Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: ELZV50H8LMDNKcFn9lphMs541byYF4LBhJxi9nDMux4=
Subject key identifier: 14:AF:2E:4A:6D:15:45:EE:6C:6C:F8:CE:02:E4:B1:F3:F9:9F:E2:8A
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019D26CCACA9BE63F3FA122AF6BE72F81018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 168D
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: 0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa (hash: kZAZ+FtKOmvNUJYXZ93DTfdC6kgpQf3D40b45bZU8Bg=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: B8vX3B548Cf+ZfmLRXBLBY8dvkj8eVre5AP2plkSUA8=)
3: hjf42_UdZaBcTmMxK9JfIjVnYF4.roa (hash: XYP9CSJ0v1KuulLYS04N8rRaMuUIS0Lpmjnr6cJWmek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ac:a9:be:63:f3:fa:12:2a:f6:be:72:f8:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=14af2e4a6d1545ee6c6cf8ce02e4b1f3f99fe28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:ca:67:e4:dc:ad:ea:00:79:9c:4a:71:59:
b2:7f:75:e6:79:75:c6:75:23:05:80:bc:dd:72:be:
56:eb:55:eb:4d:6e:3d:b9:e0:23:f4:e8:41:15:2e:
ff:e6:e3:f6:3b:ed:cd:4a:e1:28:98:af:e4:7f:c6:
94:8d:1e:81:78:fc:8e:13:b5:a1:13:09:44:26:d0:
46:5d:76:98:46:9a:3c:58:33:ce:3c:8d:97:b8:12:
92:fd:92:a3:ac:57:33:68:39:05:1f:b3:43:12:89:
78:67:a2:9d:8e:3a:2e:0d:1a:2a:b1:0c:28:f7:a8:
e4:33:be:1e:1b:a1:c2:33:ca:ce:f6:ec:0b:d6:44:
f6:96:94:ca:6e:00:4d:9c:a7:35:cd:ff:fc:57:e8:
c1:5d:a5:31:ee:26:2d:76:83:ba:04:ac:fa:06:b3:
20:25:ca:70:81:27:33:6b:33:d4:89:39:c3:64:bf:
99:70:43:c1:f3:ff:70:07:15:55:09:85:f0:45:08:
0c:ed:43:f6:7d:43:59:64:49:6f:55:64:48:a8:02:
55:73:31:23:53:72:db:f5:38:a1:65:aa:c0:d7:39:
ea:00:ae:38:5f:13:9b:6e:97:03:44:f8:b2:4d:02:
3c:2b:00:aa:97:2f:27:a9:b4:d8:d6:c9:94:ef:73:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:2E:4A:6D:15:45:EE:6C:6C:F8:CE:02:E4:B1:F3:F9:9F:E2:8A
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:4f:24:01:d8:34:48:b3:93:d2:8f:60:bb:2c:e5:41:37:0a:
45:9a:af:ca:8e:e1:4a:35:6f:06:c0:fb:fd:5c:6d:09:97:d1:
dc:be:38:ee:fb:59:6f:cc:f0:d8:2f:aa:0b:b8:76:1c:e9:3e:
e1:8d:07:73:19:b8:06:02:82:74:d1:2b:60:75:d6:35:aa:a2:
23:0b:78:ae:66:b3:4f:8c:27:49:d0:5b:3a:8e:03:b5:af:54:
b8:13:17:42:90:17:21:8a:e4:8b:9e:be:dc:0e:2c:ad:40:a9:
3f:8c:a4:be:63:48:e5:3b:26:7d:5a:63:a0:01:a6:49:c9:bb:
02:fe:9c:69:2d:64:a6:6c:3b:30:84:6e:e6:81:25:e1:da:fb:
e8:5b:6e:82:7e:dd:54:6f:c2:31:bd:ab:59:a0:48:1b:dd:9e:
14:43:59:39:7f:b8:c4:a2:0c:46:ca:10:ce:36:c6:2e:a9:93:
bd:fd:0d:08:d3:fc:15:15:6a:0a:3c:f6:97:a6:c5:88:aa:54:
03:40:db:30:8a:5a:ce:ff:17:0b:b1:b9:25:2a:9b:90:24:37:
28:99:34:13:46:57:37:8c:77:f0:78:25:5b:35:61:60:68:93:
bb:69:fb:e2:80:31:43:c4:f2:cb:57:d3:bd:8f:c7:55:37:b4:
67:a6:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:15 2026 by rpki-client