Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier: 9jNfPfFI+SsCKHWG4thYk0Wq0auZCMbgI6K/8b+s7fk=
Subject key identifier: AC:EE:AE:9A:B6:1D:1F:D9:4A:B5:F6:02:D7:86:5E:A8:0E:AA:34:F0
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 019D992B9D704784AC779ED02C904E8E9420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number: 0AA3
Signing time: Fri 17 Apr 2026 02:01:05 +0000
Manifest this update: Fri 17 Apr 2026 02:01:05 +0000
Manifest next update: Sat 18 Apr 2026 02:01:05 +0000
Files and hashes: 1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=)
2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=)
3: PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa (hash: upIljczPhg0qz3Pzpmtl5kRlJn9GZ5N1pBXA6jY4G1g=)
4: Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa (hash: f+vgH/8lCAyoaopM+ARWem0PqsHCRHeZDcYhmCyBUow=)
5: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: DU8cepRHlPtTSo32JlR2u6poGYyWE01HfVzbCzC0Bmg=)
6: beCqMYhwCg21aSUTwrhNMW4LcEY.asa (hash: 1lmykIh7IPZhs4mpEd/DgaG6yCKrGTPv5ZzBaPKUw4c=)
7: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:9d:70:47:84:ac:77:9e:d0:2c:90:4e:8e:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Apr 17 02:01:05 2026 GMT
Not After : Apr 18 02:01:05 2026 GMT
Subject: CN=aceeae9ab61d1fd94ab5f602d7865ea80eaa34f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:4a:03:1b:18:7e:3a:e8:87:df:dd:da:d3:
57:7b:c6:06:3c:a1:53:b7:bd:ce:4a:3d:af:48:5e:
60:47:c6:c6:6d:b0:bb:e9:08:55:fb:ae:c3:16:f2:
7a:c9:71:d0:9e:ff:6f:fd:7d:b1:a1:df:8a:7b:9f:
27:f9:19:63:8c:40:ce:90:f8:9b:eb:10:d6:28:c1:
6f:3d:f2:49:ca:1f:68:c9:e6:b5:34:a8:56:75:3f:
ea:14:93:58:8a:05:36:61:cc:b9:b5:b0:a8:cc:df:
99:91:5d:af:1c:0b:9b:65:c0:7f:8b:04:49:2b:96:
dc:76:63:36:de:a4:d8:dd:a1:96:58:fe:5f:74:b3:
31:42:a1:2d:2f:f4:d6:0e:4e:0f:f1:35:29:26:18:
f9:16:bb:16:c9:72:71:1e:34:05:21:e8:22:b4:89:
6c:64:11:f9:68:43:4e:46:63:6b:12:9b:fa:2c:0d:
69:80:99:c9:0d:9a:2d:f8:75:4a:9d:da:49:e0:f1:
ae:eb:54:ef:c6:c4:36:0f:dd:c1:04:6b:13:8d:b8:
5f:ed:4e:9c:15:d6:5d:1b:98:1b:67:53:89:f8:a0:
9e:11:7f:50:ae:03:26:4c:27:7b:e7:66:b7:5f:9a:
b8:d7:19:d3:d0:e7:05:23:bb:17:21:4e:9a:5f:8c:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:AE:9A:B6:1D:1F:D9:4A:B5:F6:02:D7:86:5E:A8:0E:AA:34:F0
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:2e:c6:85:95:81:fa:10:9c:15:a6:22:d7:af:1b:18:b5:
ad:e7:39:6e:8a:31:ec:b5:68:4a:ab:7c:7e:bb:d0:33:0e:fd:
77:f9:4a:c6:b9:32:27:c9:31:53:9c:32:e8:a2:ed:b6:02:8c:
3f:96:11:20:87:7f:fc:6e:ef:da:ca:6b:ab:93:35:9f:d7:09:
99:75:d8:7f:2c:b6:38:06:61:b0:4c:01:5a:e0:51:d3:55:2b:
97:a8:50:27:25:4e:79:42:a6:73:49:f9:06:49:94:f4:fb:ac:
13:d3:e8:9c:07:b0:94:f3:24:d6:ed:ab:f4:cb:d3:42:79:83:
58:bf:d3:39:f1:40:60:9b:81:38:a3:ba:ae:3c:5f:5a:af:88:
de:50:32:6f:18:67:4f:35:da:d0:e1:c7:5d:bc:31:3b:21:d9:
f6:cc:5a:c4:04:e6:3e:6c:b1:cc:67:9c:32:f0:fb:27:63:ff:
8c:1d:d8:9b:4b:ae:6d:df:9d:8e:c4:7b:e3:5c:e9:f6:65:1f:
b3:a0:a8:84:21:7d:85:25:76:d0:d4:68:3e:32:a3:90:10:b3:
1a:18:4d:47:be:49:97:df:02:31:c0:be:86:b5:dc:e7:30:c8:
15:f5:98:da:89:e4:3a:12:61:be:97:49:fd:76:ff:fd:ea:52:
96:06:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:17 2026 by rpki-client