Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: qX7/yLgLBqt3bpZhFtf/HkK5LK+nbV8mBdUluVuRX00=
Subject key identifier: E5:C6:2B:29:7A:63:03:05:4F:B6:36:0D:E6:52:47:4D:D9:CA:61:F3
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019D9DE419CA24E16F513D782708C7DD4E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0AD2
Signing time: Sat 18 Apr 2026 00:01:04 +0000
Manifest this update: Sat 18 Apr 2026 00:01:04 +0000
Manifest next update: Sun 19 Apr 2026 00:01:04 +0000
Files and hashes: 1: J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa (hash: jjyUi8oIJbqLLegunqtnt7RNSdcYKaaZ3m2h96zldCM=)
2: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: 5+0pyPC+PRm+5fumhMHjekJ0Fc8YBqkhPI1R9rAPQ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e4:19:ca:24:e1:6f:51:3d:78:27:08:c7:dd:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Apr 18 00:01:04 2026 GMT
Not After : Apr 19 00:01:04 2026 GMT
Subject: CN=e5c62b297a6303054fb6360de652474dd9ca61f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:c1:86:40:0c:d1:19:2a:94:6e:00:5f:e4:
0e:d7:75:4a:05:7a:5f:d3:08:d3:20:92:bb:cc:60:
6f:89:9a:15:cf:14:d3:94:fc:62:d2:ea:cf:13:32:
9d:c2:04:66:4e:7f:8c:54:34:f9:a3:11:0a:e6:f4:
58:de:2a:e6:a4:f9:20:3f:1e:fd:5e:3c:82:7d:39:
0c:8a:50:ac:03:77:5f:a2:95:2e:70:8a:59:7e:4c:
1c:8e:f5:41:0e:64:a8:a2:a2:fe:1b:02:1c:48:28:
0a:59:0d:17:df:e6:07:0a:54:d6:8d:3c:15:2d:e5:
8a:8d:44:71:bc:92:8e:ff:be:5c:fc:a6:4d:fa:6d:
fd:67:63:d1:08:81:67:c2:8a:f3:f9:b4:ee:83:42:
10:c4:be:e8:df:6d:d6:f5:ba:1f:7d:31:9d:15:39:
23:a2:26:a7:8d:74:db:eb:5c:68:3c:1e:4f:31:1d:
9a:9a:e4:83:03:23:9b:14:0d:98:06:a9:73:2a:57:
b0:19:db:bb:6b:5f:18:80:72:d7:87:57:59:ff:74:
42:ce:95:90:8a:9b:5b:33:9f:88:8f:d0:14:07:dc:
ee:42:73:a2:95:2e:47:a7:fd:74:18:43:75:f1:49:
9d:7f:aa:c9:27:8c:b9:71:6a:d6:ab:81:f7:da:84:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:2B:29:7A:63:03:05:4F:B6:36:0D:E6:52:47:4D:D9:CA:61:F3
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:7f:1f:82:b8:fe:6b:b8:4a:e2:0c:fd:c2:0a:a6:b1:26:
80:40:95:30:fe:f8:ef:6e:8b:20:54:4d:b8:12:42:21:76:44:
53:dc:7f:ae:2b:85:7d:bf:c2:db:ef:4a:20:21:cd:00:28:bc:
43:f8:a9:15:69:55:4f:6e:ea:ae:19:13:5c:9c:1e:71:70:64:
af:9b:1d:24:cc:6b:57:0a:e4:39:55:39:e6:ec:94:66:47:b0:
8b:54:ac:83:09:37:f0:38:0c:e1:a3:b3:23:af:7a:80:9d:73:
1f:9c:0d:7a:51:8f:0f:06:2f:60:6d:1f:07:b8:a7:52:39:37:
57:5b:6a:eb:a0:16:3e:99:8e:32:f8:10:b4:a3:18:35:74:79:
0c:7b:16:79:31:3d:08:ce:13:ce:07:c3:78:41:f0:41:28:e2:
67:7c:fb:74:9a:fe:44:0b:43:57:68:43:7e:15:21:eb:04:10:
52:c8:fd:cf:07:ca:7c:b2:5b:be:3e:b1:73:60:ec:a3:cc:dd:
70:0e:9d:04:2f:f0:68:ab:e9:59:71:16:77:22:67:b5:02:e5:
52:0e:37:fe:44:d0:c3:79:65:d5:9c:cb:92:40:83:5d:e9:16:
57:c2:d3:ae:5b:ff:24:29:4f:40:cf:8c:e8:12:d0:99:41:14:
cc:7e:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:11:13 2026 by rpki-client