
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: fhjgLGp5S97ehEDDgX9+mOEXw1Dh3Gsc/KzvrGUhkdE=
Subject key identifier: 58:32:92:94:A0:84:F7:68:69:42:14:1C:99:FF:55:10:88:C6:89:FF
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 019D9773E0E80ABFA2DBAA16E2540A44BD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 18:00:46 +0000
Manifest this update: Thu 16 Apr 2026 18:00:46 +0000
Manifest next update: Fri 17 Apr 2026 18:00:46 +0000
Files and hashes: 1: WhlF3-97zeKA9zwTPV4rysNOYtc.roa (hash: PZrfxCb0Q8TjoglsmZhLZgPlBsJLljiY6Rncu+AWpPI=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: pWCNUUHqomaY4MJDY64haAZyQmL60+3kF4zH2nEUE0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:e0:e8:0a:bf:a2:db:aa:16:e2:54:0a:44:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Apr 16 18:00:46 2026 GMT
Not After : Apr 17 18:00:46 2026 GMT
Subject: CN=58329294a084f7686942141c99ff551088c689ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:0d:8a:50:bd:5f:55:eb:dc:6b:7c:12:a6:
55:b2:8a:b2:8d:71:9c:a7:76:57:c6:ff:9b:34:92:
0c:d4:67:c0:91:60:c2:df:d6:4d:03:59:00:72:38:
38:8a:3d:31:58:ed:19:d6:d4:02:90:ba:44:14:fc:
59:6d:6a:52:04:b7:f8:af:fa:57:00:37:0f:73:c8:
e1:f6:09:34:a3:3d:5b:ac:e2:8d:25:24:e1:f7:19:
da:a8:db:e4:35:89:27:8b:3a:af:50:a1:bb:2f:03:
30:cc:8e:02:8b:68:9f:11:15:be:b0:f6:cd:66:b0:
d7:09:3a:2e:cc:c9:c8:c3:78:8a:cf:92:ec:bb:43:
31:4f:1e:54:93:1c:28:17:b0:6f:7c:63:7d:a5:7d:
85:a9:c7:7b:4b:ee:ff:92:d0:0b:b1:71:78:c3:9f:
82:4a:6e:0c:75:dd:68:98:3f:ec:54:69:dd:a3:b0:
aa:f8:3d:c2:1a:66:e9:61:46:1b:4e:b2:e2:ee:01:
fa:a3:21:2c:d2:3b:5d:4a:23:02:4d:c5:37:42:5d:
db:2d:d2:4d:f5:ad:1a:a9:b7:10:1f:03:2d:fd:8f:
96:26:f2:88:15:26:71:20:a5:6f:86:50:76:63:3e:
95:73:91:f2:7e:2b:c6:ca:ae:68:f6:39:17:c2:a0:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:92:94:A0:84:F7:68:69:42:14:1C:99:FF:55:10:88:C6:89:FF
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:91:88:b2:2c:84:1f:6b:84:79:c0:f0:f3:b9:78:a6:84:35:
03:c9:ea:56:56:8f:75:55:de:94:69:9a:25:6d:99:87:32:36:
6f:36:52:7f:c6:84:fe:d6:17:71:c7:34:cd:72:00:79:4f:80:
e2:50:a7:7a:1f:ff:1d:5f:09:56:df:cf:78:a3:37:ac:61:02:
9f:5a:b7:1e:18:43:49:c2:37:43:72:a8:25:e6:12:99:7f:77:
0c:87:88:fb:62:56:1d:3a:99:66:e2:c7:f6:76:e1:b9:cd:45:
c3:57:df:47:96:16:d8:eb:99:84:7b:4d:26:0a:16:46:8a:ae:
a2:49:0c:d7:0c:a5:68:ba:0c:5d:3f:73:c0:7a:aa:ba:e2:a0:
43:24:35:ca:42:ce:51:01:64:c4:67:b9:e7:bd:ff:c4:80:eb:
d5:c7:ab:e6:21:d5:a3:b5:cc:e7:c1:cb:fb:e6:94:76:7d:da:
69:b8:cc:8d:ed:88:86:78:c2:8f:41:8f:fa:db:f9:0a:3a:47:
27:a3:f9:f7:fc:2c:ee:5f:81:a9:50:66:48:1f:fe:fd:48:46:
22:ce:5e:75:da:cb:e7:45:aa:30:e0:50:ee:3e:a5:c5:52:ed:
4d:c6:72:0e:4f:69:92:26:26:35:bc:20:d5:b4:86:71:2e:ed:
76:62:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:40 2026 by rpki-client