Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: p6Z8A2tBJpo8ZRb/NPAzbdBTyQfHIVoe4kTfZPc0Gj8=
Subject key identifier: AA:56:B7:E0:CE:88:C5:EB:D5:26:E2:35:62:8D:72:D2:5E:F9:5F:E6
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 019D99D048E50D7EC824C474EFAC09F87610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 0625
Signing time: Fri 17 Apr 2026 05:00:57 +0000
Manifest this update: Fri 17 Apr 2026 05:00:57 +0000
Manifest next update: Sat 18 Apr 2026 05:00:57 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: QvUqg9x6SLkSO+z2NY0wmepvIVnLGYgmQff7pyHJzQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:48:e5:0d:7e:c8:24:c4:74:ef:ac:09:f8:76:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Apr 17 05:00:57 2026 GMT
Not After : Apr 18 05:00:57 2026 GMT
Subject: CN=aa56b7e0ce88c5ebd526e235628d72d25ef95fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:23:da:1f:24:c3:c2:f5:48:5d:b2:1f:d3:
c5:cf:3e:6c:6a:07:2a:69:18:7d:fc:42:56:86:25:
4f:71:82:cf:59:bc:89:24:fb:38:ec:43:0c:82:af:
b4:8a:0d:54:83:a5:fc:85:a6:d5:51:80:57:4f:7b:
a7:9f:42:40:4c:53:6b:4d:1f:23:58:dc:d2:7a:df:
86:15:1f:6d:91:69:71:7f:7a:3d:51:95:a4:86:1f:
29:d4:13:55:97:83:8c:b7:a9:8e:43:1c:2b:0b:93:
9b:e0:1c:7a:04:57:bd:51:e2:bb:10:54:8c:cb:0b:
fb:21:36:e4:48:e5:16:85:a0:3d:9f:6a:16:cf:46:
d1:7e:f5:02:f8:7b:c8:21:32:26:58:55:70:7a:8d:
03:df:3a:56:89:81:aa:f6:bf:ef:31:99:e5:51:16:
e8:7d:6e:bd:8e:fe:6a:87:40:ad:a2:81:1a:0c:c7:
c4:6f:30:83:d4:43:b4:30:50:73:68:a7:d6:5a:2f:
d9:86:77:f8:53:ad:1f:b9:0a:d5:5c:fd:21:22:c5:
3f:fa:3a:4a:ad:77:2c:13:db:fc:52:24:09:07:e6:
44:0b:14:69:f3:1f:56:dc:f5:a9:cd:3d:83:8d:1e:
cc:d1:85:e0:9d:d2:fd:51:4e:9f:c8:eb:bf:96:ce:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:B7:E0:CE:88:C5:EB:D5:26:E2:35:62:8D:72:D2:5E:F9:5F:E6
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d4:f8:d3:77:23:61:79:46:da:f1:d0:67:4f:dc:2e:a0:c8:
33:3e:b4:67:66:87:29:fe:c9:95:1e:d4:69:00:5e:c4:a4:1e:
51:b8:44:58:37:a5:d9:d2:9a:2b:c3:70:60:c5:fd:2d:fc:67:
12:5c:e8:58:39:c1:47:0a:91:bd:f0:4e:05:b6:3c:ae:ab:00:
5d:89:58:1f:26:dc:ee:d3:9a:93:7c:91:a5:71:6e:6c:ba:30:
a3:30:be:88:f7:b8:d3:86:75:e2:3b:b7:8d:b9:44:7e:ec:b7:
dd:a7:ea:cc:9a:13:10:7e:b8:b8:27:f7:05:98:6d:da:93:bf:
23:7d:3f:47:1a:82:ed:74:ea:2e:1a:29:24:ad:9f:ad:da:14:
56:34:cc:87:03:bb:8b:72:04:f3:0a:20:88:f3:af:9f:f4:7a:
cb:3e:32:0e:44:8f:75:1c:54:86:9b:58:89:cb:ed:3e:ed:09:
d8:c9:f3:f4:97:88:08:4f:3a:5b:30:b4:c6:fe:27:23:f3:25:
26:05:b2:c2:66:76:28:0e:0a:80:dd:99:42:73:9d:32:54:00:
2c:5d:56:74:a1:f5:09:31:1e:8d:33:85:2e:07:64:49:b2:c9:
34:e1:43:f2:87:ee:28:05:d7:f0:ca:1d:e2:9d:93:93:50:8d:
68:2c:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:58 2026 by rpki-client