Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: 2qNmUMv90CE4dbajJIaRqmc/5p5v8B9KleMBB9U5ZDw=
Subject key identifier: 94:27:A4:69:3F:50:56:95:DA:9B:06:D7:70:2E:57:26:45:A3:53:EB
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 019D38D37DEC0713067CB5E9976C41534420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 17A9
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: 8MW5HqzxM8fWAkgdIF87Ez5R_jE.roa (hash: yqEz69K9RUBzU0ZL3wR6AByNl65m7OmG7mQS2PnAi1Q=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: 5HvDQMevfPDeyQa2ZlDcvGzz8D0sH7fqTkNDjlNgDBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7d:ec:07:13:06:7c:b5:e9:97:6c:41:53:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=9427a4693f505695da9b06d7702e572645a353eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:f4:43:f6:17:51:9a:8e:eb:6f:3f:af:21:
02:f3:cb:6e:39:78:0e:b3:f2:d2:1e:c5:12:6c:64:
78:c2:01:63:e6:4c:40:92:c5:ed:32:d6:86:c3:0e:
20:20:fd:0d:7d:5d:60:c5:b0:07:49:92:c3:5f:89:
71:9f:02:e7:11:4f:39:00:83:f5:d6:74:9e:8d:7d:
38:73:ab:bf:b2:24:dc:73:e5:85:d0:d7:0a:a9:d6:
8b:57:7d:b5:64:63:3e:40:25:50:5f:6b:60:2a:64:
42:77:a7:8f:d6:59:b9:fc:25:c8:e5:cf:7e:8f:5f:
18:6c:e9:be:5d:d3:4d:e2:21:74:6b:23:db:c1:c4:
dc:37:09:38:57:5e:4f:05:60:1c:e0:7d:99:5d:ea:
62:82:f2:fb:15:30:0e:e0:5e:41:08:64:ef:1b:f8:
47:ec:2a:ec:8c:90:b3:61:04:34:6b:3a:a1:75:b5:
4a:9f:e4:2b:29:81:fd:47:3a:06:0d:20:7a:ac:6f:
39:f5:de:a0:58:d1:01:45:46:fc:81:dc:f7:55:1a:
d0:64:c8:62:bf:49:8d:11:0a:4e:53:23:02:1f:33:
1a:ee:36:b0:8f:60:2d:1c:e0:f2:91:35:1f:55:f9:
a0:5c:d7:e1:40:2d:19:2e:3b:83:e3:3a:29:7a:b0:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:A4:69:3F:50:56:95:DA:9B:06:D7:70:2E:57:26:45:A3:53:EB
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ad:a3:55:d3:2a:cc:b8:67:1f:db:2d:ed:eb:52:78:6b:66:
c8:ea:7e:8f:b7:96:5b:32:3a:fa:07:f3:8f:3a:5e:c9:d7:00:
77:a8:dd:56:17:8f:9b:92:64:a6:ac:ee:d7:cb:03:d8:8a:ce:
cf:32:60:2d:5e:ae:26:78:ef:87:8e:9a:4b:88:1e:a4:22:5e:
28:a0:8d:c3:49:58:31:fb:7d:55:d2:a1:42:a2:c1:65:37:8e:
90:c3:fa:55:c6:81:1b:49:e7:55:e4:95:e7:15:58:67:fb:09:
78:65:01:2c:f1:89:a0:33:6e:40:8a:29:b6:57:4d:4a:6c:b1:
17:c4:fa:35:10:4b:ce:17:5d:7f:ab:92:8b:09:ac:be:07:d2:
79:79:11:da:0f:63:31:3e:84:25:ba:0f:9d:ca:f1:5e:72:c0:
66:ac:24:c4:be:ca:5f:8d:20:fe:21:e9:a5:e5:4f:b5:4a:56:
82:a6:ec:38:69:4b:11:3f:47:c3:90:8a:eb:e0:aa:72:7d:e5:
23:ce:72:1f:c8:05:33:04:a6:b5:55:f8:08:dd:f7:9b:a2:77:
88:f4:1e:42:ae:70:8d:ee:31:d0:19:6e:79:92:59:a7:9f:1e:
7f:84:c7:4a:c5:e6:3d:a9:00:e1:cd:c4:a2:8e:41:6a:e7:3f:
bf:bd:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:51 2026 by rpki-client