Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: MsTnRFyeEz+YEbeezN5LHKu7hLztvFwqvJlubIpXttE=
Subject key identifier: 08:3D:37:CD:D0:3C:D6:20:83:EF:72:3C:04:AC:9F:5C:66:93:1B:BE
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 019D9A74E1E9C47869449EAA969C742D1CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:44 +0000
Manifest this update: Fri 17 Apr 2026 08:00:44 +0000
Manifest next update: Sat 18 Apr 2026 08:00:44 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: xD74GHvNomylFLBDekS23OqaujcP81E4pdNABHCi/9U=)
2: o1zjZNlBpE66dvhTYzI4pj6m9jM.roa (hash: wVl4rNHZWCUbMyCjP/aG6EY9BIdfaxUELJ3NnDLrmak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e1:e9:c4:78:69:44:9e:aa:96:9c:74:2d:1c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Apr 17 08:00:44 2026 GMT
Not After : Apr 18 08:00:44 2026 GMT
Subject: CN=083d37cdd03cd62083ef723c04ac9f5c66931bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:3d:b1:21:e6:0d:70:02:61:1d:59:0a:35:
b5:65:d9:43:b7:96:e6:64:de:e3:08:cb:00:c9:66:
5a:4d:76:0a:0a:94:c1:43:01:88:35:9e:62:6b:fb:
02:5c:75:fb:8a:16:7f:88:b5:5d:3d:d7:2b:53:04:
ba:f8:be:e0:a2:aa:ad:05:eb:2a:13:6d:aa:e0:86:
74:ef:00:5a:0c:57:1c:c8:22:a9:d8:22:71:00:b3:
41:b1:07:17:0e:8a:86:0d:91:3b:67:50:49:ac:80:
83:b3:6e:1d:14:38:01:9b:c6:c6:85:4a:ad:af:4f:
7b:6b:db:4b:be:2e:3a:3c:39:eb:ce:cc:46:8c:3a:
3b:b9:38:98:85:91:29:cd:d0:98:bc:1a:2e:c1:75:
87:84:d3:2a:45:a0:52:a1:ae:be:77:16:24:f6:57:
43:27:8b:6b:72:58:b9:18:c3:11:f5:9d:90:20:cd:
14:90:5b:3d:d6:5c:52:cf:06:39:bd:cd:9b:ff:15:
f7:d3:71:32:90:90:51:36:b5:c4:36:bd:61:43:8c:
9f:d2:fb:c5:a9:d1:06:1d:87:d7:3b:31:92:80:5a:
61:dd:54:92:a3:8f:9c:ad:46:67:8e:f2:63:f9:4e:
8b:11:db:01:0a:f0:0b:81:05:7e:b1:d8:42:1e:af:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3D:37:CD:D0:3C:D6:20:83:EF:72:3C:04:AC:9F:5C:66:93:1B:BE
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:44:45:5b:ba:2f:94:50:81:95:ad:c8:da:70:df:91:1d:e0:
26:50:c2:6b:75:c7:0e:47:de:75:3b:a8:c9:98:4a:06:19:04:
3b:36:43:03:07:15:eb:2d:15:da:fd:d9:6b:79:25:2c:55:df:
4d:36:77:c8:63:f0:12:a7:1b:57:ab:29:a1:13:d9:9b:5e:d8:
8c:25:4c:d7:15:ca:6f:73:da:82:1d:38:6b:75:04:55:ea:f8:
50:60:d2:5a:f7:81:25:0e:ca:9f:65:5e:91:7a:5c:42:1f:98:
59:be:90:10:8d:72:29:0c:85:99:94:0f:07:f1:6e:df:7c:de:
b7:f8:d2:d5:76:b7:2d:c1:ae:b7:1c:f4:cf:1c:2a:fe:e6:f5:
c7:06:84:5e:76:4a:35:ef:ed:ae:a2:25:70:80:23:7c:1b:36:
f4:8a:6b:1a:21:87:d6:75:9d:25:26:59:ba:40:44:c4:c8:46:
d6:c0:e9:05:b6:d3:03:98:b8:77:9b:dc:df:77:03:cf:1f:65:
7a:8f:af:67:cf:f8:a4:0f:f7:e5:94:c2:fb:20:b7:43:b6:ce:
6d:ec:a2:d5:35:4e:ca:75:eb:ca:1b:8d:fe:65:2c:3f:6d:d6:
71:6e:ac:5e:84:28:4c:9e:f8:63:98:b8:2c:fd:55:06:4e:c5:
62:af:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:55:17 2026 by rpki-client