Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: WYlhStn6dn3Ae5F9zvQemaOxG/s7MLP5mh7t3pazeOs=
Subject key identifier: 16:04:0C:AA:D4:5B:2F:FC:02:1B:50:1D:0E:9B:7B:9A:EC:B6:84:52
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019E4BE9BDFF9D2C8C5BAE8BB9A574DE3A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 022A
Signing time: Thu 21 May 2026 19:01:10 +0000
Manifest this update: Thu 21 May 2026 19:01:10 +0000
Manifest next update: Fri 22 May 2026 19:01:10 +0000
Files and hashes: 1: 9NpMCQPTdYLM6RigPHbxPRz98fA.roa (hash: ioCoSDv35er7fovn3uLODbMUmoh4IJiyFfj+GFkzs9c=)
2: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
3: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
4: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: uVRF4cQZaUHbLIJs9eStvuDVXCQ8lwndwaTBQJqtyy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:e9:bd:ff:9d:2c:8c:5b:ae:8b:b9:a5:74:de:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: May 21 19:01:10 2026 GMT
Not After : May 22 19:01:10 2026 GMT
Subject: CN=16040caad45b2ffc021b501d0e9b7b9aecb68452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:fd:c5:50:96:69:9b:6b:09:e8:cf:49:97:
f1:ba:ec:91:dd:fc:44:16:58:63:71:a3:21:cd:a6:
24:a0:05:c1:a0:80:fb:ba:71:1a:76:0c:96:fc:4a:
80:ea:2c:d1:71:ca:e9:19:97:ab:3b:1f:7d:ae:71:
66:94:e3:26:b5:08:69:2e:34:85:95:55:ad:18:39:
70:30:56:b7:35:27:d1:8c:7f:5e:34:1c:9e:9b:b4:
3a:d1:ac:96:89:30:b0:1f:91:c8:22:ee:44:97:da:
a1:97:52:3f:33:0d:28:b1:2f:5a:34:1b:b5:a6:15:
5d:ac:da:07:c7:48:df:70:32:9e:2c:c4:14:03:92:
54:d7:63:16:24:b2:ea:9f:7a:67:25:0d:ab:cf:9c:
c1:41:66:5d:00:16:3f:72:f2:4c:d0:02:10:7d:eb:
05:96:4e:cf:91:f3:b0:de:68:dd:1b:3c:03:db:31:
09:32:df:9b:a8:9e:ae:60:0c:cc:74:fc:13:f9:1c:
88:b6:4c:c4:02:d3:c9:86:fd:9c:ac:84:37:d6:79:
9e:1e:f7:7e:06:ae:92:29:b2:7a:39:e7:20:8d:da:
f7:2d:28:8d:51:bc:e7:2b:1d:1f:c4:d4:31:92:60:
63:7c:c9:20:ed:7f:14:c9:db:fb:7d:46:3f:23:21:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:0C:AA:D4:5B:2F:FC:02:1B:50:1D:0E:9B:7B:9A:EC:B6:84:52
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:40:01:3a:73:fd:d9:53:79:4f:7a:ec:3e:2e:f0:e9:d4:09:
ed:ef:3e:73:f5:f2:e8:66:3c:c2:93:0a:6d:02:92:bb:d6:7d:
37:31:ae:d4:2c:7b:49:ce:30:96:42:0b:86:cb:ea:65:83:77:
c3:55:4c:1f:e9:e5:cd:3b:fb:3e:3b:9b:c5:a2:92:91:96:45:
3e:e2:d7:3e:ec:de:29:db:63:b4:b6:1d:6f:47:6d:43:70:df:
9a:ac:14:11:31:16:87:42:d4:9c:23:93:2f:cf:8a:fc:d8:c3:
79:bf:63:c6:25:ed:46:31:69:53:72:fe:6a:62:3d:f6:e6:7f:
12:85:6c:e4:8d:85:05:8e:d5:a6:b3:ca:be:45:83:5d:8f:45:
af:d7:1c:8c:c7:32:cc:99:0f:f8:91:05:a0:28:14:7e:2a:34:
46:96:14:38:aa:20:b0:53:6a:0f:f2:32:9e:66:82:b6:f5:97:
b9:58:18:9e:d5:db:58:2b:b0:62:ef:d1:88:f2:23:c6:87:4f:
49:8e:3b:02:6a:a6:d1:7d:4c:50:df:31:7d:10:0e:be:d7:94:
b1:7b:3d:e3:fd:cf:b6:f4:ff:cf:71:a1:f9:76:14:c4:4a:d1:
a5:27:d1:a1:5a:e6:c6:15:65:1e:4a:92:57:2f:5a:bb:2d:cf:
89:62:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 20:56:11 2026 by rpki-client