Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: rokAqzyCVIM8C1ga4VC18we/1hH7zvxDftt4t3rNHis=
Subject key identifier: A9:8A:AE:6D:CE:03:AB:D1:64:A4:06:D8:6D:8A:1B:E4:2F:09:91:02
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 019D996303121B237FC49EE9000ABC011277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 172A
Signing time: Fri 17 Apr 2026 03:01:35 +0000
Manifest this update: Fri 17 Apr 2026 03:01:35 +0000
Manifest next update: Sat 18 Apr 2026 03:01:35 +0000
Files and hashes: 1: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: XU3Uun9xc5jIod4AWwITfzMKPyr/3pG7DiKFydfBvNc=)
2: deK62GymHjI7pPHou_DnpOMbHoY.roa (hash: Z9L1mrfYyQRlpKO8mVrybo46X8ByziZzKGq7WcbtlNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:03:12:1b:23:7f:c4:9e:e9:00:0a:bc:01:12:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Apr 17 03:01:35 2026 GMT
Not After : Apr 18 03:01:35 2026 GMT
Subject: CN=a98aae6dce03abd164a406d86d8a1be42f099102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:fc:dd:09:6c:7e:47:c5:09:31:42:ed:0b:
99:2b:46:71:b6:e0:ca:94:7d:e2:ef:03:07:ef:e0:
78:d8:33:d3:a1:d6:e4:cd:82:32:41:3b:1b:a2:8b:
04:6d:e6:2d:e9:ef:7d:3a:69:31:ee:86:33:22:1f:
01:21:0b:4b:3a:28:29:f6:2b:07:34:bf:7e:3e:d7:
6d:6d:13:3b:cd:68:02:7c:9c:8f:5c:76:a3:c4:fd:
f6:c4:31:79:10:98:1a:e0:79:87:1e:de:f6:5d:ab:
23:1e:dd:45:0a:30:13:41:2f:ca:81:1c:12:f5:f0:
f3:df:ca:ab:92:53:57:c6:f6:e6:07:38:f8:2b:0d:
70:5b:6f:7d:51:81:6c:77:a4:be:f0:4a:ad:9e:80:
cd:53:a8:73:28:a3:b7:21:1f:0c:34:24:41:86:71:
fe:2d:44:90:d7:62:bd:a0:97:28:1a:bf:e2:93:aa:
2e:51:66:57:32:be:11:44:d2:c8:4a:8f:a8:cc:93:
84:1a:96:05:db:54:6c:65:47:17:fd:89:ef:1b:76:
3a:89:c1:41:d0:c0:52:8f:3b:e9:ed:90:f2:6a:28:
df:c2:a2:45:c4:ee:57:7b:31:07:35:44:0a:11:8d:
f4:8d:52:e6:41:28:02:cf:cd:83:71:e1:99:55:bf:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:AE:6D:CE:03:AB:D1:64:A4:06:D8:6D:8A:1B:E4:2F:09:91:02
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b5:1c:0f:7c:cb:5a:e8:d6:c5:fb:00:a0:83:44:12:ba:6d:
31:91:bc:c1:be:30:7a:68:c3:ec:51:2c:5f:06:16:76:1b:d1:
66:67:5e:13:39:b4:1e:30:e6:00:0f:82:18:bf:33:c8:b0:c1:
5b:c9:2b:60:b5:52:66:6f:a5:94:78:94:dc:f8:a2:75:5a:ea:
d7:89:42:79:62:5a:3e:99:cf:07:48:67:ec:4e:2f:26:6d:47:
ed:cd:b8:a1:81:b7:49:5d:40:f0:10:52:5f:f3:f9:28:9a:3e:
b6:a2:14:34:70:3b:12:08:db:68:cc:07:32:de:dc:e7:0a:3e:
ae:a3:47:2b:2e:71:b4:ae:64:0e:e4:e5:3d:a6:7f:c0:30:b9:
7d:15:30:c4:05:e5:aa:6b:ba:f3:3a:17:82:da:b8:2f:4e:b9:
4c:eb:f4:20:09:33:67:2a:57:b3:f4:a2:f7:f3:17:76:6e:7b:
df:d4:f5:ea:e0:bc:4a:0c:31:8c:59:ed:ef:bc:45:04:9c:04:
c0:be:74:e9:fd:0e:85:c6:9c:70:73:d5:7d:e6:fc:01:07:e4:
b0:cb:ee:98:c1:3b:74:1b:f0:76:93:06:7a:a6:8c:21:a0:9c:
6b:07:89:aa:37:8e:cd:f9:52:61:7a:ad:f0:5d:ab:25:63:f5:
da:70:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:38 2026 by rpki-client