Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: epPM7c4mNGZOIdSdX1EtXeW1SbreyQEC1Ky4Djcle8g=
Subject key identifier: 00:40:3C:FE:5A:D6:8F:52:DD:F7:52:4C:29:E7:A6:F2:9C:ED:DF:4C
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019D9A751C8809951F36D11AE387F1E3A422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0D43
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: swoiwmfESz0QRo/eUbIzfM3feDlMFvDMywAvPiUpBsY=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1c:88:09:95:1f:36:d1:1a:e3:87:f1:e3:a4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=00403cfe5ad68f52ddf7524c29e7a6f29ceddf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:7f:98:1f:60:56:1a:de:b1:25:97:01:1d:
d2:53:c2:d7:0c:00:24:4c:0a:d9:27:96:ae:24:3e:
7b:b4:84:15:1d:39:2a:32:9a:2d:e8:8b:2b:ef:2d:
13:14:05:29:81:bb:1f:01:8f:46:86:78:6b:56:07:
d2:ad:a3:ae:79:87:19:10:96:3e:32:68:20:8f:df:
c1:5b:88:e5:65:f6:d7:b7:8c:69:2d:7f:ac:cc:e7:
af:b2:31:d8:36:6d:18:a5:f3:4b:d8:af:10:82:c8:
ce:ba:53:16:45:f2:24:55:05:97:f8:15:39:50:05:
98:65:65:f6:29:70:0b:03:ac:c5:34:65:46:a5:9d:
65:70:09:45:5a:a7:31:8e:df:d1:40:36:98:3c:64:
19:a4:42:66:27:04:b5:85:23:28:e1:ee:c9:28:c7:
2f:6c:35:80:a3:29:fd:69:13:23:bd:18:7e:6d:8a:
89:e8:07:f0:8b:9b:00:c2:5d:4d:9f:c6:9a:2e:12:
df:70:6e:46:41:67:2f:ab:a9:d4:9f:3b:bb:e7:7b:
6c:c9:2b:ed:9a:8f:c0:55:cf:76:0a:fc:6c:bf:a3:
1f:7e:9b:e2:57:a2:49:91:a2:43:be:5a:8f:9f:64:
ac:59:2e:f8:b0:02:6f:1f:38:0e:49:44:9e:20:bf:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:3C:FE:5A:D6:8F:52:DD:F7:52:4C:29:E7:A6:F2:9C:ED:DF:4C
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f6:9f:5b:c3:b8:ac:23:fc:fe:0c:07:4c:6e:8d:d2:8e:f6:
ef:e1:d3:35:f4:d1:2e:89:23:9a:a4:79:c0:2b:51:7e:d3:80:
46:37:ec:60:e6:90:51:ff:9d:ae:ee:7c:d7:c0:86:17:1c:dd:
66:9d:6c:3d:58:08:67:e9:07:37:ac:15:41:14:ba:bf:7c:5d:
ee:7f:29:c9:2b:b3:39:49:b4:e2:70:7d:4f:df:1f:a1:10:0c:
93:46:7f:98:84:e3:98:88:65:f0:8c:aa:27:cb:c9:c9:77:b7:
4a:cf:f9:de:f2:d3:0f:4d:d8:67:0f:43:d7:83:ed:0f:ff:1d:
fd:f6:72:27:0f:79:93:fd:01:c4:f3:38:11:02:8d:e7:d5:74:
f1:bb:4a:35:a5:9e:7f:60:dd:82:f4:7e:b4:bc:37:c4:31:a8:
bb:14:27:94:61:dd:79:2e:e5:1a:1f:32:40:e0:74:5d:60:03:
3b:b3:c7:5c:d1:e6:33:80:38:53:fb:21:57:51:57:cd:5e:ec:
31:7b:0e:7f:f2:db:d4:cf:62:be:c7:11:08:05:ab:4b:26:0b:
86:d2:7c:07:c8:56:e4:ac:72:22:32:9d:89:a0:39:a7:68:8e:
0d:32:75:f8:09:b8:f5:42:b7:98:19:97:10:d2:a3:93:23:01:
8d:d6:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:45 2026 by rpki-client