Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: pL0CJ65DrmvZbLFv2mUl8UiqTlJQp0kGnF6IyvImH3M=
Subject key identifier: 7A:40:2A:2C:EF:52:32:04:B6:20:79:7A:9F:2C:93:70:C0:89:E9:58
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019DA7F94642600A3C2BA4FCE8DF43266B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 1328
Signing time: Sun 19 Apr 2026 23:00:24 +0000
Manifest this update: Sun 19 Apr 2026 23:00:24 +0000
Manifest next update: Mon 20 Apr 2026 23:00:24 +0000
Files and hashes: 1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: Lb6LgXMPb7frT9Ck73Z5CJd3QcV3JrsC2Exl4sJEuu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:46:42:60:0a:3c:2b:a4:fc:e8:df:43:26:6b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Apr 19 23:00:24 2026 GMT
Not After : Apr 20 23:00:24 2026 GMT
Subject: CN=7a402a2cef523204b620797a9f2c9370c089e958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:1c:ec:78:6e:f0:fa:ef:a2:f3:3f:58:68:
0e:57:6b:1b:d1:5d:ac:15:d6:76:c2:44:4a:eb:81:
c0:52:88:a0:19:4b:35:4b:0b:27:44:09:d0:55:c4:
03:48:2a:85:3b:fc:18:c2:20:79:76:6c:fb:bc:6b:
15:40:b8:39:24:6d:15:09:31:d6:52:04:2a:8d:46:
8b:ea:4a:30:e3:38:bd:4e:58:cf:98:3a:0b:8c:24:
75:50:b7:13:6f:c2:33:09:df:c2:5d:68:0b:56:27:
2d:50:8f:c0:e2:da:28:af:ad:cc:62:c8:4e:84:9e:
d6:45:5a:92:5f:aa:9f:3f:0c:6d:41:96:80:05:15:
70:c1:a1:c3:f9:a3:e2:28:b8:dd:b1:e6:97:e6:d4:
ce:6a:28:e9:fd:a9:d3:0c:02:ff:06:3c:b7:02:ac:
2b:c3:46:86:c5:2e:85:58:bf:ba:65:6c:d8:e8:4b:
ad:3f:ba:33:d6:73:7c:eb:2d:92:09:c1:7e:94:b8:
45:1b:e0:86:c1:74:72:ad:4e:a0:b0:7e:ce:a8:9a:
78:0a:2c:d8:73:7c:93:f0:43:57:a3:bd:48:d3:7b:
2d:30:65:90:e6:35:1d:db:b5:d4:a9:84:88:74:01:
a0:e3:0c:b6:78:37:60:e8:a6:ff:67:3f:0a:a8:a8:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:40:2A:2C:EF:52:32:04:B6:20:79:7A:9F:2C:93:70:C0:89:E9:58
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6e:aa:8c:0d:a0:05:47:51:ca:84:bd:fe:ff:02:7f:f8:c0:
cb:d1:12:bb:29:0c:61:4a:58:9e:1c:a2:98:bb:ce:b8:55:8b:
65:df:06:18:02:dd:9b:1b:6e:4e:2a:3c:29:f4:04:65:02:86:
2e:bf:eb:27:b3:02:ec:cf:b3:8f:be:ac:2b:09:f4:a7:65:a2:
a9:4b:25:dd:dc:57:4e:d7:ef:7e:33:93:62:21:cf:50:f5:b5:
b6:b7:b8:ca:8d:49:a0:37:94:ad:d0:66:20:36:99:df:45:8c:
a7:1c:e7:39:48:67:04:18:20:ac:11:1d:fb:ea:36:54:bf:eb:
85:1e:d0:bb:5d:03:61:8a:71:e2:f6:9f:21:6d:75:cc:90:60:
bf:46:fb:f9:41:6c:6f:57:53:c0:61:fa:a7:96:8a:b6:27:25:
dd:0f:78:55:0b:1d:2c:8c:38:84:56:4d:5a:ce:c3:52:05:2d:
cc:89:d4:6d:78:0b:d0:be:f0:b1:61:8c:0c:24:16:c4:3b:ef:
7e:31:d8:5f:d3:a4:c0:e5:50:63:ab:b0:44:1a:8e:15:32:dd:
1d:ef:cf:16:eb:a5:f0:6b:2f:4a:be:69:26:af:d6:73:b3:6d:
51:a2:10:fb:04:db:ef:d3:a2:bf:41:55:fc:e4:f4:1f:03:0a:
e9:ae:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:30:18 2026 by rpki-client