Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: JeeNFusmJQbdtJoAR9gvDZy3zoZnWBd+UTw9VGhHqBc=
Subject key identifier: 4E:14:C9:09:18:CA:1C:0D:DC:EA:6F:7B:E5:2C:01:7D:82:74:F9:85
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019D9B19DA50FFCB50941E21B7E97CBA5C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 1831
Signing time: Fri 17 Apr 2026 11:00:55 +0000
Manifest this update: Fri 17 Apr 2026 11:00:55 +0000
Manifest next update: Sat 18 Apr 2026 11:00:55 +0000
Files and hashes: 1: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
2: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: qz/0ID0Ns8C9rHuIDuTIiCI2gIDlzANPSm76tDMr0aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:da:50:ff:cb:50:94:1e:21:b7:e9:7c:ba:5c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Apr 17 11:00:55 2026 GMT
Not After : Apr 18 11:00:55 2026 GMT
Subject: CN=4e14c90918ca1c0ddcea6f7be52c017d8274f985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:0e:50:16:c4:fc:5b:ce:32:ce:77:63:86:
9c:36:f1:6d:26:e2:9d:6e:c1:27:2e:00:4a:96:99:
c1:6e:1a:9b:93:56:3d:ce:09:c1:b2:a1:2c:ff:b5:
10:be:f6:b8:ef:1e:de:2c:a0:5d:67:a7:94:bc:69:
2e:ac:ad:0b:f1:db:1e:19:2e:34:99:53:7f:20:5e:
8c:03:88:df:0c:42:7a:6f:36:b7:2d:36:bf:75:e6:
69:ed:3b:5f:71:f8:bd:bc:61:9b:1a:22:07:05:71:
91:29:e2:00:06:6a:78:7f:a5:9e:14:88:cb:fd:f7:
44:75:84:47:c3:52:cc:30:77:4e:4b:dd:e7:54:0a:
14:7a:1b:6f:37:30:e4:e8:5b:a7:ef:de:3d:28:03:
27:ef:17:6a:87:3b:3b:20:93:6e:5e:3a:99:a1:98:
57:60:ed:93:52:fb:81:93:55:59:bb:92:19:de:ba:
9d:5b:4f:c4:51:dc:a7:e1:48:e4:22:a4:0b:5a:4e:
a8:96:f1:07:af:c2:c0:66:52:14:2a:96:0f:68:28:
53:1d:3e:9d:c7:10:02:90:d0:f0:14:0a:20:df:4d:
af:8f:75:71:4b:b7:82:d4:7d:61:a2:ec:27:fc:ac:
09:8a:05:15:73:24:3b:b2:00:68:7f:14:8c:21:0c:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:14:C9:09:18:CA:1C:0D:DC:EA:6F:7B:E5:2C:01:7D:82:74:F9:85
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e7:86:0b:46:08:3c:f1:e7:41:c6:72:e4:62:6a:1f:a3:de:
b0:48:db:e1:f9:ad:21:c7:6b:be:cc:50:82:9b:db:cc:38:b2:
7f:ab:19:a8:70:69:45:4b:a8:34:b6:96:d4:21:11:6d:99:76:
81:4b:f6:cd:b8:1d:6a:20:b5:df:d6:fa:02:75:54:5d:fd:ae:
16:26:e9:0b:c7:d5:00:56:b7:44:39:9b:9b:14:6d:c1:9b:0c:
77:ab:a2:87:7f:0e:56:20:88:30:95:52:5c:3b:65:a0:a9:ba:
17:2e:2d:c7:2d:01:41:4a:32:b3:be:12:3d:34:a5:10:21:01:
17:cc:60:32:0b:b0:04:c7:d7:13:42:ad:92:c5:be:13:50:c9:
3e:03:a5:17:06:6e:43:c4:77:70:d0:e7:83:f2:e6:44:a7:37:
68:11:de:de:07:4f:a2:17:4a:b8:9f:2f:aa:3c:f8:44:6c:5d:
0c:76:7e:e7:1f:e8:71:0c:21:bc:8e:ec:85:f0:4c:e3:aa:01:
c7:19:8b:e6:f4:a9:d6:26:f3:aa:2c:6a:e9:7d:b2:be:86:71:
8a:29:33:35:e8:6f:72:97:41:96:7f:c3:68:c2:7d:a3:16:3f:
93:df:b9:f7:88:f4:74:1b:a5:34:79:5b:8f:ad:5c:92:31:d5:
b6:9a:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:49 2026 by rpki-client