Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: 0UzWu2U4eW+D0/rz1aNzUL5lTA98/NhwqOR6kPR2Z4o=
Subject key identifier: AA:D8:EB:BD:A6:03:3D:45:FC:36:88:99:2F:66:AA:1F:4F:12:FA:94
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 019D9962AFAA29DA7F0B515F8D37709A0387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 0845
Signing time: Fri 17 Apr 2026 03:01:14 +0000
Manifest this update: Fri 17 Apr 2026 03:01:14 +0000
Manifest next update: Sat 18 Apr 2026 03:01:14 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: OKUvCNAZpsxmZxCGUmjmDuu0oRCC2Wh05EfBp1Z0XJ0=)
2: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (hash: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:af:aa:29:da:7f:0b:51:5f:8d:37:70:9a:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Apr 17 03:01:14 2026 GMT
Not After : Apr 18 03:01:14 2026 GMT
Subject: CN=aad8ebbda6033d45fc3688992f66aa1f4f12fa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:05:00:88:69:95:5f:f3:89:49:e0:31:29:
87:8a:85:68:aa:7b:60:63:54:99:99:0d:bd:17:30:
14:a5:6e:38:57:74:f5:5d:69:2d:b6:0d:17:98:b2:
23:2e:3f:41:b0:5d:8a:79:44:f5:0a:be:4b:1c:63:
f4:21:4f:c6:35:f4:13:82:42:d5:08:03:54:45:76:
ad:31:a9:2c:de:f5:4e:e0:74:e1:68:13:24:91:3d:
e4:75:8f:46:9e:7a:8f:fd:ff:be:7c:0a:19:a5:ea:
2c:c3:f7:66:79:e8:5d:3f:f9:07:41:7a:9d:8b:20:
02:68:08:1c:5b:98:67:0b:c5:e7:a5:33:ff:55:8c:
0d:db:eb:62:41:93:77:27:39:bf:e6:09:8c:6f:b6:
1c:e2:d1:2c:bf:83:00:48:ab:d5:fe:95:40:08:77:
bd:d1:c2:aa:49:e0:f6:91:e7:95:a0:b8:4e:bc:1b:
82:7b:df:f6:de:24:6f:d4:d3:c7:fb:eb:0d:c5:af:
c6:38:66:5c:bc:61:31:74:4c:46:f8:03:e4:55:f6:
74:f8:5a:2e:02:36:ef:42:c5:f0:e1:94:4f:c2:9f:
d9:15:38:f1:dd:b4:b6:62:26:fe:f0:0d:4f:c8:0e:
ae:09:05:f4:e5:2e:23:c5:e1:06:fa:3b:b8:d4:10:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:EB:BD:A6:03:3D:45:FC:36:88:99:2F:66:AA:1F:4F:12:FA:94
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:55:33:0e:f5:bc:2d:55:e0:1f:68:b5:6a:8a:c8:e0:24:
89:b8:a5:eb:26:24:8f:c9:ec:b6:96:f8:b4:c1:66:76:ab:e7:
6b:dd:7e:ed:d1:37:02:f4:73:36:c8:8d:f0:85:9e:b1:e7:18:
5b:aa:a6:09:09:ee:81:e7:41:c1:6e:25:e7:40:d2:02:15:21:
35:71:07:2b:08:47:bf:0b:ae:89:c6:12:94:aa:11:87:a6:15:
c4:d7:58:0c:ef:ce:12:30:4a:b3:16:0a:80:60:07:8f:4b:34:
df:e6:1d:66:8b:da:13:68:fb:e7:16:04:6a:f4:9a:82:85:21:
eb:ce:5d:b1:f7:66:8d:38:a9:c8:32:39:c5:d2:a8:51:e0:74:
db:87:ab:fc:2f:f3:0c:f7:0c:df:fc:70:56:80:d3:6c:de:a4:
93:5b:3c:da:19:6d:1d:93:c5:e1:83:80:4c:90:76:1f:52:ea:
6e:8b:c2:62:c1:84:af:38:a6:59:90:72:cb:17:08:0d:de:b5:
83:40:4a:86:00:e6:de:89:84:21:fa:c6:b2:27:58:57:09:71:
4a:02:bb:52:4e:20:a3:43:71:92:67:35:67:54:fd:fe:9e:3c:
e7:3f:0f:76:2d:8c:00:62:44:6c:14:01:8b:66:a6:75:e9:e4:
80:6b:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:07 2026 by rpki-client