Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: fccURSwJTywPyF+5SuAlPgb93sTt0X/GSPP6wgciqHs=
Subject key identifier: 40:35:F3:8E:08:83:8E:FC:19:D3:E3:FE:1C:B4:6D:08:77:E6:6F:B5
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 019D99629D5EEB87C2C29457A50DDCB5B0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 17DB
Signing time: Fri 17 Apr 2026 03:01:09 +0000
Manifest this update: Fri 17 Apr 2026 03:01:09 +0000
Manifest next update: Sat 18 Apr 2026 03:01:09 +0000
Files and hashes: 1: 8MW5HqzxM8fWAkgdIF87Ez5R_jE.roa (hash: yqEz69K9RUBzU0ZL3wR6AByNl65m7OmG7mQS2PnAi1Q=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: AQsj3IUL9YqrX/FQtLXZN8EWSHl3uJpf90h6rDKd+eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9d:5e:eb:87:c2:c2:94:57:a5:0d:dc:b5:b0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Apr 17 03:01:09 2026 GMT
Not After : Apr 18 03:01:09 2026 GMT
Subject: CN=4035f38e08838efc19d3e3fe1cb46d0877e66fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:c7:e2:4c:ac:f4:69:dc:7b:b0:72:fc:85:
d5:6d:29:2b:4a:ad:dc:43:53:45:49:7b:49:c3:df:
e6:16:1b:7e:7d:35:60:51:08:6a:90:e0:b8:77:d9:
3c:fd:a1:2c:8b:cb:7a:3d:a7:ae:19:54:6d:1b:ed:
88:72:1d:aa:f4:20:87:61:b1:f4:c8:3a:b2:0f:04:
62:59:07:d2:fe:8e:1d:1d:52:33:89:2d:4c:b6:c8:
be:66:0f:c3:98:b6:04:2e:0a:c0:02:11:83:1f:46:
39:f9:fa:03:2c:88:d1:73:d8:4a:10:e9:ea:1d:56:
a4:c0:3f:4f:e9:a3:0d:3a:3f:10:c5:97:33:cf:e9:
d6:4e:34:31:3d:3e:92:c9:87:f2:71:5e:c4:4d:3a:
be:c2:7b:40:05:1f:8e:47:81:5a:50:d7:60:c1:67:
42:38:ad:2b:5e:fb:8f:89:2e:5a:6d:fe:6f:52:9a:
7c:dc:a8:d1:15:f1:38:7f:72:f8:d3:c3:6a:94:37:
0d:aa:f9:d5:e2:16:99:e9:69:53:31:8d:93:fb:e1:
6d:90:af:ed:13:91:45:3f:ca:92:28:0c:da:fc:13:
56:0d:3a:31:2c:e4:b6:d2:76:cf:18:75:97:45:81:
f4:27:b4:cf:ed:b4:30:64:ed:7d:10:14:bb:52:56:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:35:F3:8E:08:83:8E:FC:19:D3:E3:FE:1C:B4:6D:08:77:E6:6F:B5
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7d:95:28:94:15:ff:6a:4f:ce:ca:62:c4:b5:2d:df:07:10:
d1:b3:f3:85:cd:af:c8:50:43:00:71:98:68:9c:bb:e7:c3:e2:
68:4a:50:ae:8b:49:00:41:da:21:6d:85:e6:82:6b:dd:06:00:
92:66:17:0c:d0:91:61:33:5e:43:36:6d:af:a3:1f:6d:6d:21:
59:ab:f8:1c:4e:2f:38:ab:68:b5:ab:0f:16:ac:31:5c:54:80:
4d:d5:eb:f3:b6:a4:c1:db:68:9e:f5:47:b9:a4:98:31:52:a0:
27:7e:3e:fd:81:24:b3:1a:fd:a1:0a:79:e6:bb:ad:93:36:b5:
b3:ed:d4:ee:8e:48:73:78:1c:8e:be:40:bf:87:09:05:2f:dc:
ce:8c:e9:b9:0b:d7:d1:4c:67:07:d4:2d:52:7a:44:e5:24:2b:
fb:69:91:cf:27:2b:cb:1f:4c:0c:f7:79:f2:51:b4:03:95:fd:
e0:58:89:2c:1a:fe:c4:e6:ca:2e:f8:80:04:12:ff:e1:36:b9:
fa:91:5d:18:07:f2:06:fe:e4:59:10:11:d2:df:22:92:82:21:
d3:40:66:fd:89:68:44:9b:c6:28:99:c9:59:c5:32:10:d0:50:
a9:10:d9:c0:4e:7b:5f:55:e9:3a:7b:5e:a6:d7:0b:70:6f:e4:
de:f3:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:50 2026 by rpki-client