Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: 056CFlhE2qL8wKVceuVXU6cgMrQ4Qod8zlapD2QLp8s=
Subject key identifier: E9:AB:9C:9E:85:E6:08:B4:53:97:56:1B:50:4F:AF:F3:CA:59:26:D3
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 019D277290C5BD9585536ECC907812FE1145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 17A0
Signing time: Thu 26 Mar 2026 00:01:52 +0000
Manifest this update: Thu 26 Mar 2026 00:01:52 +0000
Manifest next update: Fri 27 Mar 2026 00:01:52 +0000
Files and hashes: 1: 8MW5HqzxM8fWAkgdIF87Ez5R_jE.roa (hash: yqEz69K9RUBzU0ZL3wR6AByNl65m7OmG7mQS2PnAi1Q=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: jvCb8rJ8kf3AGVebnJv4OcmWb7uqHOU6jrmN97HU35s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:90:c5:bd:95:85:53:6e:cc:90:78:12:fe:11:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Mar 26 00:01:52 2026 GMT
Not After : Mar 27 00:01:52 2026 GMT
Subject: CN=e9ab9c9e85e608b45397561b504faff3ca5926d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:18:c2:45:a5:da:5e:34:15:7b:b9:be:05:
20:1b:6b:92:50:3c:b9:ab:6e:e1:86:d0:46:89:24:
8b:2f:e5:c8:39:47:85:86:c4:65:3a:ec:15:55:8b:
14:c2:30:5f:1c:8b:95:3a:f8:ce:80:5a:b2:0d:7d:
d1:99:5d:18:75:7a:47:a2:9f:b1:1b:9c:89:fd:0b:
94:ef:00:d3:70:5f:87:39:85:22:7b:c6:08:aa:0d:
09:0a:2d:73:74:97:2c:a1:3d:24:df:89:c6:97:54:
31:89:50:39:fb:b3:c6:49:a1:e1:e3:21:da:de:22:
b8:93:d6:23:c7:61:93:0d:3f:29:a1:aa:0f:a7:31:
eb:26:97:55:32:44:0d:97:3f:be:a0:6e:73:f1:ab:
e3:e1:fd:bc:ef:5b:fd:11:21:bf:a0:24:2a:33:41:
05:5c:bb:3f:c2:bb:0f:ad:b3:8a:2c:51:da:7c:18:
97:22:d5:68:a8:99:5a:5c:70:14:c2:18:c1:78:59:
1b:1e:e9:d4:eb:a7:40:5d:90:92:c0:1b:28:4e:02:
2e:14:9e:29:91:75:fa:dc:75:0c:29:d9:bc:12:3b:
dd:ab:3e:a7:8b:b7:fa:6a:06:d1:8b:65:1d:d5:74:
09:30:9c:ec:9d:31:8f:96:d9:62:42:04:29:71:e4:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AB:9C:9E:85:E6:08:B4:53:97:56:1B:50:4F:AF:F3:CA:59:26:D3
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:2d:b2:60:56:1d:df:cf:b2:dc:e9:57:39:50:8d:a8:58:
c8:48:13:80:74:41:93:53:6d:f3:fa:e0:41:d6:ed:4c:b7:5f:
7b:5e:3d:f7:1b:3f:7e:29:06:10:17:15:4f:15:d1:8d:69:fe:
36:c2:a4:3a:f6:79:56:f8:32:00:ba:19:1c:3f:13:fd:13:85:
c7:16:5f:c1:c6:34:32:06:5b:9a:46:4e:a1:ff:8f:d9:a2:17:
d8:51:ce:60:e2:5e:93:c2:d0:dd:2f:8c:80:65:7e:2d:aa:72:
66:4b:2c:d4:57:ec:f6:34:c5:04:c4:5f:89:f9:53:58:40:d2:
18:0e:9d:a0:c6:ca:99:67:5f:5d:17:da:61:7b:cb:99:1d:a7:
3a:e0:17:c7:6c:be:fc:5c:9f:7e:f7:c9:e1:29:a2:f9:82:fe:
15:4d:ef:ba:43:50:06:3b:57:73:04:32:c8:e3:f4:ed:03:45:
d1:b6:5b:cd:10:aa:44:19:0c:b9:a3:d1:69:03:6a:6a:ef:4c:
76:48:7b:92:74:66:b1:33:d7:3c:37:84:ca:30:17:62:22:f1:
5d:73:4e:2d:3c:5c:bb:bd:de:87:80:f3:8c:79:b2:b4:d0:37:
cf:a7:cd:a3:9a:d9:6e:4d:70:aa:05:c3:fa:5d:51:4d:23:33:
34:82:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:51 2026 by rpki-client