Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: CytiTdRpZT5VREjDfTcb5P5NC++9EQhzyaz+kgjiSrE=
Subject key identifier: 49:AF:D0:A2:36:8D:EA:93:4E:39:6A:58:DF:14:7E:34:48:70:3F:C4
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 019D9A3E51AFD288673F5CDC689BD90804DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:08 +0000
Manifest this update: Fri 17 Apr 2026 07:01:08 +0000
Manifest next update: Sat 18 Apr 2026 07:01:08 +0000
Files and hashes: 1: be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa (hash: iWxHjwfuXSnOXM+4EBopGhWz6sGJ/Fj0z8QWrUeSyfM=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: MB1R1koIWT0zOrhYsWYQGhCk5E14EQxas4PsNoMB4/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:51:af:d2:88:67:3f:5c:dc:68:9b:d9:08:04:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Apr 17 07:01:08 2026 GMT
Not After : Apr 18 07:01:08 2026 GMT
Subject: CN=49afd0a2368dea934e396a58df147e3448703fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fe:12:74:e6:4e:f0:c5:e2:8d:54:1d:d7:f2:
3b:a0:14:e6:79:12:13:2b:33:df:d1:7f:a3:8f:48:
ec:af:5d:a5:2f:92:c6:a3:30:f2:fc:24:5b:ed:c4:
dc:b5:27:9c:26:8c:4e:59:31:ec:df:58:b8:5d:82:
1d:f5:f9:11:50:3f:12:20:2c:ec:5d:06:5c:5a:44:
69:a7:5d:8c:93:5f:d3:9a:61:43:31:eb:ed:f7:ed:
78:fb:93:b7:fb:40:a6:dc:02:c7:7c:a8:25:d5:39:
82:ee:52:37:2f:af:9a:d0:7c:92:a9:11:08:4e:67:
fa:3d:79:a5:d7:76:6e:0b:b7:08:b0:78:7f:90:9e:
1f:10:d1:f9:9f:e1:80:b3:8a:cc:46:8d:2c:46:32:
97:2e:4f:69:7d:af:05:04:3b:29:cb:f1:80:bf:f2:
7c:1d:08:5d:89:34:3a:89:1a:76:52:71:e0:62:9d:
47:1c:cf:c5:e0:ee:2d:ef:48:64:a3:bd:80:66:42:
cd:5e:d3:ff:90:96:84:67:76:21:7b:62:c0:c2:a1:
dd:33:19:d9:c5:75:0d:90:f1:cc:8a:00:72:7d:ea:
39:b5:c2:c0:9b:38:72:87:be:ce:2d:0c:68:fc:89:
bb:67:51:00:f5:dd:da:44:9e:e4:56:4d:75:1c:ee:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:D0:A2:36:8D:EA:93:4E:39:6A:58:DF:14:7E:34:48:70:3F:C4
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:e5:41:c4:3f:9c:96:89:b7:6b:f1:15:39:6c:28:17:7a:
aa:c3:c5:c6:b6:86:ef:38:1a:8a:99:2c:f4:25:c2:62:4a:67:
7e:e6:10:0e:2e:ef:93:56:fb:eb:2d:33:c8:f3:b5:3f:64:fc:
5e:06:c6:9f:87:ab:c5:d9:81:d2:c5:ec:b5:15:99:f1:c3:8b:
10:0d:64:5d:a2:f2:15:24:7f:4c:02:db:35:d2:96:bc:17:f6:
9e:11:ff:9c:c1:8e:4b:a3:67:41:8d:1e:dd:e5:5a:2d:c1:c2:
c5:bf:30:f6:66:61:a2:c9:53:5e:a6:07:d5:65:5a:7e:dd:bd:
cb:0c:88:b0:c8:40:c7:25:e9:5f:72:e1:57:fd:be:18:17:69:
32:8b:ae:3f:ad:03:d7:7b:81:3f:f9:21:3a:59:dd:a5:17:2d:
db:1a:83:43:b6:89:20:78:d9:5a:4c:45:ac:5a:3c:b0:7f:cc:
24:91:0a:6f:9e:97:7f:00:f4:eb:8b:41:b6:d3:01:a2:ca:4e:
da:68:57:26:39:f4:ae:90:f9:ea:79:4d:52:c6:5a:d9:6c:a6:
49:3e:18:1c:28:47:4d:a4:a5:36:f1:b9:ac:b6:d6:86:27:87:
18:75:0c:bf:22:de:12:95:03:58:13:56:91:da:08:64:18:9f:
b4:f4:1b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPlGv0ohnP1zcaJvZCATfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTdhNGE4MjE3MmIyMDZhZmVlMWMxM2QyOTZlZTI2MDM4
NWI1NzEwHhcNMjYwNDE3MDcwMTA4WhcNMjYwNDE4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg0OWFmZDBhMjM2OGRlYTkzNGUzOTZhNThkZjE0N2UzNDQ4NzAzZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f4SdOZO8MXijVQd1/I7oBTmeRIT
KzPf0X+jj0jsr12lL5LGozDy/CRb7cTctSecJoxOWTHs31i4XYId9fkRUD8SICzs
XQZcWkRpp12Mk1/TmmFDMevt9+14+5O3+0Cm3ALHfKgl1TmC7lI3L6+a0HySqREI
Tmf6PXml13ZuC7cIsHh/kJ4fENH5n+GAs4rMRo0sRjKXLk9pfa8FBDspy/GAv/J8
HQhdiTQ6iRp2UnHgYp1HHM/F4O4t70hko72AZkLNXtP/kJaEZ3Yhe2LAwqHdMxnZ
xXUNkPHMigByfeo5tcLAmzhyh77OLQxo/Im7Z1EA9d3aRJ7kVk11HO4GuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmv0KI2jeqTTjlqWN8UfjRIcD/EMB8GA1UdIwQY
MBaAFMAXpKghcrIGr+4cE9KW7iYDhbVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMt
OTBhZGVjODVkZDg1LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMtOTBhZGVjODVkZDg1
LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVm3lQcQ/
nJaJt2vxFTlsKBd6qsPFxraG7zgaipks9CXCYkpnfuYQDi7vk1b76y0zyPO1P2T8
XgbGn4erxdmB0sXstRWZ8cOLEA1kXaLyFSR/TALbNdKWvBf2nhH/nMGOS6NnQY0e
3eVaLcHCxb8w9mZhoslTXqYH1WVaft29ywyIsMhAxyXpX3LhV/2+GBdpMouuP60D
13uBP/khOlndpRct2xqDQ7aJIHjZWkxFrFo8sH/MJJEKb56XfwD064tBttMBospO
2mhXJjn0rpD56nlNUsZa2WymST4YHChHTaSlNvG5rLbWhieHGHUMvyLeEpUDWBNW
kdoIZBiftPQb7A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:45 2026 by rpki-client