Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: P+sWLzR24ImKPZB+sSv/avDt2iK2uJtLRUnt+zw5MxQ=
Subject key identifier: 84:97:BA:37:EA:D6:23:90:A6:F2:EB:0C:32:6B:7B:78:87:D1:81:4E
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019DA89E5ADE296638E1B87C1C73DA2A2BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 01D0
Signing time: Mon 20 Apr 2026 02:00:43 +0000
Manifest this update: Mon 20 Apr 2026 02:00:43 +0000
Manifest next update: Tue 21 Apr 2026 02:00:43 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: ZiqVvBBm0noNkOoakkig6CmflPv2nQ8YXL/Ixu4Cehc=)
2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:5a:de:29:66:38:e1:b8:7c:1c:73:da:2a:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Apr 20 02:00:43 2026 GMT
Not After : Apr 21 02:00:43 2026 GMT
Subject: CN=8497ba37ead62390a6f2eb0c326b7b7887d1814e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:b9:59:0f:55:c3:83:bf:24:0b:64:29:eb:
f8:dd:21:30:8d:22:2e:25:ec:e7:cc:df:f3:4f:3f:
6c:f8:ba:80:dd:ed:c9:28:bd:ac:16:c6:58:21:6d:
f7:84:f8:f8:b8:8b:2f:49:00:90:a5:2a:b9:c0:5d:
33:db:10:7b:6f:0d:8e:26:dc:8e:52:ce:6a:83:94:
9e:c2:78:e7:cf:d6:dc:c5:32:dd:b6:0f:2d:f5:31:
77:91:52:68:1a:f8:dc:77:da:cd:c3:1b:40:0a:c2:
31:41:27:46:5b:32:59:94:16:27:75:4e:b2:8e:88:
26:f5:d3:c4:87:46:5b:53:e5:6c:2e:59:11:ea:76:
57:34:38:e4:5a:57:2b:bc:ff:e1:7d:1c:fe:42:cd:
be:ef:8f:96:bc:c2:ba:78:f4:a8:e8:a8:50:67:f0:
82:cb:09:21:f9:3a:9a:ea:48:73:52:24:b4:c2:26:
ed:0b:fb:94:4d:d2:56:2c:6d:e8:f6:70:77:6f:87:
19:a5:c4:44:11:ae:fc:ec:3d:bf:4e:1a:88:06:f2:
6f:fa:7e:8b:fb:d1:1a:e0:5c:9d:42:2f:ea:79:19:
a5:2b:13:6c:e5:b7:1d:1e:49:85:e3:ba:57:fa:b9:
f0:42:f0:43:b1:11:78:83:f5:dd:9d:7c:9a:7d:c0:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:BA:37:EA:D6:23:90:A6:F2:EB:0C:32:6B:7B:78:87:D1:81:4E
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:14:3d:b7:5f:9e:43:58:09:55:0a:37:e0:fc:b2:dd:d2:ad:
b7:c8:71:65:77:15:4b:3b:bd:d7:7a:cf:ae:e8:62:a1:f8:20:
51:34:28:e3:e4:94:06:58:b3:a1:fa:45:01:f8:d2:1b:23:ed:
f1:c8:df:21:b0:96:a4:d9:bd:0d:95:40:24:6c:9d:4e:c9:d7:
22:69:ae:6a:58:78:6f:c0:d2:7d:ac:d0:3c:ed:eb:1b:de:1b:
0f:ee:db:7b:e1:dd:d6:5e:1b:8f:46:2a:d8:cd:22:0b:e8:7a:
f4:01:64:9b:9b:22:5a:ba:95:14:4e:2a:91:fb:fa:13:f6:0f:
67:33:32:8c:81:db:87:a1:fb:86:67:a2:de:4e:71:24:53:f9:
04:22:62:bf:c2:20:3f:ce:1b:7b:e9:34:4f:0d:56:75:83:ca:
74:3d:ba:44:99:0e:5f:c9:bb:9f:a7:77:65:db:ee:bf:ca:d4:
f6:6d:2f:70:41:aa:32:fe:b8:db:56:6f:34:36:58:fe:19:f7:
3d:fc:e0:00:bb:a4:0b:ab:18:e3:13:91:38:c6:9b:ac:a4:73:
af:6c:49:46:2a:2b:96:1a:17:15:02:2f:63:a1:0a:25:fd:7b:
46:a3:3b:73:02:97:be:d6:f3:fe:62:7c:e4:c3:53:84:a7:a8:
84:28:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 12:59:31 2026 by rpki-client