Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: iYn3tFA44nqlQfixGhQ5oMDaxsjBOFBLDiHgJc1v3Ig=
Subject key identifier: 32:0B:4A:43:C8:78:7B:AA:BC:02:7C:2D:43:71:12:D0:F5:82:DC:E9
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 019D9A3E73328B55587EAFCB8C07AD5944C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:16 +0000
Manifest this update: Fri 17 Apr 2026 07:01:16 +0000
Manifest next update: Sat 18 Apr 2026 07:01:16 +0000
Files and hashes: 1: 6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa (hash: 8vwGqAEHUA9stliHzrXfudIca0hLWVZRYgeWkRbQdXU=)
2: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: smvx90fD2Nptdw32pmgSCeimph7OHYlTWLvc+CkHuSw=)
3: jwxhR7P3jbNHcQy0YutNaHO3jkE.roa (hash: i8m3hyHSA+Y/TnrAHEYaj/Stv9BCwcsKeOlhfB0mCAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:73:32:8b:55:58:7e:af:cb:8c:07:ad:59:44:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Apr 17 07:01:16 2026 GMT
Not After : Apr 18 07:01:16 2026 GMT
Subject: CN=320b4a43c8787baabc027c2d437112d0f582dce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:38:c3:ca:69:05:9b:b0:03:bf:dd:41:cf:
55:a5:f9:fb:2e:00:68:ba:62:e7:39:af:75:e9:35:
fa:ea:7f:10:56:8e:c3:5d:e6:aa:6c:29:02:2e:15:
20:32:d1:ab:c3:b2:67:94:35:7d:97:5a:76:8f:c3:
25:54:9d:2f:26:e1:59:7c:1d:24:88:bb:92:4f:40:
6f:10:a0:00:51:d0:52:43:b6:08:75:b0:88:7e:28:
53:4f:8b:9f:86:00:33:87:12:c7:a9:38:88:b1:07:
49:66:bd:61:4f:6b:ff:62:c3:6d:90:2b:17:4a:eb:
5a:79:f3:7f:a4:2a:51:06:6a:72:28:91:69:73:6e:
0e:64:f7:8b:06:7a:07:f2:05:be:be:e0:99:69:12:
5b:c0:e6:57:cc:12:8e:71:90:6b:1d:6d:73:d3:0d:
a7:81:be:5d:79:43:c2:fb:ab:b2:4d:86:68:4b:81:
60:aa:01:1e:e1:a5:55:4c:b8:04:c8:4b:c9:48:88:
af:11:c8:1d:37:aa:74:b9:2e:51:47:28:a2:03:f9:
d8:ad:e4:4f:0c:ce:82:c6:29:1a:35:f1:2c:b7:56:
1c:69:13:ea:5e:63:7e:25:1b:a1:f7:8d:f7:85:39:
3d:de:12:81:dc:53:29:95:e8:5c:d2:b6:06:fb:22:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:4A:43:C8:78:7B:AA:BC:02:7C:2D:43:71:12:D0:F5:82:DC:E9
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:37:19:c3:c4:6f:47:32:5f:33:34:3c:8e:0e:f6:01:29:44:
50:e3:0e:1b:ac:f1:0e:09:43:71:3b:f8:e2:be:0b:d0:45:4b:
24:46:1c:95:f8:b2:0a:74:2a:f6:e1:6a:18:b5:ea:ad:c5:16:
fa:80:e8:7c:ca:db:87:be:00:16:3f:c9:87:37:a9:c7:cb:60:
a2:f8:fd:99:2c:cc:b6:8f:71:bf:4c:a7:36:db:2b:10:1d:64:
32:7a:d2:68:c7:3f:4e:04:4a:61:1e:2e:67:5f:f4:e3:a5:7d:
53:61:3c:7a:21:9e:4b:2b:25:3a:8e:77:77:11:2a:e0:87:81:
16:cd:b7:ae:fa:5f:26:ee:d5:71:31:98:b4:16:f1:a6:b8:f7:
99:9e:b4:c7:1f:f0:2d:c5:d6:95:97:ea:c0:54:23:28:4a:09:
32:f8:76:a8:9b:b6:1b:bb:6e:66:13:2c:1f:76:cb:7c:59:7d:
d0:dd:82:26:af:74:18:4d:28:44:67:32:a5:dd:2b:75:4d:36:
84:cd:7f:21:d9:07:68:e4:ff:95:f4:0d:c3:e2:11:c0:e6:6d:
7a:aa:cf:fa:72:60:a8:0c:19:13:34:a1:7b:c6:dc:cd:3f:67:
b5:cc:e2:dc:da:fa:4d:ac:2d:af:81:52:45:66:5c:f8:67:d9:
fb:54:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:16 2026 by rpki-client