Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier: f2eUT6UlcId21/fPy6y4N7Hr0pqd2JwXJDRrX6FzRSw=
Subject key identifier: C9:20:17:4E:FF:75:05:F6:77:A8:72:C5:96:A9:54:B6:89:BB:8C:2D
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial: 019D3940CE9529A57CB49FA5D81AD65C07E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number: 10D6
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: Blotrpr7MpBhfTIOMAd4QzI4MTU.roa (hash: 7tg4tSbcWIkD3S9S1Cn28G+hcZYO6KUz7cO5Ike+MUg=)
2: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: DjWTmumxvWLAfu3UnI60IdfjtBuiiWUr0VVEfbuPjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ce:95:29:a5:7c:b4:9f:a5:d8:1a:d6:5c:07:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594b79990f616a8344c860148fc922910e154dad
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=c920174eff7505f677a872c596a954b689bb8c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:1a:e3:13:70:ab:02:46:45:f0:3d:4f:c8:
8a:52:64:8a:d2:02:08:3b:6d:60:e0:ae:25:35:5e:
9a:9a:14:4f:be:5e:1a:7e:5e:96:ff:bd:73:0e:76:
1c:a1:89:62:86:0f:0e:d1:43:99:9e:56:e4:a3:15:
06:5f:5d:a0:65:c4:f4:55:f6:7a:9a:6e:63:c7:ab:
46:98:3d:b7:88:d2:d5:f6:71:3b:55:da:8c:bd:b2:
61:2e:d1:f8:b3:39:c7:77:dc:41:16:02:a9:28:dd:
38:61:78:11:b8:0c:76:f6:eb:0d:df:8b:e3:31:7d:
15:dd:39:c2:b5:3a:7a:ce:3f:c1:7b:e4:f3:4f:7c:
4c:19:17:78:fe:24:fa:23:0b:00:7d:ce:74:95:6e:
b6:95:48:40:f7:69:db:95:82:0c:8c:90:c1:9a:80:
02:b3:bb:4e:81:4d:f5:10:39:10:0c:d1:7e:9b:23:
c0:b9:0d:01:67:79:a1:9c:b2:86:2d:75:57:9c:65:
b5:67:67:26:d5:36:6a:74:03:62:93:a2:b1:0c:33:
1f:36:0a:3d:3f:65:78:d0:ba:fd:ce:1a:09:39:39:
1b:55:d2:e0:eb:4a:53:de:f9:19:6b:91:ef:5c:da:
ef:d6:fc:d9:53:64:b0:63:8c:89:05:c0:54:44:0b:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:17:4E:FF:75:05:F6:77:A8:72:C5:96:A9:54:B6:89:BB:8C:2D
X509v3 Authority Key Identifier:
keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:48:7f:2a:2d:0a:d8:47:25:14:12:2d:b1:fc:c1:0d:1a:1d:
a6:fa:33:78:d5:e7:a7:0c:ac:68:69:2c:6c:5d:10:d4:b6:60:
b4:5e:9e:c7:15:d0:a5:30:91:87:64:9d:7c:e3:e6:b8:23:50:
a3:22:5b:3f:36:3c:95:f5:28:a8:8f:2d:23:4b:1e:d7:be:6f:
9e:81:db:c1:2d:86:9f:3c:78:fa:cc:e6:59:a8:f1:f2:2b:51:
37:45:98:63:e9:cb:61:42:ac:e7:06:e1:59:1d:49:a0:6c:76:
c3:47:03:5e:de:aa:b8:2b:14:37:b3:f7:1f:c9:9f:cb:a2:79:
7c:97:6f:c6:6a:9d:43:2e:c3:38:85:7f:f6:a1:51:56:41:ec:
cc:be:fe:c7:97:41:67:41:c2:73:98:b5:db:ba:fa:05:ab:88:
79:1c:9b:97:99:7b:0a:eb:eb:95:49:20:b5:ff:26:22:8e:78:
15:60:2b:a8:1c:8b:75:05:c7:64:ac:fc:84:c3:87:1f:e7:a4:
08:ae:b9:c2:39:dc:48:ef:ed:96:ef:cc:5d:32:84:d4:06:3e:
41:8e:78:42:29:30:bf:46:fd:40:4d:a1:eb:5f:d3:69:4c:68:
0c:5b:72:66:89:13:9a:ff:86:da:89:e3:c0:93:91:16:5f:ef:
35:a6:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:49 2026 by rpki-client