Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: g8dGtykCLuoqXm29oni3xlpxC4NHqg5MLuBqZwWbe00=
Subject key identifier: D3:72:C3:E5:1C:BB:E3:FE:9E:0E:24:A5:8C:35:F5:33:64:C5:25:F7
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 019D98F45301EF8117FCDF6874A62CB94FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0991
Signing time: Fri 17 Apr 2026 01:00:42 +0000
Manifest this update: Fri 17 Apr 2026 01:00:42 +0000
Manifest next update: Sat 18 Apr 2026 01:00:42 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: zJgOLIiAzq1C+nwMoGyJGQPAhMmU7PS3cXJ09vO1rMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:53:01:ef:81:17:fc:df:68:74:a6:2c:b9:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Apr 17 01:00:42 2026 GMT
Not After : Apr 18 01:00:42 2026 GMT
Subject: CN=d372c3e51cbbe3fe9e0e24a58c35f53364c525f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:0b:8a:23:b7:28:5e:9e:3d:1d:25:17:7f:
f3:d3:13:a6:b5:36:a6:4b:db:f5:bb:60:db:8b:b1:
3b:53:ef:5d:01:3e:cd:39:c9:70:da:8f:4c:19:f6:
00:0e:31:c5:a5:6c:85:47:05:fd:ed:72:fc:21:8d:
96:d4:0e:24:11:14:71:96:91:cd:e0:3d:e9:20:a3:
47:b9:59:a6:e4:3a:95:d3:1e:5d:2e:b4:58:73:c8:
ae:39:61:19:8b:e1:96:55:65:dd:2b:cb:2b:b7:fc:
ab:d0:83:97:2f:ca:82:4c:f5:bb:64:44:75:6b:dc:
52:12:73:3d:4f:7d:18:8a:00:e0:3f:c6:c4:ef:98:
83:7c:8d:49:20:29:e1:f0:f4:5b:a7:1f:22:fd:8f:
bc:8f:8f:84:da:8c:4e:42:c7:ef:4c:fb:3c:76:a7:
ef:f1:14:98:9a:50:44:c5:3f:43:3e:fb:d9:14:84:
b6:c7:87:44:de:67:7b:5d:91:94:9a:76:b8:43:9b:
e8:5a:fd:02:5c:02:e5:82:66:6f:87:a5:0b:0c:8c:
57:1f:6e:fc:ff:ae:33:ec:d1:e3:6d:2d:39:6e:56:
1d:52:69:8a:cc:d1:b8:38:4f:7a:57:d6:4d:e8:db:
af:c5:17:c7:a7:43:fc:94:e9:8d:7d:10:b1:9c:76:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:72:C3:E5:1C:BB:E3:FE:9E:0E:24:A5:8C:35:F5:33:64:C5:25:F7
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f4:ee:a0:f4:16:13:e2:56:5f:f5:a0:46:38:0a:b2:b7:39:
5a:93:ef:40:12:16:1d:b8:21:35:18:3f:c1:02:ff:2f:10:21:
66:61:da:86:67:70:e6:db:24:70:45:21:46:00:10:b1:d8:fd:
04:c9:aa:ed:c8:0e:7d:1b:33:70:e1:29:eb:66:aa:93:fa:3d:
df:51:64:42:d0:e8:ed:5d:7d:03:5b:08:26:0c:cd:3f:94:f2:
9b:90:be:c5:07:ed:e4:3f:f6:24:f6:59:ff:86:79:4a:9b:71:
23:1e:de:ae:bb:8e:3c:b1:84:9d:13:5c:1a:76:f7:89:45:d9:
fa:cb:80:fd:4d:eb:04:b5:c9:22:83:2f:88:e6:f5:0e:eb:32:
81:b4:05:9c:11:5a:1c:2b:5e:9a:9c:96:65:b0:64:12:65:f6:
a7:93:d6:50:49:19:d0:12:93:09:f0:b5:cc:bf:a4:ac:46:20:
e3:fe:ca:7f:d4:05:79:b3:0e:28:83:08:61:ca:48:aa:dd:46:
3f:5d:b3:8b:f0:c2:f4:48:0c:2c:f7:b8:13:99:55:c7:73:66:
e0:a7:7d:32:16:51:3f:4b:63:6e:42:ab:ec:04:66:54:03:9c:
cb:0f:59:73:a9:4b:f9:d7:73:30:cc:94:b6:18:d3:19:ee:93:
8a:05:ca:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9FMB74EX/N9odKYsuU/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl
ZWQ2OGIwHhcNMjYwNDE3MDEwMDQyWhcNMjYwNDE4MDEwMDQyWjAzMTEwLwYDVQQD
EyhkMzcyYzNlNTFjYmJlM2ZlOWUwZTI0YTU4YzM1ZjUzMzY0YzUyNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMkLiiO3KF6ePR0lF3/z0xOmtTam
S9v1u2Dbi7E7U+9dAT7NOclw2o9MGfYADjHFpWyFRwX97XL8IY2W1A4kERRxlpHN
4D3pIKNHuVmm5DqV0x5dLrRYc8iuOWEZi+GWVWXdK8srt/yr0IOXL8qCTPW7ZER1
a9xSEnM9T30YigDgP8bE75iDfI1JICnh8PRbpx8i/Y+8j4+E2oxOQsfvTPs8dqfv
8RSYmlBExT9DPvvZFIS2x4dE3md7XZGUmna4Q5voWv0CXALlgmZvh6ULDIxXH278
/64z7NHjbS05blYdUmmKzNG4OE96V9ZN6NuvxRfHp0P8lOmNfRCxnHYevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNyw+Ucu+P+ng4kpYw19TNkxSX3MB8GA1UdIwQY
MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt
MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni
LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvTuoPQW
E+JWX/WgRjgKsrc5WpPvQBIWHbghNRg/wQL/LxAhZmHahmdw5tskcEUhRgAQsdj9
BMmq7cgOfRszcOEp62aqk/o931FkQtDo7V19A1sIJgzNP5Tym5C+xQft5D/2JPZZ
/4Z5SptxIx7erruOPLGEnRNcGnb3iUXZ+suA/U3rBLXJIoMviOb1DusygbQFnBFa
HCtempyWZbBkEmX2p5PWUEkZ0BKTCfC1zL+krEYg4/7Kf9QFebMOKIMIYcpIqt1G
P12zi/DC9EgMLPe4E5lVx3Nm4Kd9MhZRP0tjbkKr7ARmVAOcyw9Zc6lL+ddzMMyU
thjTGe6TigXKDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:37:11 2026 by rpki-client