Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: GNVDSvZdlQuyLY+sGSV6NkKNmqeoldfHImzxkDPlqYE=
Subject key identifier: FD:0A:EF:E1:8A:31:5E:09:6E:0D:53:C0:6D:40:D0:23:F7:0D:F1:FF
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019D9AABB3BA702762B66D47DAB12A9FF825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0E11
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: I8gEZvOjGTEE5np9q4+kf2t3PU2wfsOsBZZ9cswbqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b3:ba:70:27:62:b6:6d:47:da:b1:2a:9f:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=fd0aefe18a315e096e0d53c06d40d023f70df1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:bd:92:90:e6:96:3f:79:47:47:78:db:01:
bf:5c:1b:21:c6:19:67:a9:b8:84:e6:ca:4c:3a:0b:
ca:66:b9:de:3c:5e:fc:ca:4c:25:d5:e7:40:10:bc:
12:57:d0:5f:5a:68:41:c6:23:e1:ea:89:00:69:32:
d6:02:99:b8:88:69:b5:5b:71:70:76:b8:ee:f4:3c:
63:e2:77:e4:17:11:d8:fd:fd:1a:0b:d0:93:c4:4a:
81:05:bb:6d:1c:02:ce:f4:a6:3f:32:a8:cd:f6:62:
c2:e1:e0:4e:93:81:b4:a7:d8:c6:83:53:22:3c:e0:
3c:19:88:b4:73:10:a2:bb:cd:22:77:83:c9:10:aa:
c5:22:04:55:99:a0:23:7a:19:6f:dd:e9:71:2c:ad:
35:24:3d:63:3e:24:15:b6:7e:11:db:da:65:36:e0:
2f:e5:26:40:73:6a:b8:f9:e6:c5:49:2a:61:22:ce:
8e:6f:c8:8d:67:f2:87:0b:68:ea:b3:15:80:19:c8:
69:2a:32:73:d7:fe:39:c5:94:e8:e6:ec:f8:40:a6:
94:42:d5:32:f0:0b:c6:d4:96:9e:98:4f:f9:87:71:
3d:38:ec:35:37:89:18:38:0f:1d:f1:9e:ba:88:3a:
24:fc:47:1b:b9:d2:d4:3e:ad:68:0d:7b:45:f3:8f:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:EF:E1:8A:31:5E:09:6E:0D:53:C0:6D:40:D0:23:F7:0D:F1:FF
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:12:ae:22:5e:2b:f4:db:42:4a:c5:05:b4:11:5a:fa:9e:7a:
1f:4e:06:ce:60:40:76:a6:79:0a:2d:f3:35:67:ce:d5:2a:62:
58:71:ac:b4:36:9d:00:32:6d:50:54:8e:9f:fe:8b:61:50:03:
3b:38:6c:89:d8:d5:5b:a2:f2:32:e6:37:65:d0:01:a3:72:d7:
e8:8e:d3:79:9c:3e:b0:db:90:3e:ef:16:fe:d6:73:81:52:d3:
5b:9c:2d:42:d9:ab:00:d5:83:9c:b9:4b:21:6b:71:77:bd:86:
1a:d1:37:8e:49:f3:45:32:b4:97:e9:f2:8c:93:f9:47:8b:0c:
86:cf:5b:d5:c5:d4:64:ff:8f:02:ca:46:db:2d:1a:2b:49:c5:
91:01:8f:df:ee:13:97:71:66:f0:f6:99:63:dc:2a:25:d3:ee:
90:45:64:a3:d6:27:4d:7d:1b:ec:6c:6b:71:8f:0c:e2:2e:cd:
35:5c:a2:3f:d8:4a:85:b2:5c:5c:a6:de:b3:d0:75:67:96:3b:
3a:96:4c:d0:95:0f:3b:35:5d:cc:38:65:cd:65:32:31:cf:29:
df:67:af:05:cb:61:77:f8:fd:9a:94:89:3a:ac:e1:74:cf:9b:
6f:61:06:7f:6f:11:35:54:88:9c:f2:e6:f7:2c:0a:14:de:8c:
c9:97:ab:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7O6cCditm1H2rEqn/glMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz
NDg5YjAwHhcNMjYwNDE3MDkwMDM3WhcNMjYwNDE4MDkwMDM3WjAzMTEwLwYDVQQD
EyhmZDBhZWZlMThhMzE1ZTA5NmUwZDUzYzA2ZDQwZDAyM2Y3MGRmMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQS9kpDmlj95R0d42wG/XBshxhln
qbiE5spMOgvKZrnePF78ykwl1edAELwSV9BfWmhBxiPh6okAaTLWApm4iGm1W3Fw
drju9Dxj4nfkFxHY/f0aC9CTxEqBBbttHALO9KY/MqjN9mLC4eBOk4G0p9jGg1Mi
POA8GYi0cxCiu80id4PJEKrFIgRVmaAjehlv3elxLK01JD1jPiQVtn4R29plNuAv
5SZAc2q4+ebFSSphIs6Ob8iNZ/KHC2jqsxWAGchpKjJz1/45xZTo5uz4QKaUQtUy
8AvG1JaemE/5h3E9OOw1N4kYOA8d8Z66iDok/EcbudLUPq1oDXtF84+NeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0K7+GKMV4Jbg1TwG1A0CP3DfH/MB8GA1UdIwQY
MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt
MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1
LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxKuIl4r
9NtCSsUFtBFa+p56H04GzmBAdqZ5Ci3zNWfO1SpiWHGstDadADJtUFSOn/6LYVAD
OzhsidjVW6LyMuY3ZdABo3LX6I7TeZw+sNuQPu8W/tZzgVLTW5wtQtmrANWDnLlL
IWtxd72GGtE3jknzRTK0l+nyjJP5R4sMhs9b1cXUZP+PAspG2y0aK0nFkQGP3+4T
l3Fm8PaZY9wqJdPukEVko9YnTX0b7GxrcY8M4i7NNVyiP9hKhbJcXKbes9B1Z5Y7
OpZM0JUPOzVdzDhlzWUyMc8p32evBcthd/j9mpSJOqzhdM+bb2EGf28RNVSInPLm
9ywKFN6MyZermQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:47 2026 by rpki-client