Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: eZTWHTCCvv5Zgzcc4h0jCdF9T2HodW+X1lHfFcZzGuY=
Subject key identifier: 0B:AB:A0:B8:40:5A:A0:E6:48:C6:6D:B4:A2:9A:1F:BB:A4:17:D0:6A
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 019D9B19BA0B59D2C9F521223B9C80E0F43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0AA1
Signing time: Fri 17 Apr 2026 11:00:47 +0000
Manifest this update: Fri 17 Apr 2026 11:00:47 +0000
Manifest next update: Sat 18 Apr 2026 11:00:47 +0000
Files and hashes: 1: 3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa (hash: Auq6dYW1IbUZ8oYiw7xCvq9559uK3oeBaCd765WHPJA=)
2: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: e1fs2S79s0OjVUX3CIzlWRiQ9lG28MaIgbK328etkIg=)
3: yuN29w4l_cl-IkkGgslbzfGqDe4.roa (hash: sMZJIkJQSxOhfVvEO/9QeKqeZ75CwlugDT+33MJ4iW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ba:0b:59:d2:c9:f5:21:22:3b:9c:80:e0:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Apr 17 11:00:47 2026 GMT
Not After : Apr 18 11:00:47 2026 GMT
Subject: CN=0baba0b8405aa0e648c66db4a29a1fbba417d06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:bd:a6:2f:b2:aa:c2:3c:75:a8:0f:84:31:
fd:7a:b2:8f:b8:ed:31:3f:b1:78:c0:3a:0a:db:f2:
23:0f:f3:0a:e1:56:29:f8:88:44:1c:21:6b:9d:08:
22:12:0c:37:cb:dc:84:af:38:17:fd:33:52:8f:e7:
f6:99:1c:c8:6b:2c:d0:79:05:3d:7b:8d:4b:03:e0:
9b:07:c4:57:a3:64:49:e2:d5:33:9c:cc:ee:3a:91:
72:1f:25:a4:9b:db:a4:c4:97:b6:d7:89:5d:a9:d8:
c7:00:14:3f:64:db:0a:86:41:a9:bb:9a:07:c2:f1:
5b:64:03:37:07:22:9b:5c:bc:c0:98:05:cd:dc:85:
1c:59:35:4b:8e:78:69:19:00:13:7d:58:b7:fd:fe:
fe:ff:71:57:35:8e:cf:5f:a5:66:fe:5a:4f:ed:f8:
cc:6c:3b:8e:6f:a9:7e:70:65:a5:30:c4:b0:29:8e:
09:59:0c:66:55:23:47:86:77:69:b7:2a:fd:a8:9e:
ff:bc:2e:6a:5f:d4:e4:43:00:2b:6f:eb:ec:b4:da:
43:85:ee:ac:d2:fb:3c:60:3c:ee:c3:3c:e5:75:91:
1f:10:7a:1e:e4:d6:12:18:ad:99:f8:5c:d9:bc:48:
5c:ad:da:92:61:08:8a:f1:5a:3e:03:01:b5:b5:fd:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:A0:B8:40:5A:A0:E6:48:C6:6D:B4:A2:9A:1F:BB:A4:17:D0:6A
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5a:12:ce:3a:01:57:59:16:20:c5:17:8d:6e:96:8b:2d:c7:
e8:8c:c0:f4:71:22:74:9b:99:86:a0:9b:37:90:42:b1:8d:da:
5d:4a:8a:3d:f8:bf:ee:8d:43:be:4e:60:20:da:e2:82:fb:f4:
6f:40:36:ab:18:d0:f7:5a:5b:c9:29:98:02:2a:b2:12:b9:7f:
e9:f9:e5:b0:78:4f:6a:67:b7:df:4e:7c:18:e7:ea:bf:dd:38:
9f:2d:6a:c8:5a:ca:71:19:1b:94:09:25:10:a1:83:0c:67:11:
c4:1c:97:e2:be:41:09:9f:d1:1f:41:e6:07:60:c7:85:0d:72:
98:6c:20:2b:ff:2f:ec:53:02:96:3b:62:1b:32:95:75:84:b6:
03:b8:69:ed:9d:c0:a6:c7:34:02:59:c6:74:2a:64:f9:2f:05:
f6:9f:4e:9a:1e:2c:f1:ee:2b:2c:d8:3e:0d:e8:e2:00:bf:85:
cd:a4:9f:d4:52:e7:a2:94:de:31:31:13:ef:b4:1d:28:aa:a8:
4c:e5:68:78:d4:42:ea:4e:53:a8:2f:83:c1:4f:65:1f:ae:28:
2e:63:c3:a3:ee:0b:be:85:fb:e0:44:fc:79:39:54:c8:12:bd:
18:9e:1d:b9:0a:ef:ef:0b:d0:87:33:4b:b2:fc:62:cb:c2:da:
17:d7:0f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGboLWdLJ9SEiO5yA4PQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx
ODk0MDMwHhcNMjYwNDE3MTEwMDQ3WhcNMjYwNDE4MTEwMDQ3WjAzMTEwLwYDVQQD
EygwYmFiYTBiODQwNWFhMGU2NDhjNjZkYjRhMjlhMWZiYmE0MTdkMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMm9pi+yqsI8dagPhDH9erKPuO0x
P7F4wDoK2/IjD/MK4VYp+IhEHCFrnQgiEgw3y9yErzgX/TNSj+f2mRzIayzQeQU9
e41LA+CbB8RXo2RJ4tUznMzuOpFyHyWkm9ukxJe214ldqdjHABQ/ZNsKhkGpu5oH
wvFbZAM3ByKbXLzAmAXN3IUcWTVLjnhpGQATfVi3/f7+/3FXNY7PX6Vm/lpP7fjM
bDuOb6l+cGWlMMSwKY4JWQxmVSNHhndptyr9qJ7/vC5qX9TkQwArb+vstNpDhe6s
0vs8YDzuwzzldZEfEHoe5NYSGK2Z+FzZvEhcrdqSYQiK8Vo+AwG1tf2zMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuroLhAWqDmSMZttKKaH7ukF9BqMB8GA1UdIwQY
MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt
Y2IxNjhhZmRiMzQzLzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz
LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1oSzjoB
V1kWIMUXjW6Wiy3H6IzA9HEidJuZhqCbN5BCsY3aXUqKPfi/7o1Dvk5gINrigvv0
b0A2qxjQ91pbySmYAiqyErl/6fnlsHhPame33058GOfqv904ny1qyFrKcRkblAkl
EKGDDGcRxByX4r5BCZ/RH0HmB2DHhQ1ymGwgK/8v7FMCljtiGzKVdYS2A7hp7Z3A
psc0AlnGdCpk+S8F9p9Omh4s8e4rLNg+DejiAL+FzaSf1FLnopTeMTET77QdKKqo
TOVoeNRC6k5TqC+DwU9lH64oLmPDo+4LvoX74ET8eTlUyBK9GJ4duQrv7wvQhzNL
svxiy8LaF9cPDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:36 2026 by rpki-client