Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: OKolSMkOxnV9hEDloxIRgOfeRlAfaJkobJU8ZbBuYhE=
Subject key identifier: F4:0D:17:EB:B1:48:2A:D8:BC:F8:D7:F5:03:A0:96:88:19:EB:15:F3
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 019CADC7715FEB7F051266BC0059DE115B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 1761
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: 8MW5HqzxM8fWAkgdIF87Ez5R_jE.roa (hash: yqEz69K9RUBzU0ZL3wR6AByNl65m7OmG7mQS2PnAi1Q=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: GaGyDid75D+2Ys9HFHhtkVtdT3tlf5OHX4qbAV+C+8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:71:5f:eb:7f:05:12:66:bc:00:59:de:11:5b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=f40d17ebb1482ad8bcf8d7f503a0968819eb15f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:2b:ba:7d:8a:05:5a:e6:30:44:95:10:13:
1d:50:b1:51:aa:3f:f5:62:28:93:c3:64:d2:9f:77:
ef:96:8a:5a:e1:b3:70:5c:ba:07:4b:38:a4:19:92:
ce:f2:fa:17:89:cd:bf:27:5a:a4:7e:4b:8d:78:0d:
c6:38:6a:e5:9c:0d:9a:eb:85:45:72:91:20:e3:c4:
94:a1:15:20:d8:80:0e:96:ad:53:ba:c7:ac:03:85:
47:7b:75:09:4d:1b:63:88:cc:3e:5a:e3:f0:5f:16:
da:43:37:a1:a8:94:82:22:75:a3:1f:7f:98:52:30:
76:7c:f9:72:d2:7a:e6:cd:c6:e5:0e:a8:62:98:71:
93:78:68:44:55:39:54:b1:24:8b:02:2d:1f:5d:87:
68:b6:c4:35:2c:b7:5e:e8:49:86:cd:67:3a:4d:67:
dc:fe:82:ec:1b:72:a9:de:3a:3a:52:a2:63:57:a7:
d8:fc:ee:55:bd:ce:98:da:bb:18:4c:fd:ed:64:48:
59:62:a7:d4:05:a4:6a:7a:2f:64:8f:72:b0:e6:8b:
cd:66:5a:f3:90:98:80:d0:e8:20:f6:bc:76:95:74:
ca:96:85:d4:13:e0:82:72:60:86:c0:aa:6b:10:f0:
88:50:c8:f7:64:d0:77:6a:d6:cc:7b:00:43:e0:7d:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:17:EB:B1:48:2A:D8:BC:F8:D7:F5:03:A0:96:88:19:EB:15:F3
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:8f:42:f5:b7:73:d3:ec:9f:7d:01:22:d6:0f:b8:bd:53:
5e:77:91:83:40:04:8f:16:c3:c8:62:70:e5:71:79:e4:db:5f:
9e:23:9a:88:22:b6:d8:86:11:9d:76:51:fa:ac:65:13:0b:2f:
47:e5:21:71:c5:6d:53:08:28:36:a3:8b:71:59:91:54:2b:3e:
a6:4b:9e:3a:a3:be:e6:7b:c6:91:f5:7b:10:63:03:0b:07:52:
ca:a0:a0:9d:6c:f0:60:ca:70:b0:0b:10:2a:00:01:2b:6b:33:
40:cc:54:f1:f6:d7:1a:f5:e0:a0:4e:9f:75:f9:4a:2b:ac:26:
69:7d:9e:c7:39:46:c9:08:b2:ab:a5:69:17:78:5a:c5:a0:8a:
4f:99:83:15:08:e5:5b:2d:f6:98:b8:14:cd:60:aa:3c:54:e3:
91:30:39:22:46:70:f8:5a:fa:f6:63:bf:82:a3:bf:f1:c3:2e:
6c:ba:87:14:06:e6:40:0d:81:c8:59:78:38:ac:11:05:d0:86:
d4:64:92:4a:e6:b0:2c:d7:6a:c4:0c:17:3f:25:46:e7:a7:6a:
ae:df:20:9f:7b:e0:23:9e:8a:ae:28:f8:64:f4:23:74:6c:13:
2c:4e:8f:12:ec:b7:df:8e:a0:e4:c3:0c:1a:7b:d3:d3:79:5d:
3c:f2:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:47 2026 by rpki-client