Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: Tg4pU/ajnfAVxgyICSsvOkL30xloCwDMdLQteMYAJKg=
Subject key identifier: DC:39:AA:B6:C6:8E:46:A7:CD:4E:EB:E0:C7:DD:94:50:4B:61:65:DA
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019DA41CC543D59BDA5D64C54028BDA9D17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 04B9
Signing time: Sun 19 Apr 2026 05:00:42 +0000
Manifest this update: Sun 19 Apr 2026 05:00:42 +0000
Manifest next update: Mon 20 Apr 2026 05:00:42 +0000
Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=)
2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: L6Rq0jueC6e1rXAdH8iE1ll2n7G3+bEy3QsIHaLxQV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c5:43:d5:9b:da:5d:64:c5:40:28:bd:a9:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Apr 19 05:00:42 2026 GMT
Not After : Apr 20 05:00:42 2026 GMT
Subject: CN=dc39aab6c68e46a7cd4eebe0c7dd94504b6165da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:f5:0e:62:ee:08:4f:b5:8b:9d:e2:a7:4e:
93:e3:20:41:7a:ed:7c:57:79:bd:bb:e5:a7:c9:22:
91:ee:59:a4:a6:36:37:01:e2:0d:aa:76:b2:eb:cc:
67:de:cc:90:dc:c8:dc:92:ae:89:03:1e:08:bd:2f:
4e:1e:c1:8c:77:d2:71:a8:fd:a3:07:69:07:a9:22:
30:ec:92:2f:78:a4:87:e5:7c:53:74:84:a5:52:c1:
cb:95:0e:41:f7:2d:c8:5e:7c:74:65:a8:13:dc:9b:
b6:a7:dc:d7:22:b8:3f:81:4a:67:4b:e0:47:b5:e6:
d4:af:0a:ab:ae:27:9b:62:5a:10:5e:0d:29:7b:7d:
fa:f1:86:1f:71:ec:50:c1:dd:90:27:a0:08:4b:05:
37:ce:76:7a:bc:5e:78:3a:33:c1:45:98:15:6c:50:
c2:9d:74:1c:02:fa:71:c1:eb:a9:df:5e:4c:b3:7f:
89:47:15:4c:79:a3:12:51:2a:5f:5a:2e:24:0a:61:
f5:16:65:01:06:46:d9:01:1c:df:ea:17:88:e2:85:
90:3c:31:6c:24:0b:33:b5:80:03:8f:49:99:bb:d9:
78:cd:13:76:b8:ee:77:ff:0d:ae:c6:85:00:d3:f0:
51:7c:69:d9:59:12:25:58:e4:72:17:e6:fa:bf:54:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:AA:B6:C6:8E:46:A7:CD:4E:EB:E0:C7:DD:94:50:4B:61:65:DA
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:9d:c7:16:7b:40:36:88:9c:fa:37:66:ab:05:55:e9:e8:
43:76:51:cf:14:8c:e9:5e:3c:61:b0:5e:6a:7e:66:b8:ac:67:
3d:a3:e2:54:c6:db:b5:30:79:6a:ed:6f:e4:11:df:c1:04:d3:
13:53:01:99:b8:43:f5:d0:d8:49:e0:35:e3:07:15:ab:da:ed:
19:1f:ab:45:20:7c:59:06:ae:47:af:68:63:9f:f8:c6:55:53:
a1:cd:74:c9:70:f8:40:6a:a4:2e:d3:8d:a2:63:e5:d9:02:35:
a3:18:7a:20:b7:0e:ad:c8:00:a5:bc:fd:1f:3a:a2:6e:10:7a:
39:1c:cd:fb:3e:c0:67:95:19:42:0c:fa:27:13:21:46:cb:67:
90:f3:01:ea:71:9e:59:39:a2:ce:40:0b:5e:94:e9:b6:63:a7:
22:42:a9:65:bd:22:9d:72:09:a5:86:54:79:af:16:9f:b3:6a:
76:7a:15:be:40:bd:b0:8b:79:89:5f:94:4d:e5:07:db:8f:33:
ae:d9:e0:09:08:3e:c5:f4:cb:5a:85:3f:cb:58:10:3a:22:e1:
49:64:0c:5a:bc:4c:63:ad:00:69:54:c3:cd:64:41:5c:7e:2a:
05:a1:1a:aa:70:ba:42:be:99:36:b7:d4:23:9f:58:98:0d:81:
f7:30:ed:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHMVD1ZvaXWTFQCi9qdF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx
N2Q3MmYwHhcNMjYwNDE5MDUwMDQyWhcNMjYwNDIwMDUwMDQyWjAzMTEwLwYDVQQD
EyhkYzM5YWFiNmM2OGU0NmE3Y2Q0ZWViZTBjN2RkOTQ1MDRiNjE2NWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5L1DmLuCE+1i53ip06T4yBBeu18
V3m9u+WnySKR7lmkpjY3AeINqnay68xn3syQ3Mjckq6JAx4IvS9OHsGMd9JxqP2j
B2kHqSIw7JIveKSH5XxTdISlUsHLlQ5B9y3IXnx0ZagT3Ju2p9zXIrg/gUpnS+BH
tebUrwqrriebYloQXg0pe3368YYfcexQwd2QJ6AISwU3znZ6vF54OjPBRZgVbFDC
nXQcAvpxweup315Ms3+JRxVMeaMSUSpfWi4kCmH1FmUBBkbZARzf6heI4oWQPDFs
JAsztYADj0mZu9l4zRN2uO53/w2uxoUA0/BRfGnZWRIlWORyF+b6v1TUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw5qrbGjkanzU7r4MfdlFBLYWXaMB8GA1UdIwQY
MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt
ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0
LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQledxxZ7
QDaInPo3ZqsFVenoQ3ZRzxSM6V48YbBean5muKxnPaPiVMbbtTB5au1v5BHfwQTT
E1MBmbhD9dDYSeA14wcVq9rtGR+rRSB8WQauR69oY5/4xlVToc10yXD4QGqkLtON
omPl2QI1oxh6ILcOrcgApbz9HzqibhB6ORzN+z7AZ5UZQgz6JxMhRstnkPMB6nGe
WTmizkALXpTptmOnIkKpZb0inXIJpYZUea8Wn7NqdnoVvkC9sIt5iV+UTeUH248z
rtngCQg+xfTLWoU/y1gQOiLhSWQMWrxMY60AaVTDzWRBXH4qBaEaqnC6Qr6ZNrfU
I59YmA2B9zDtbg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:35 2026 by rpki-client