
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: 6A3wOwsOP9usQzkiEToMw3a6HggOk+81HNqaogmgItc=
Subject key identifier: 31:59:6B:6D:35:79:9E:CC:4D:4F:CF:DD:C0:5D:60:B3:82:92:7C:47
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019D9B87F0E85B6C341F5C41125A95D77D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 186D
Signing time: Fri 17 Apr 2026 13:01:10 +0000
Manifest this update: Fri 17 Apr 2026 13:01:10 +0000
Manifest next update: Sat 18 Apr 2026 13:01:10 +0000
Files and hashes: 1: MQ6sWToCB3mumMKgqU-7hS8fOpI.roa (hash: xhgcVHl7BJsW6MydRWNrXzoXNfS0GYn0WspMbhtJ6Ns=)
2: UGUSM9hVA7KNGP7ZI953Rb9GwC4.roa (hash: fiNb23qzbYBvgPKusu1s3CPZalyy1OSv2RbVYQYIa5Y=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: ZU+o6mJgQy0gBAjUoEmupqV9g+FcfVQUR7jBcUNsmsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:f0:e8:5b:6c:34:1f:5c:41:12:5a:95:d7:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Apr 17 13:01:10 2026 GMT
Not After : Apr 18 13:01:10 2026 GMT
Subject: CN=31596b6d35799ecc4d4fcfddc05d60b382927c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:3e:51:cb:93:9e:78:9b:17:59:20:fc:82:
18:29:3c:f6:92:02:a5:70:8f:b1:77:d0:b8:48:6e:
c6:12:02:4b:90:af:99:94:fa:a8:19:71:ea:4e:7c:
76:f7:39:ea:b7:a9:c9:c0:91:f9:92:6b:f0:11:c6:
3f:fa:53:3b:f8:75:cb:cd:36:b8:43:e3:c3:ac:bb:
88:5b:7d:04:6e:56:18:b1:83:63:6a:3e:82:dd:82:
96:1a:49:9c:86:27:ad:03:4e:96:41:00:de:5e:4d:
bf:90:ba:89:83:cb:db:a9:e1:bf:a0:a2:dc:5a:0f:
c0:85:c7:d5:5b:5b:57:0e:d1:f5:f1:94:34:df:de:
9f:47:1f:c0:a6:b5:9f:b3:dd:d7:7c:f6:72:85:4c:
b3:6a:1d:ff:d3:59:31:c1:e3:7d:21:e0:7b:35:5f:
69:c9:18:f1:53:de:6d:1a:f5:f1:38:6a:5f:58:79:
a1:ad:f3:5a:15:66:44:16:a7:72:19:77:0b:42:f0:
be:d3:96:41:ea:1a:af:68:50:18:52:62:03:d8:2f:
29:6b:a2:9d:d2:0f:2c:28:53:e8:3c:9a:da:26:0f:
d9:de:5d:70:5d:d5:34:06:17:cc:ca:c1:34:77:cb:
8c:91:03:05:93:6d:5a:25:b1:5f:17:6f:ea:ad:cf:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:59:6B:6D:35:79:9E:CC:4D:4F:CF:DD:C0:5D:60:B3:82:92:7C:47
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1c:ca:a6:c0:71:52:69:12:6d:6e:e9:b6:1d:50:d6:87:82:
1a:04:0b:76:a6:34:a9:f7:73:83:21:48:d9:cf:44:5b:24:43:
9a:42:6f:a5:db:0b:a8:55:41:23:f4:27:42:66:05:64:dd:c4:
27:a3:4d:57:f7:bd:c5:2f:ff:3e:f8:ac:ac:75:35:5f:27:2d:
75:1f:2b:b2:40:a3:38:3c:49:96:79:ea:8f:be:e8:de:26:20:
eb:ea:d3:19:17:7c:f4:ad:4f:f0:eb:ed:35:aa:9d:4f:83:d3:
f9:bc:3f:42:7e:bf:c5:73:a3:e2:d2:45:fc:aa:1b:a1:a3:0e:
ff:ed:ab:1c:43:1f:94:b1:20:4a:47:1f:67:6d:21:f0:9c:64:
c5:78:c8:08:13:bf:9a:38:3e:54:9a:30:bb:e1:f2:f8:2c:31:
1e:ca:ae:74:73:a9:69:fb:6a:fc:50:b2:a1:ce:9a:b4:03:39:
55:8e:c2:e2:25:ff:c5:b7:75:cd:a8:64:70:ff:ed:74:fd:3b:
8f:13:3d:87:e6:d1:20:48:e2:6a:7d:c2:e0:df:41:ff:8f:a9:
47:89:8b:04:4e:ff:c9:82:91:e2:a6:6c:9e:f1:6a:01:15:b2:
0b:fc:0b:0e:b9:87:39:07:ea:9c:8b:7a:d7:cb:af:df:06:c9:
b0:29:c9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh/DoW2w0H1xBElqV130KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTEwYThhNTI1ZGM5YjFlYzBiMTU2MGQwOTBhNjQyNjhk
NDJlYzQwHhcNMjYwNDE3MTMwMTEwWhcNMjYwNDE4MTMwMTEwWjAzMTEwLwYDVQQD
EygzMTU5NmI2ZDM1Nzk5ZWNjNGQ0ZmNmZGRjMDVkNjBiMzgyOTI3YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtE+UcuTnnibF1kg/IIYKTz2kgKl
cI+xd9C4SG7GEgJLkK+ZlPqoGXHqTnx29znqt6nJwJH5kmvwEcY/+lM7+HXLzTa4
Q+PDrLuIW30EblYYsYNjaj6C3YKWGkmchietA06WQQDeXk2/kLqJg8vbqeG/oKLc
Wg/AhcfVW1tXDtH18ZQ0396fRx/AprWfs93XfPZyhUyzah3/01kxweN9IeB7NV9p
yRjxU95tGvXxOGpfWHmhrfNaFWZEFqdyGXcLQvC+05ZB6hqvaFAYUmID2C8pa6Kd
0g8sKFPoPJraJg/Z3l1wXdU0BhfMysE0d8uMkQMFk21aJbFfF2/qrc+ewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFZa201eZ7MTU/P3cBdYLOCknxHMB8GA1UdIwQY
MBaAFMJRCopSXcmx7AsVYNCQpkJo1C7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODct
OWE4OTU0NjdkYTg1LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODctOWE4OTU0NjdkYTg1
LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBzKpsBx
UmkSbW7pth1Q1oeCGgQLdqY0qfdzgyFI2c9EWyRDmkJvpdsLqFVBI/QnQmYFZN3E
J6NNV/e9xS//PvisrHU1XyctdR8rskCjODxJlnnqj77o3iYg6+rTGRd89K1P8Ovt
NaqdT4PT+bw/Qn6/xXOj4tJF/KoboaMO/+2rHEMflLEgSkcfZ20h8JxkxXjICBO/
mjg+VJowu+Hy+CwxHsqudHOpaftq/FCyoc6atAM5VY7C4iX/xbd1zahkcP/tdP07
jxM9h+bRIEjian3C4N9B/4+pR4mLBE7/yYKR4qZsnvFqARWyC/wLDrmHOQfqnIt6
18uv3wbJsCnJZw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:48 2026 by rpki-client