Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: q4oauL+A+kDUmtpKfdODBWzbcwjP7ayP9o7Gg9Tix8A=
Subject key identifier: 1E:0B:C8:5C:67:BD:7D:33:42:2B:D1:B2:54:CE:85:C5:B5:89:A4:1B
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 019D9C2C65BBBAEC4CA3CB94ACE16458F44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0EDE
Signing time: Fri 17 Apr 2026 16:00:48 +0000
Manifest this update: Fri 17 Apr 2026 16:00:48 +0000
Manifest next update: Sat 18 Apr 2026 16:00:48 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: 2EjJ9fUCISL0BNhBi/nPmirTXtIkCmAGXlthNPGLOjg=)
2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:65:bb:ba:ec:4c:a3:cb:94:ac:e1:64:58:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Apr 17 16:00:48 2026 GMT
Not After : Apr 18 16:00:48 2026 GMT
Subject: CN=1e0bc85c67bd7d33422bd1b254ce85c5b589a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:13:11:ad:c0:9a:63:37:d4:f5:90:9f:05:
71:6c:6f:2c:75:e7:db:a4:a3:f8:69:1d:91:0f:65:
13:28:4f:3c:08:22:cd:af:fe:ee:7c:dc:97:4e:b5:
59:4b:60:26:24:1d:3c:30:66:83:8a:f0:2c:cf:e9:
38:e9:96:60:99:56:16:64:ff:bd:47:b4:21:05:86:
07:35:9b:18:dd:e7:28:82:aa:3f:b0:a1:95:e0:45:
df:31:cb:57:89:63:b8:6c:21:30:06:27:fb:10:60:
f9:ff:12:cd:09:6b:84:df:9a:f0:e3:56:94:73:96:
50:31:8a:ec:c3:12:11:91:dd:d2:84:dd:40:04:8d:
78:e3:c8:fa:87:ce:e2:4f:7a:25:50:63:76:3b:ff:
1e:25:81:8f:76:34:4a:8d:77:75:6c:e2:42:c7:7b:
ed:76:67:2c:12:73:e2:16:15:f4:94:92:b8:27:68:
25:41:63:80:56:56:26:90:6a:b3:aa:01:30:83:ba:
f3:46:ee:4e:df:47:65:05:7f:f2:6a:55:43:78:8d:
81:a7:74:c3:3d:c2:ee:5f:4f:eb:fe:d7:30:ca:59:
33:ee:1d:af:33:08:d7:ea:20:0b:44:98:d9:6b:1f:
da:b8:7a:60:83:37:d3:ca:e5:66:47:ce:fb:6b:01:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0B:C8:5C:67:BD:7D:33:42:2B:D1:B2:54:CE:85:C5:B5:89:A4:1B
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a2:aa:d1:29:f4:52:f6:55:86:10:29:85:2f:12:6c:32:40:
fe:36:73:38:fa:5d:75:6b:cd:38:f1:1d:14:39:bb:ef:97:79:
fe:ae:f1:ee:25:e5:15:df:ba:a4:13:34:60:31:7e:d9:23:9e:
6f:8b:ca:db:4d:9b:92:0d:ea:54:bc:d8:8e:7c:0c:eb:c3:aa:
18:47:d0:4f:17:65:4e:39:60:8a:49:35:40:b3:5a:a5:c3:af:
c9:87:b7:0e:99:fd:82:20:ca:1c:ab:ad:f4:d4:0b:93:f4:1f:
b2:e1:12:d5:6c:b6:a2:7d:b7:c4:a4:96:22:7e:0a:8e:2b:c3:
51:aa:8c:04:df:58:93:6e:77:1f:73:ac:5c:00:64:58:af:e6:
7a:83:47:d1:e4:ef:11:f7:18:de:e3:11:a8:5b:fe:0a:88:5b:
92:6c:27:0e:24:86:46:3d:d7:99:b6:da:b7:90:78:9a:73:0c:
47:c7:ab:97:ee:eb:fb:c1:5a:e7:8a:c9:24:87:b0:e3:21:28:
a4:e7:3f:d0:ed:d5:eb:c2:2b:ad:04:d8:5c:20:6b:50:11:a0:
be:a1:0d:a0:38:3f:60:72:74:c8:0b:0a:b4:5c:3c:7e:2f:83:
ed:d5:1d:01:02:cf:67:cd:20:51:f4:2c:d6:e0:dd:c0:c3:dc:
78:fe:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:52 2026 by rpki-client