Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: vid5ZV2103hsFOh84Jr+EckEfeCPjabQYQ1ACaYM6Mo=
Subject key identifier: DF:30:1A:FF:75:A2:A8:49:A3:78:6C:AB:22:76:AD:4D:A1:9C:F5:80
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019DD72F31FD857636BE3ED3EA084340038D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 09EF
Signing time: Wed 29 Apr 2026 03:01:27 +0000
Manifest this update: Wed 29 Apr 2026 03:01:27 +0000
Manifest next update: Thu 30 Apr 2026 03:01:27 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: kf8reCT4ODZsEyndL3YUsy0O/91a7HCToKzaYNteHK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:2f:31:fd:85:76:36:be:3e:d3:ea:08:43:40:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Apr 29 03:01:27 2026 GMT
Not After : Apr 30 03:01:27 2026 GMT
Subject: CN=df301aff75a2a849a3786cab2276ad4da19cf580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:88:0d:d7:e1:b6:65:b5:51:4c:84:fa:0d:
86:fc:bd:e6:0a:92:d3:32:15:03:9e:ff:3d:2b:1d:
55:5d:81:d4:fc:fa:ad:e1:0b:ea:3a:37:e8:c6:02:
a1:1c:70:65:e1:b6:b4:ec:d1:d8:40:bb:e5:76:30:
2a:de:e5:4b:eb:9f:11:fd:01:50:3d:56:5c:b0:6e:
7b:44:0f:c7:f0:83:6c:4d:8c:45:fb:60:a4:72:51:
b0:70:74:d0:fa:f2:0d:46:c9:5b:97:a8:d7:8a:59:
c5:9f:fc:ef:44:67:dc:c1:98:69:ee:49:e3:7c:ae:
92:26:6e:65:df:fa:8c:0f:09:6d:2e:98:7b:1d:04:
b0:5c:ac:71:e3:9a:6f:99:68:74:d5:67:61:75:3c:
2b:99:da:ae:51:b0:09:77:2d:3a:a7:ca:64:2d:a5:
88:47:b5:5f:ac:5a:da:2f:b2:c2:86:4f:52:8d:89:
d8:09:a9:df:bc:8a:f8:34:e4:27:7e:05:41:ea:11:
6e:84:68:88:b4:22:ff:fd:d7:18:f7:69:73:7c:b2:
cd:8b:63:6e:2e:88:6a:c7:da:a8:81:46:64:21:2a:
ae:d0:47:08:bc:43:66:3b:bc:8f:10:a0:21:aa:79:
c8:4f:12:bc:fb:c6:e4:3b:d5:15:fa:8a:50:9e:58:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:1A:FF:75:A2:A8:49:A3:78:6C:AB:22:76:AD:4D:A1:9C:F5:80
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:64:1f:59:9d:42:1b:9d:f8:d8:9b:01:f8:5e:c3:fc:f3:17:
cf:81:38:aa:ba:a7:c7:81:51:fc:02:9b:33:8b:e0:45:de:73:
e4:02:6e:20:2e:b4:4b:a8:9f:8b:f0:c5:f9:26:d1:89:5f:5a:
db:dd:75:4d:4a:ac:61:ff:58:8b:17:35:c3:2f:58:24:b3:43:
dd:a4:fa:e3:8c:e1:01:2e:bc:a0:a5:7c:e8:5f:13:9e:a3:d8:
93:60:ff:1d:81:f5:9a:7a:9a:6b:4c:c8:ff:41:62:ce:00:4a:
dc:66:d0:b9:c8:1d:16:93:72:1f:86:9f:20:51:0e:47:20:75:
aa:11:4e:de:da:a8:9c:0e:b5:6d:26:07:52:2e:8a:76:3d:09:
ae:a9:48:fb:7e:42:85:24:fa:9c:e0:30:df:cb:c9:e8:2c:ed:
72:05:10:91:08:6e:0b:25:6d:d7:b2:43:78:9b:2c:ae:3c:ee:
ac:47:6f:55:64:64:fe:3b:d2:f9:a4:c6:33:d8:0c:50:d3:f1:
de:6c:a1:48:3f:6e:d0:c8:9d:93:ff:9c:d3:31:46:d0:fc:75:
4d:6a:f6:f7:74:1e:f2:1f:6c:fa:fb:19:83:4c:af:03:b2:a3:
05:ea:3f:6b:1a:46:0b:57:14:07:1d:4b:77:d1:ee:b7:27:3a:
02:3c:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 06:41:51 2026 by rpki-client