Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: OkV4yqPnIOZqPv+wMCGNHmem03DEpru/FByF9S17fKw=
Subject key identifier: E3:F4:59:70:56:E1:23:66:8A:CB:A2:7E:54:85:9E:4B:AE:7A:4F:23
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019DCDBDAD104B6396C643F6665C55905DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0D7A
Signing time: Mon 27 Apr 2026 07:00:52 +0000
Manifest this update: Mon 27 Apr 2026 07:00:52 +0000
Manifest next update: Tue 28 Apr 2026 07:00:52 +0000
Files and hashes: 1: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
2: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
3: NjHKuubvlyQaDe6G06rOD1BcaRY.roa (hash: PZZctgeIeCE44qT9n7ZGgk3AP9NOWa0WxX8jRLoy034=)
4: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
5: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
6: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
7: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: ejHnz3/gIkybuZ3pH00KkVsQ5QfFwTIeIPFJ5vKAOvM=)
8: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:ad:10:4b:63:96:c6:43:f6:66:5c:55:90:5d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Apr 27 07:00:52 2026 GMT
Not After : Apr 28 07:00:52 2026 GMT
Subject: CN=e3f4597056e123668acba27e54859e4bae7a4f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:05:f3:d3:09:41:29:bf:d1:da:d9:27:6d:
ee:83:44:45:b4:1c:a2:86:7c:ae:e7:24:b6:7a:b3:
0e:0b:6d:6a:c3:64:ca:6b:f8:ef:cc:25:7a:31:13:
66:5b:18:7a:4c:50:c9:6d:8f:f1:25:d1:70:e0:29:
0c:d9:56:81:75:18:80:31:57:cb:68:a2:06:b8:f5:
62:fb:db:46:17:40:bd:93:78:e5:06:71:12:35:43:
26:43:c1:83:28:84:32:1a:bf:d5:81:d8:c2:02:c5:
65:8a:9c:fd:3f:e8:89:4c:bf:e1:a3:27:a9:ea:40:
af:01:93:f0:6f:e0:87:21:74:c7:ac:3e:be:18:29:
c6:5b:51:9f:5a:82:fd:ef:7f:10:5f:dd:a1:7d:fc:
5c:a7:64:b3:63:c8:53:e8:de:b9:87:ca:05:e7:52:
01:b4:0b:24:cc:32:c0:fe:30:30:0b:8b:0c:7c:95:
67:8a:9b:3c:48:24:81:92:4d:ca:60:59:51:82:df:
c8:53:5f:2e:cd:88:88:8b:15:07:0b:53:78:a2:f7:
76:7d:ad:8d:ab:d4:47:75:68:76:bb:e0:2c:43:c8:
1c:4c:c4:a7:40:7e:bd:8e:20:a2:f1:49:0b:35:2c:
26:b0:a7:c8:a3:a9:18:2b:27:9e:7d:02:4d:f9:f7:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:59:70:56:E1:23:66:8A:CB:A2:7E:54:85:9E:4B:AE:7A:4F:23
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:3d:64:76:a7:ce:4a:1e:51:34:be:eb:03:d2:4d:a3:d5:
c8:ab:c5:99:77:f2:b4:b5:ea:63:f0:5f:cd:21:ad:e9:15:8e:
dc:9d:06:fb:ce:c7:f4:63:fc:f9:1f:2f:15:7d:f8:8d:f0:26:
5d:43:e5:44:1f:5a:54:ef:55:3c:28:15:3f:af:a7:ad:89:ea:
f0:ae:42:8c:91:8a:95:f3:2c:7f:70:6d:69:cd:0a:2a:2a:20:
22:a6:93:9b:ea:ba:a0:05:40:c4:0d:e5:ed:30:77:58:d6:90:
ae:c5:0e:d7:8a:a0:1c:22:31:73:66:66:31:4f:ef:37:04:6f:
d2:e6:86:7e:88:70:ec:9f:e7:ba:2b:82:38:ab:65:d5:dc:f3:
26:3a:04:a8:d4:65:96:61:f1:58:91:9b:de:23:2f:98:ba:14:
47:a3:f9:eb:20:0b:19:d8:74:39:ec:ac:9c:cf:4a:15:98:37:
7b:c7:92:70:d9:7b:30:2c:21:e1:62:b5:5b:64:ff:07:da:98:
19:7f:ef:9c:1c:83:b7:28:52:1c:6b:7b:d4:8c:25:2e:e9:72:
6a:18:67:4d:1b:dc:e4:c8:19:bf:de:d7:8d:dc:d8:e4:58:d3:
c3:d9:72:84:d8:c4:d3:60:48:5c:7d:aa:10:85:5e:8a:74:dc:
86:84:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:15 2026 by rpki-client