Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: +FuBOkTjRknf5/44tq9Y/sTojknhqenIMVecnzMkQnw=
Subject key identifier: 8D:78:44:F2:55:17:33:EC:58:72:80:6D:DD:67:12:0F:5C:13:E3:D4
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 019D9A3E63B0D6CC6CC8FDBB49EA210D9656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:13 +0000
Manifest this update: Fri 17 Apr 2026 07:01:13 +0000
Manifest next update: Sat 18 Apr 2026 07:01:13 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: ouYHwGqvAqqLzK4BCpq5KKACdByZEMg7DHujCIW5rUU=)
2: dJUmGz-VHARh9iQCCVjAjqcYY24.roa (hash: 6l/C0aO7pVVh6TmumDnFhpRIJmTtsI9/rCHq3aG0LHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:63:b0:d6:cc:6c:c8:fd:bb:49:ea:21:0d:96:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Apr 17 07:01:13 2026 GMT
Not After : Apr 18 07:01:13 2026 GMT
Subject: CN=8d7844f2551733ec5872806ddd67120f5c13e3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:02:fe:4e:25:f4:78:a0:c1:51:c6:e7:d8:
d8:b6:0e:1c:42:b0:b0:c2:d9:23:b9:a1:0b:24:2f:
10:3c:d6:d5:8a:2f:f9:bc:75:3e:a7:3b:bd:a9:ed:
fc:91:15:9b:e0:16:18:7e:d4:8f:f7:a2:22:4c:7d:
27:90:0e:fc:c4:b6:82:7d:4e:3c:ca:0c:2d:78:84:
f6:92:84:50:82:8e:95:19:82:f6:26:6f:05:9e:d7:
0c:e7:80:e1:0b:49:02:b8:19:36:e6:7d:b5:30:33:
87:82:6b:53:a7:32:7f:41:83:3c:fa:18:59:b4:f5:
75:27:1d:9f:96:ac:f4:03:e5:39:7d:e1:59:2c:c2:
97:3b:5e:29:a5:9e:d5:d5:de:87:50:c0:06:85:14:
69:c7:5d:98:2a:15:23:59:2b:70:65:af:b7:9f:b0:
26:72:30:21:8d:0e:4a:ef:92:88:6b:63:52:da:75:
e7:81:fd:1b:96:d2:ee:45:d1:ed:cf:24:02:f6:d6:
58:89:d4:2e:66:e6:fd:af:96:8a:6e:24:33:22:7f:
65:80:e5:9f:6a:9b:c4:38:5e:8d:f5:7f:9f:bf:a6:
20:03:a2:d5:ab:19:7e:f0:26:de:3b:92:90:d7:cf:
2d:58:59:af:97:a7:09:7f:13:d0:61:d2:b0:43:bc:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:78:44:F2:55:17:33:EC:58:72:80:6D:DD:67:12:0F:5C:13:E3:D4
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c5:ff:61:cd:d3:02:43:ae:be:23:b4:47:2b:1b:5f:98:37:
1f:42:68:e3:37:b4:08:0c:76:88:63:d6:fb:a2:c4:eb:74:0c:
1b:39:8e:25:58:00:b5:83:17:ec:4f:ad:9d:f4:67:18:80:f9:
ed:ec:89:38:da:ef:d9:ba:ec:75:7b:e5:7e:72:fd:a1:62:e0:
5b:23:36:40:9c:b1:ea:da:ef:72:e2:42:06:ee:6c:b7:f4:da:
f9:45:27:01:60:de:f3:d9:d5:98:4a:7d:b2:f8:c4:e8:50:7e:
09:c0:b4:a3:e4:a3:03:eb:c7:a8:c1:c7:a8:d5:52:d5:3f:90:
72:4a:22:69:44:70:f1:6a:f8:19:24:36:03:e8:50:40:56:90:
18:8b:3b:5b:d3:08:4f:4f:72:41:d5:7e:ce:a2:5f:02:ea:55:
2c:aa:ab:a7:d5:94:02:bf:3b:0f:65:ad:8c:04:3c:58:b0:9a:
8c:62:87:34:4d:02:c3:3d:79:a9:ff:43:12:b5:f7:69:1b:f4:
40:39:64:b7:11:77:0b:7c:b9:1d:1f:92:e5:2b:51:17:9d:e1:
30:b1:53:6e:99:21:b6:49:c0:94:71:3a:8e:1f:76:29:bd:01:
3f:8d:84:a9:03:2f:ce:17:03:2b:96:39:41:15:6b:36:70:89:
01:e4:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:39 2026 by rpki-client