Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: f/dm4r4ysSXJRxG57OJQYnspi3n0YszyyPbjAHgcjCQ=
Subject key identifier: 14:CE:41:11:4F:BD:95:EF:6E:0A:A2:71:BB:D4:0F:64:98:8A:99:93
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019DCDF49666812FBF0FF60E66AF74C73EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 06C0
Signing time: Mon 27 Apr 2026 08:00:51 +0000
Manifest this update: Mon 27 Apr 2026 08:00:51 +0000
Manifest next update: Tue 28 Apr 2026 08:00:51 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: MPLfCkpXVwbjN7o7vRzbCWG6XOM9okAAK1woh+k1L2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:96:66:81:2f:bf:0f:f6:0e:66:af:74:c7:3e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Apr 27 08:00:51 2026 GMT
Not After : Apr 28 08:00:51 2026 GMT
Subject: CN=14ce41114fbd95ef6e0aa271bbd40f64988a9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:07:7b:d5:4c:b7:22:39:fb:dc:25:ba:a7:
9c:70:c1:b1:c9:72:0c:52:1d:6a:62:56:47:6d:9d:
26:ec:bf:f8:d7:50:63:f8:03:de:a1:19:52:e4:08:
b3:ce:a2:a5:1b:86:ca:82:37:05:58:86:86:d4:05:
bd:d7:5e:ec:8b:2e:98:e1:54:9f:0b:45:da:fb:92:
e9:07:39:c8:d6:1f:ae:1b:d0:df:8b:07:29:fb:69:
47:66:ac:f0:5e:c2:85:46:93:a0:58:2b:95:24:ab:
13:43:84:da:f9:20:db:97:3a:fe:b7:d4:d1:79:a0:
4c:cd:18:f3:72:76:0a:8d:8f:1a:ba:37:7f:4c:3e:
08:cb:4c:b7:ea:74:3a:2a:44:67:e8:b5:df:a8:83:
1c:1c:ec:9c:05:3b:c0:6f:ff:07:30:ad:ea:dc:fb:
f6:f0:6d:44:ed:b0:44:21:fa:ff:77:e1:96:81:bf:
82:f5:1c:3c:5d:65:de:84:04:5d:5c:f6:52:06:c9:
a0:3f:06:c9:46:5e:19:ac:7e:ff:92:61:ef:cc:6c:
6d:3c:49:62:dc:d3:7a:c8:ec:3a:93:0b:5d:8b:03:
dd:a6:40:bf:90:1e:bb:fa:b3:c2:41:99:c8:55:de:
d8:48:34:f3:14:95:59:7c:4e:47:6c:31:b1:b3:9d:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:41:11:4F:BD:95:EF:6E:0A:A2:71:BB:D4:0F:64:98:8A:99:93
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6e:a5:3d:ab:6c:65:d1:63:b1:06:cb:91:18:1d:be:31:c4:
0e:b9:dc:7a:49:ff:18:b7:80:11:2a:0a:e8:42:2d:09:35:f8:
f7:a9:38:83:91:aa:58:73:cf:a9:c4:87:2e:02:77:36:67:51:
d1:b8:8d:6d:3f:8c:11:93:e4:02:d5:ff:a6:e7:c0:08:09:7f:
3b:b6:b1:42:05:c2:87:2e:99:ec:1b:0f:13:b7:99:04:47:61:
83:74:98:b2:b5:59:e1:89:0b:73:d4:ac:aa:0d:4e:96:16:95:
1a:a6:a6:b4:62:3c:18:a6:08:c5:40:fa:f5:b8:23:e5:95:f9:
e1:00:1e:5f:00:eb:46:0c:b7:e1:d5:c2:f4:15:98:16:23:82:
82:1f:30:e8:b7:18:1a:1d:a9:4b:16:47:0a:56:1e:ed:a2:e5:
6f:76:2b:b5:0e:94:9a:e1:72:6d:3e:0e:52:76:36:7b:31:e5:
33:92:01:ac:d1:b7:33:aa:bc:6b:d2:fc:00:0c:df:7f:6f:80:
f3:69:56:b2:74:6d:9a:b8:e5:fe:c8:a6:e0:2c:de:00:e4:18:
48:c5:29:d9:16:49:3f:cb:9c:1e:36:86:21:e3:90:bc:75:3a:
f3:47:dc:e6:2a:e9:fa:c3:82:1e:bf:87:f4:f9:1c:53:d1:8a:
29:d5:1d:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9JZmgS+/D/YOZq90xz6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjYwNDI3MDgwMDUxWhcNMjYwNDI4MDgwMDUxWjAzMTEwLwYDVQQD
EygxNGNlNDExMTRmYmQ5NWVmNmUwYWEyNzFiYmQ0MGY2NDk4OGE5OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6oHe9VMtyI5+9wluqeccMGxyXIM
Uh1qYlZHbZ0m7L/411Bj+APeoRlS5AizzqKlG4bKgjcFWIaG1AW9117siy6Y4VSf
C0Xa+5LpBznI1h+uG9Dfiwcp+2lHZqzwXsKFRpOgWCuVJKsTQ4Ta+SDblzr+t9TR
eaBMzRjzcnYKjY8aujd/TD4Iy0y36nQ6KkRn6LXfqIMcHOycBTvAb/8HMK3q3Pv2
8G1E7bBEIfr/d+GWgb+C9Rw8XWXehARdXPZSBsmgPwbJRl4ZrH7/kmHvzGxtPEli
3NN6yOw6kwtdiwPdpkC/kB67+rPCQZnIVd7YSDTzFJVZfE5HbDGxs53uVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTOQRFPvZXvbgqicbvUD2SYipmTMB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL26lPats
ZdFjsQbLkRgdvjHEDrncekn/GLeAESoK6EItCTX496k4g5GqWHPPqcSHLgJ3NmdR
0biNbT+MEZPkAtX/pufACAl/O7axQgXChy6Z7BsPE7eZBEdhg3SYsrVZ4YkLc9Ss
qg1OlhaVGqamtGI8GKYIxUD69bgj5ZX54QAeXwDrRgy34dXC9BWYFiOCgh8w6LcY
Gh2pSxZHClYe7aLlb3YrtQ6UmuFybT4OUnY2ezHlM5IBrNG3M6q8a9L8AAzff2+A
82lWsnRtmrjl/sim4CzeAOQYSMUp2RZJP8ucHjaGIeOQvHU680fc5irp+sOCHr+H
9PkcU9GKKdUdkg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:13 2026 by rpki-client