Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: enWJ8McbN5grRo5cynr60UuIeF3SUYDWUrUptET/ncA=
Subject key identifier: 22:4B:3E:FB:4E:88:37:94:EA:85:01:E8:D1:84:6A:A0:DD:5A:53:CE
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019D9AE391DBF13CB437809328A34D8B236C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 17C2
Signing time: Fri 17 Apr 2026 10:01:38 +0000
Manifest this update: Fri 17 Apr 2026 10:01:38 +0000
Manifest next update: Sat 18 Apr 2026 10:01:38 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: zKhm7zvrR/icO7EicwAkoWe427SkpihHm4FuO9qII18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:91:db:f1:3c:b4:37:80:93:28:a3:4d:8b:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Apr 17 10:01:38 2026 GMT
Not After : Apr 18 10:01:38 2026 GMT
Subject: CN=224b3efb4e883794ea8501e8d1846aa0dd5a53ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:24:76:e0:02:dd:f9:75:19:f6:82:18:c8:
d4:a4:d5:6a:f7:c9:0f:a3:d8:2a:a7:03:50:2d:4e:
b7:8b:b9:ff:35:4f:f6:da:0c:a3:ef:d4:b0:b6:3b:
63:a6:f1:af:7a:a6:83:39:78:80:e3:cc:14:05:21:
d8:dd:95:15:d5:1f:b1:dc:08:73:c7:68:43:0d:c7:
f6:6c:62:0f:17:67:55:2b:17:42:47:c8:11:cf:f5:
22:17:c9:5d:99:ac:98:14:f2:51:cb:8c:a6:cd:18:
be:68:a3:cd:62:19:f0:e0:0b:4a:35:e5:a0:3d:86:
4b:b1:2e:18:1f:52:cf:85:7e:2b:6c:0a:e1:7c:de:
d4:98:d1:5c:ad:54:4b:46:64:99:2d:ff:8f:d0:7f:
cd:e4:0e:dd:ff:8b:e9:ae:01:a0:14:e5:e0:0d:50:
1a:a5:94:4a:51:7a:66:0e:83:bd:ba:e8:1a:d9:5e:
78:0e:02:4d:bf:1d:3e:85:38:bc:fa:26:b2:58:e3:
66:20:13:10:7c:5d:c5:e4:23:fb:b7:d0:ff:3c:d4:
98:3d:13:ff:54:aa:80:f5:5b:6b:d9:7e:b7:89:29:
d2:da:7f:ee:30:41:b4:22:1a:10:61:9a:db:2e:31:
35:2a:de:57:2e:25:c8:d6:96:03:1c:b6:75:8c:7a:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4B:3E:FB:4E:88:37:94:EA:85:01:E8:D1:84:6A:A0:DD:5A:53:CE
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:28:c3:f4:c1:52:09:de:14:35:29:17:43:a2:59:42:3d:
80:89:c9:4c:a3:60:a0:a6:b8:3a:f0:cc:bb:5d:37:87:d6:31:
03:6a:17:ee:71:06:0a:53:c4:77:82:e1:76:8a:02:8d:8d:69:
8d:15:f8:80:5f:f0:e2:68:1d:95:af:94:89:ac:f8:8a:6f:6e:
8f:2a:0a:cc:4f:07:d3:15:33:9a:c5:7c:c2:bb:e4:2f:b8:33:
32:5b:c4:61:4a:18:70:d5:ca:5c:06:d9:ca:8a:e3:43:ec:39:
6a:17:74:de:32:c6:5f:0c:94:c6:55:5d:59:e9:03:c0:a4:db:
2e:cc:6d:10:fa:84:e1:ff:21:be:b2:49:42:7c:a6:3f:58:a6:
82:90:c2:f7:0c:67:f9:ce:ee:93:b0:58:11:73:cd:e6:6d:bc:
af:37:f2:00:67:d1:75:e6:ec:89:33:97:c6:83:79:b9:b3:7e:
16:00:df:eb:85:e6:b5:7d:80:01:5a:dc:9d:21:6f:19:bb:b5:
ff:6a:22:7e:3b:17:36:22:1b:e0:bb:29:0c:68:3d:47:aa:75:
d9:80:bf:13:cf:ce:b1:eb:a7:f5:de:c1:1f:39:13:56:a0:e8:
99:39:03:ab:af:84:c2:90:90:e3:58:4c:1a:75:53:af:00:0d:
88:6d:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:30 2026 by rpki-client