Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier: 9NWETx6ZiMekovum/AVBLjYr9WauzDBOvCVvVHAS2w8=
Subject key identifier: 3D:98:45:08:B5:CC:0C:48:AF:45:B2:CA:85:B3:70:00:29:12:68:91
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial: 019DA52FAE9DFB80FF5AF75FBE337BA2FDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number: 0C38
Signing time: Sun 19 Apr 2026 10:00:58 +0000
Manifest this update: Sun 19 Apr 2026 10:00:58 +0000
Manifest next update: Mon 20 Apr 2026 10:00:58 +0000
Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: AOOJ13dqDdreGtPKDkW6QgA90gM1vfC96+xtrnR1+Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:ae:9d:fb:80:ff:5a:f7:5f:be:33:7b:a2:fd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Validity
Not Before: Apr 19 10:00:58 2026 GMT
Not After : Apr 20 10:00:58 2026 GMT
Subject: CN=3d984508b5cc0c48af45b2ca85b3700029126891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:bd:ef:2e:99:cf:6b:d4:2e:ff:1d:ec:78:
64:c2:f8:f9:db:39:c9:e9:71:97:38:a5:99:99:2d:
99:16:9c:60:4e:c5:19:bf:d1:e2:64:eb:f8:db:c6:
1b:0e:e9:c1:89:d8:4a:cf:fd:8a:26:9c:c2:57:64:
15:40:77:22:d3:3f:8f:bd:58:57:6d:a1:4b:44:f5:
94:71:bc:a7:e9:49:f5:7d:6a:25:1d:25:f9:95:64:
f8:d7:22:8a:e6:87:6c:f3:fa:33:cb:6c:40:eb:1e:
40:5b:6c:70:7e:68:a1:d3:47:ee:3b:76:b3:87:9c:
70:f6:76:e5:2a:1a:de:a0:30:bf:a4:5c:b0:22:67:
f3:b0:5a:28:96:e9:53:dc:3d:c2:26:fb:f1:81:0e:
c8:5a:06:34:27:2b:c6:d7:6b:c4:91:9c:aa:24:85:
d8:10:81:cd:5b:22:cf:b8:37:cc:4e:aa:bc:00:07:
0d:95:04:ce:f2:01:30:5c:15:49:d4:3c:dd:98:b5:
03:9c:70:cc:b0:7d:a1:1d:e0:3c:3c:4e:ee:5e:38:
50:8a:11:a3:18:75:d6:fb:04:3f:ae:50:28:8c:14:
8c:83:82:80:0f:60:86:a9:78:08:38:77:96:3a:01:
15:b9:49:6e:92:81:95:a5:8e:a8:b3:79:bd:30:af:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:45:08:B5:CC:0C:48:AF:45:B2:CA:85:B3:70:00:29:12:68:91
X509v3 Authority Key Identifier:
keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d7:07:c8:55:c7:4b:f2:89:e5:e2:3d:f2:48:82:ad:a9:c0:
41:f0:44:d6:b2:3b:db:05:66:bb:83:00:43:72:78:8e:0e:47:
a9:71:f0:16:78:d6:35:1d:80:41:9a:6e:b8:5b:08:90:fe:3a:
f9:71:8e:48:8f:0b:70:e5:1d:ad:3f:16:5d:67:32:fe:c4:39:
29:8c:1d:94:70:e7:9d:37:88:1b:e1:7a:0f:ff:ff:e6:49:5c:
1c:af:f0:24:2f:e8:41:57:03:8e:e6:a7:a7:a7:4e:c4:e8:30:
4d:db:1f:36:f1:15:13:48:9a:c9:91:b9:82:dc:91:69:a8:7a:
39:a1:25:c6:68:cb:5b:8b:57:b0:71:32:b4:5e:62:9a:bc:84:
1c:ce:b6:44:93:b2:a7:71:40:83:96:22:4a:54:24:78:71:22:
02:01:46:23:84:ab:43:b5:7c:42:3d:55:a7:05:d6:59:bc:d5:
70:a2:31:c1:cd:a6:c9:f7:07:ab:5a:b5:70:0e:08:e5:72:23:
81:1a:ab:ac:76:67:e5:7d:73:89:93:d4:fa:e1:b2:36:59:33:
b1:ef:87:09:53:d8:0a:29:dd:80:7c:9a:95:52:e3:17:82:f4:
92:cd:21:83:28:17:20:1e:89:7c:7b:25:88:aa:9b:80:54:83:
80:86:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:14 2026 by rpki-client