Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: uWleBAdcFDs9gVmiiCBXW+CN/+ALB+mlNzXec41bqAA=
Subject key identifier: 6C:14:DB:13:40:0A:14:37:BA:23:CC:3D:60:97:BB:E5:C9:2A:80:A1
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 019D9AAC6CF9021DA5FDF6FCF253CF6B03E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 03FD
Signing time: Fri 17 Apr 2026 09:01:24 +0000
Manifest this update: Fri 17 Apr 2026 09:01:24 +0000
Manifest next update: Sat 18 Apr 2026 09:01:24 +0000
Files and hashes: 1: DrL-3puYiO1XcvOHU3z8CMJINeA.roa (hash: cuMSInirqa12rGsZAI3BCtXNacI0/0nGWC9/J3U/TsU=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: X04WmGJlRONH6DM7hH1UuYkaDfuYdunMHUB5Bwc27DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:6c:f9:02:1d:a5:fd:f6:fc:f2:53:cf:6b:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Apr 17 09:01:24 2026 GMT
Not After : Apr 18 09:01:24 2026 GMT
Subject: CN=6c14db13400a1437ba23cc3d6097bbe5c92a80a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:e4:1e:da:99:14:f6:e1:64:6a:01:dd:48:
a5:38:e9:c7:54:46:61:62:c9:2c:95:0d:96:26:8a:
d1:89:35:d5:86:89:d8:93:e9:3d:0c:4d:11:a3:f3:
b7:06:da:22:30:5a:68:2c:b1:10:43:48:89:ed:84:
c3:3e:87:6f:14:29:12:a1:73:7f:c3:ed:76:93:3e:
aa:e9:17:3b:8d:30:39:a5:a3:fd:a9:09:23:3d:c0:
dc:93:8a:5f:53:cd:55:99:e6:11:9a:79:a4:81:0b:
94:a5:f9:9d:7c:2d:c8:66:94:7b:ed:3a:50:1b:13:
58:04:07:90:d8:55:63:28:4a:c6:5f:0e:45:ce:de:
f3:e1:49:56:7b:7d:81:ff:a6:d6:b5:51:99:85:c3:
81:a5:ab:b3:89:4a:0e:01:77:f0:81:9e:1d:b9:94:
c5:fb:63:1b:27:97:16:3e:02:8f:9d:06:51:09:19:
d9:8a:f1:ed:34:ed:2c:64:67:f6:76:fb:de:3e:4e:
92:bf:91:45:37:e9:01:67:45:fd:fd:0c:6d:6a:a0:
39:6c:96:28:1a:a8:ca:33:c5:d7:16:6d:86:f1:ea:
6c:8a:e6:d6:df:b4:43:a5:d9:73:4e:d0:d5:85:89:
de:fc:b4:96:f1:91:aa:0f:54:d8:6f:dd:36:d4:b3:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:DB:13:40:0A:14:37:BA:23:CC:3D:60:97:BB:E5:C9:2A:80:A1
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:08:6b:14:18:f1:d8:18:c2:cb:e4:b5:17:79:d1:1f:56:78:
0f:a5:9a:50:c9:91:2d:6d:3a:9a:09:8b:1f:de:91:0e:7b:06:
0a:4a:14:07:a4:ec:1c:bb:6f:ab:12:c8:a5:98:ef:3b:55:65:
ca:14:e8:b9:a4:f4:c3:0a:2a:ca:86:89:0a:26:75:26:37:cf:
10:49:2f:ae:34:3e:e8:63:08:ee:e8:c2:9b:1f:8f:fa:7a:47:
cf:58:bd:27:86:78:51:ef:21:55:25:44:eb:5c:d1:d7:ed:e4:
af:b7:26:20:3b:7c:e5:cc:76:6c:a6:82:a5:f4:1d:19:d7:a8:
0d:8b:9d:cd:d5:47:60:a3:03:bd:bf:64:69:26:f1:e9:7c:56:
6a:33:9e:4d:f5:5f:cc:33:ef:82:c2:ca:d3:20:1e:e1:d6:79:
b4:34:3e:05:59:0b:4b:6b:a2:09:27:06:4c:3e:c4:0d:bc:26:
ce:be:83:30:d4:bb:f6:ca:89:1b:c7:3a:75:a1:d1:8c:cb:a3:
f0:5f:56:85:7a:b9:a1:ef:1d:65:f6:32:51:2a:ef:23:15:f5:
59:cb:8a:19:d5:b4:6c:23:55:da:77:2e:d9:16:42:86:a5:c5:
94:2a:d8:f1:b2:97:2b:08:a9:5a:88:e1:23:9e:3c:81:da:9c:
cc:19:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:11 2026 by rpki-client