Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
File: Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json)
Hash identifier: 08427z/obr58czvu6tHcM480cak1DmuDQoqps4MhSRg=
Subject key identifier: 3F:D4:16:CB:21:62:20:B8:14:37:8F:6F:BE:19:87:18:6B:71:1B:84
Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
Certificate issuer: /CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Certificate serial: 019DA4C1C56135816CE7225BC2C9B1D6DB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:00:55 +0000
Manifest this update: Sun 19 Apr 2026 08:00:55 +0000
Manifest next update: Mon 20 Apr 2026 08:00:55 +0000
Files and hashes: 1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: 2lS13d1FTmyhKR/BhczM2kODUj0X8WbVh8Pl3nzs0Bc=)
2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:c5:61:35:81:6c:e7:22:5b:c2:c9:b1:d6:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Validity
Not Before: Apr 19 08:00:55 2026 GMT
Not After : Apr 20 08:00:55 2026 GMT
Subject: CN=3fd416cb216220b814378f6fbe1987186b711b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:39:97:eb:84:f5:02:22:d9:ae:1d:76:e9:
aa:ac:53:93:40:a4:7d:03:89:d0:f6:7b:3e:39:83:
e9:82:42:be:ec:6f:69:37:83:a4:f4:9e:d2:f2:b3:
a8:93:d5:38:03:74:cf:ce:a0:3e:85:72:2c:92:97:
2d:4b:c5:35:0a:02:6b:2f:bf:2c:01:c0:95:95:bf:
d5:da:46:b7:24:2e:b1:16:aa:4f:f4:69:cd:a5:48:
57:8b:90:93:d6:c6:af:dd:0f:67:82:ce:03:61:71:
6a:d1:91:6b:7b:56:03:fb:01:48:24:f9:7a:72:37:
e5:9e:b1:fc:c2:d7:ca:25:43:0d:49:81:27:e8:a9:
62:ec:83:05:a6:af:0c:09:ec:61:a1:9f:02:ce:4c:
75:60:36:87:ac:bd:4e:79:10:7f:3a:98:a8:d3:96:
94:ba:11:0f:7a:c7:bd:cd:af:80:75:b9:20:f4:49:
7b:25:68:20:01:27:a7:0b:65:9a:11:0b:13:37:b3:
c9:fa:9e:b8:46:dc:e9:9a:c7:74:4c:08:f2:03:24:
26:a0:82:7c:7a:c7:3f:83:7c:a7:35:0a:62:54:8e:
15:0a:cb:41:73:30:8d:07:79:e6:3f:1b:c2:b8:c2:
15:32:08:38:f6:4c:59:a7:84:09:c6:a4:57:88:ea:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:16:CB:21:62:20:B8:14:37:8F:6F:BE:19:87:18:6B:71:1B:84
X509v3 Authority Key Identifier:
keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:d0:75:11:1a:40:1d:57:af:95:eb:07:32:02:22:2e:c1:
2b:d9:0a:9a:61:88:82:e8:c0:ed:6a:a7:c3:2e:ef:8a:74:ad:
78:b9:f6:a7:19:41:5a:2e:7d:c4:60:1e:12:29:a5:72:50:e9:
28:77:f6:38:1b:af:73:10:b3:8c:6f:e3:af:09:0e:69:4d:0c:
24:36:a6:85:5b:be:1d:d9:8d:72:1f:b7:87:2f:be:25:87:12:
16:91:27:53:3f:8d:58:23:82:c5:98:98:0a:a2:9a:19:c3:84:
c0:2d:0a:9c:bd:6d:d1:f5:5c:ff:be:58:9f:dc:11:00:cf:fb:
14:69:a4:90:ea:fd:3e:6a:9f:c6:81:82:0d:96:7b:a5:f4:37:
7d:51:5d:da:20:aa:41:fb:0e:a3:67:0f:99:29:df:c6:4e:97:
71:b8:af:27:8a:12:4a:24:01:e0:38:2e:ee:04:18:7f:d9:98:
35:d4:71:91:3c:7a:e0:45:ab:81:1a:a7:dc:b7:98:0a:5f:fb:
bb:e6:6d:46:98:cf:8c:2c:94:b6:dc:8a:8e:3e:00:6b:7d:66:
6a:af:40:54:56:df:40:69:0f:1c:4f:55:34:c1:3d:48:b2:c1:
a4:1f:74:3b:c2:dd:43:52:a0:7d:69:4d:4d:83:06:66:1d:3d:
a9:48:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:30:21 2026 by rpki-client