A:83:47:F0:4B:35:6B:D4:89:4E:5E
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019DA4C193EDA58EB3FBB7FB45E2A95B7F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 01CE
Signing time: Sun 19 Apr 2026 08:00:42 +0000
Manifest this update: Sun 19 Apr 2026 08:00:42 +0000
Manifest next update: Mon 20 Apr 2026 08:00:42 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: uqiA02+BUm8ydS5LvDwWDXU9BUfXYkgDTi8OfM+VtWg=)
2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:93:ed:a5:8e:b3:fb:b7:fb:45:e2:a9:5b:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Apr 19 08:00:42 2026 GMT
Not After : Apr 20 08:00:42 2026 GMT
Subject: CN=9c1a868efa4c50c31f5a8347f04b356bd4894e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:05:15:90:be:2b:de:42:c0:43:e4:55:90:
8a:75:a2:cd:d3:eb:db:ce:7c:0c:6f:a3:e9:3f:c1:
b7:78:9f:4c:00:3e:e3:ef:16:6b:3b:a1:24:ea:96:
58:23:8c:a1:81:ad:2e:66:48:02:82:19:58:19:ff:
40:d7:dd:e6:74:e3:29:b8:29:d1:68:27:3b:6a:72:
45:fd:4d:a3:62:d5:19:b8:9a:df:be:a8:58:ad:43:
9a:f3:b5:35:fb:11:3b:5a:09:01:35:e7:fb:a6:8a:
b5:da:a9:7a:2c:ef:43:d9:56:ae:ef:dc:3a:3e:8a:
4e:85:af:1f:c8:57:3b:4b:55:e2:c4:85:e4:eb:a8:
6a:63:b1:98:69:88:67:0f:60:4a:58:71:2c:01:47:
17:3c:89:42:6a:d7:d1:ad:82:83:43:5c:a1:85:68:
d3:9c:59:32:c8:3c:97:ec:65:cc:a3:c9:ac:ac:0c:
2d:de:93:00:b8:f3:9a:38:0c:48:3e:61:4c:7b:5d:
2b:7c:04:82:1a:70:74:a8:ce:a4:dd:8e:88:27:b1:
4a:36:71:2e:08:b9:14:26:b5:c2:cd:da:79:91:ce:
32:4b:aa:97:c9:3c:2b:30:16:c5:cb:fb:f5:94:b4:
f1:2b:d3:10:42:24:7e:36:bd:e8:a8:b8:fe:12:65:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:86:8E:FA:4C:50:C3:1F:5A:83:47:F0:4B:35:6B:D4:89:4E:5E
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:3e:28:12:bb:c8:01:40:26:f8:34:e2:47:39:3b:b7:03:
a1:28:77:5b:1e:aa:3a:55:70:b8:e5:12:2c:df:10:25:15:44:
af:ce:b7:88:a0:1f:78:a6:c7:9d:d8:82:7b:fb:30:77:fe:a2:
ac:df:13:e9:1e:89:3c:e1:69:d8:25:cc:39:96:c5:c8:72:54:
3d:8f:35:4d:42:c6:a0:45:62:c6:b1:6c:cf:12:e1:88:bb:0a:
7d:cc:3c:d5:e1:cb:24:3a:68:13:ed:ac:56:da:cb:d4:f6:66:
0c:8f:20:ca:0d:5a:49:6e:c4:36:65:8e:22:b0:a3:8b:72:56:
1c:30:d5:5a:cf:e0:5a:a1:75:a0:62:01:7d:40:d5:bf:af:df:
79:9e:7c:d9:34:25:52:ac:54:d9:f0:ea:0f:0d:f2:30:42:43:
fd:cc:5e:05:d5:88:c3:d6:d8:df:95:95:19:73:4e:af:1b:ee:
79:23:ec:0b:27:fc:b1:33:0c:c9:30:f2:cc:58:11:a1:a8:82:
38:de:25:c4:30:7e:1c:19:fd:77:08:35:f3:ce:12:27:d6:4e:
6f:58:89:9c:ac:5c:ad:ed:cd:69:21:1e:63:2f:a1:a3:33:6a:
2b:9b:d6:3c:7f:07:a8:71:9d:d1:d0:25:a1:62:e7:88:7f:f8:
0f:aa:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:52:50 2026 by rpki-client