Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier: nTDL3W9tJ7J0LXrZ7kvxcR1CmdzI9lYSQIaW0GvM/AQ=
Subject key identifier: 04:80:56:81:A0:9E:A5:C9:CF:FF:AE:9D:CC:C9:DF:F3:62:4C:57:8C
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 019D97E1FAA50F9754BA535D8137AE6D3315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number: 0D23
Signing time: Thu 16 Apr 2026 20:01:02 +0000
Manifest this update: Thu 16 Apr 2026 20:01:02 +0000
Manifest next update: Fri 17 Apr 2026 20:01:02 +0000
Files and hashes: 1: ISoN8Hz1Tt-g6dokZBe32zhY29I.roa (hash: jqVnvsymB8ypbwPu5QGw3Kqpgjs5LT+P+1zvgA/xIZg=)
2: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: PMAFASuuk5P6hf3279Hb2wsbkSPGBIFfFDadoUnWiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:fa:a5:0f:97:54:ba:53:5d:81:37:ae:6d:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Apr 16 20:01:02 2026 GMT
Not After : Apr 17 20:01:02 2026 GMT
Subject: CN=04805681a09ea5c9cfffae9dccc9dff3624c578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:94:68:bb:c3:a0:6b:14:4b:d7:7b:af:89:
a8:c0:d7:ef:5e:56:e0:8c:51:3c:b5:12:44:7e:07:
3e:92:53:bf:8d:cb:02:cf:76:4d:41:52:90:9e:0d:
a9:2d:98:8e:53:95:f3:16:22:d6:d0:2b:fb:af:26:
43:d8:da:8a:48:3b:68:18:99:a2:2e:df:f2:13:06:
9c:7b:8c:44:22:06:b4:07:9b:a4:68:46:ec:44:ac:
08:03:95:ff:05:e4:81:3e:b7:e5:66:85:6f:ca:7a:
06:2a:7a:40:95:e2:1c:3f:64:fd:4f:47:4c:fe:b7:
d3:15:e3:67:df:c0:57:f3:b0:63:fa:8a:24:f1:b9:
b4:32:1d:7b:f6:57:a5:87:2b:24:fb:09:3e:11:1d:
a1:5c:d7:fa:89:f4:21:8a:ed:38:70:89:1c:af:a2:
59:f4:6a:d4:8d:5b:17:17:38:ff:9f:fe:de:24:10:
92:93:cb:11:e6:61:de:50:dd:cb:56:7d:9c:a7:95:
53:ae:6b:4b:16:d7:2c:4a:6c:01:fd:78:84:cf:1d:
a5:91:52:20:c6:2a:e8:b0:6c:85:80:e5:59:c9:96:
09:42:02:25:6c:07:85:73:f9:59:cd:3f:a5:3d:5f:
33:1f:a9:61:22:87:0d:22:c6:20:a7:7e:35:cd:35:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:56:81:A0:9E:A5:C9:CF:FF:AE:9D:CC:C9:DF:F3:62:4C:57:8C
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:42:af:4e:9d:ec:e4:ec:30:46:a8:cd:e0:f1:ab:0d:26:
1c:d9:31:d9:2b:93:5b:b5:e9:f5:a8:a2:1a:9b:8c:34:15:a2:
35:5b:2b:7e:3c:74:6f:51:d8:c2:5f:74:dd:9a:49:2e:a7:c4:
3c:94:7f:70:69:73:12:10:e9:0c:68:db:76:47:63:7b:e5:e0:
92:db:4e:d5:4b:36:90:15:d8:61:5e:31:e5:34:f8:63:1a:b1:
12:c7:04:b7:6c:15:64:14:19:96:39:c7:a4:fd:27:9e:0e:94:
6e:3f:be:c8:46:0e:bc:88:2e:46:e0:8a:e0:d1:0a:38:a3:d5:
a7:8c:22:c3:72:37:7e:02:98:89:3a:7c:50:94:b7:52:30:44:
e6:64:31:87:85:5a:32:ff:bd:33:3e:db:7b:cd:7d:b7:10:16:
0a:3c:6d:f3:f6:d5:83:c4:e0:bf:e3:ad:fc:61:15:41:b3:ad:
0b:1e:26:5b:98:54:60:04:4e:cf:c8:e0:a5:02:93:a7:a9:1d:
9a:58:f8:cb:e0:0b:b2:bb:7b:bb:93:b9:64:c4:83:9b:a8:67:
d9:4e:c9:87:cf:fb:0e:1e:e3:0c:c7:96:73:04:60:4b:2a:da:
81:23:4e:19:ce:96:bd:a4:9d:f2:63:84:3b:76:1f:a8:02:01:
09:fb:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:29 2026 by rpki-client