Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: 2U7P/1vuWm9s2geo+vO2aM9NqairtYQUJVfTSv5acyY=
Subject key identifier: 57:AF:83:DD:C2:64:29:89:DD:FC:08:12:4C:0C:EC:68:80:93:1D:B1
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 019D992B68D188905065F7F9896C75140860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 0C6D
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: C0FSud6nu0_Eyfo1MhLrfHdFT0M.roa (hash: tqmfcAHZDKuD6gEpt3xtWJydvSkzRm2I6adf38pIDlc=)
2: GkQO5rcPfgn2w75NaD9qydi-Rgw.roa (hash: p26ROjD8Y6lyqnpvxzkXIxQnFLDkFbszO+JOYh9DarQ=)
3: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: DGE099ZuJVsMYHRh5bEhusw3jnNP5SYSYvmCkpoTD3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:68:d1:88:90:50:65:f7:f9:89:6c:75:14:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=57af83ddc2642989ddfc08124c0cec6880931db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:fe:86:f6:18:5c:e4:bd:3d:18:be:47:96:
1f:28:f6:06:12:ec:bd:79:e3:e6:8b:10:68:7e:7c:
1c:7c:56:91:69:a2:07:72:94:63:91:18:a4:b3:79:
e0:e8:a6:0f:8c:d7:90:bc:71:56:bb:08:6c:12:f4:
5c:9d:e0:7f:04:64:d4:9b:7b:99:ca:32:b4:b1:3a:
a3:3d:55:89:62:b5:c6:dd:98:d9:b6:8f:ca:bc:80:
45:90:f0:99:a9:19:49:6d:b0:28:59:67:1f:55:af:
3b:d1:72:1b:8c:b7:3b:b8:25:83:e0:45:0e:f1:dc:
5f:7d:3a:e3:c2:84:02:e6:1f:fc:09:e2:07:19:96:
37:e1:61:30:15:5c:5e:b8:7a:f6:b0:56:09:20:22:
27:1e:10:bf:88:1d:0b:97:d8:03:38:30:c1:ed:1e:
60:eb:c2:f7:b2:45:8d:60:13:81:99:46:2b:b8:8e:
6d:a1:89:28:5e:22:bb:4b:5e:0c:d3:4e:f8:02:58:
86:0d:da:ee:d8:07:4d:76:f9:bf:98:1c:90:29:c8:
bd:53:90:b1:95:3e:75:66:60:62:ed:58:65:a1:e2:
83:6e:ba:d9:bb:59:8c:db:80:60:63:50:e7:41:8d:
50:5b:9d:c4:2e:40:43:26:4f:8c:0b:41:e8:5f:d2:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:83:DD:C2:64:29:89:DD:FC:08:12:4C:0C:EC:68:80:93:1D:B1
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:c3:e7:64:3e:c3:5c:02:40:75:47:69:6a:15:5e:b0:67:
9f:8f:ba:3b:1f:32:6e:ff:59:ea:76:5e:2d:6a:b9:71:0d:92:
53:78:9d:77:1f:ee:4b:09:7a:7e:18:cc:25:25:fa:70:f8:e9:
92:f6:e3:38:b3:cb:2e:f4:8d:17:27:cc:5f:0b:17:33:4d:ca:
19:c6:20:45:05:06:7f:e9:b1:04:84:00:7a:36:c5:3e:9e:7a:
eb:76:67:4b:cd:e8:aa:fd:7e:77:74:67:92:84:05:75:e0:2b:
da:01:94:de:d6:f5:c8:3e:2c:70:5a:e5:41:09:3e:84:a7:69:
e8:cb:f9:ac:0d:86:00:72:70:7c:c4:58:2c:d5:92:5c:1b:bd:
58:b1:ef:bd:5c:65:98:4c:66:dd:79:bc:ca:a0:50:cc:ce:5b:
f8:54:20:2c:28:21:d7:e6:41:94:44:8f:59:c9:14:f4:f4:1a:
ab:20:60:ea:44:ed:42:46:7d:9b:02:37:77:04:c8:47:2b:f2:
60:5e:7f:06:f2:0b:f9:50:28:58:69:f2:0b:2c:d9:21:3b:ff:
a7:1b:51:a3:6d:ff:a9:33:fb:53:c0:3a:be:66:db:75:47:34:
74:a7:23:fd:f7:67:3e:e4:61:92:b8:42:08:0f:2d:49:12:26:
90:cc:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:20:08 2026 by rpki-client