Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: KgaMc69VSYyiwJ1iup82Y8RepAKM0fbj0rDDrIJlbbI=
Subject key identifier: 20:1E:55:A0:56:19:9B:99:37:8C:92:F1:43:D7:23:25:D7:AC:AC:5D
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 019D99D0812AA93BAA2B94AD449E982C4497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 1466
Signing time: Fri 17 Apr 2026 05:01:11 +0000
Manifest this update: Fri 17 Apr 2026 05:01:11 +0000
Manifest next update: Sat 18 Apr 2026 05:01:11 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: 8Kemv2RmLPT2iwZHBtteSVxVWEnD6HUWVDDMN5PmTcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:81:2a:a9:3b:aa:2b:94:ad:44:9e:98:2c:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Apr 17 05:01:11 2026 GMT
Not After : Apr 18 05:01:11 2026 GMT
Subject: CN=201e55a056199b99378c92f143d72325d7acac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:38:85:3e:d6:e5:28:ef:fb:d2:ef:48:d1:
bd:7c:2e:59:47:f2:38:d4:60:cf:34:76:8f:4a:83:
8d:80:74:03:d0:f0:38:c2:9d:15:4b:93:d2:df:03:
6f:0c:a0:e0:a6:06:aa:99:9a:6d:b0:a7:86:1c:3a:
23:ab:04:d2:ee:1d:14:ec:07:24:e3:e1:a0:a2:68:
21:dd:f0:cf:19:06:43:14:fb:91:c0:47:8a:98:79:
32:e7:94:d5:2f:71:5b:ed:36:d9:04:93:e9:45:de:
a5:61:fe:59:f4:3d:68:f2:3a:62:05:f4:92:29:27:
8f:ca:0f:4d:5b:10:5a:22:81:b7:f2:76:f1:6c:e0:
c9:78:5a:3a:d4:62:5b:83:02:09:c2:b3:4f:62:34:
e6:c5:57:d5:54:15:56:65:7d:ee:1a:82:99:dc:34:
f1:a1:df:33:05:31:57:3e:55:2c:27:e0:1b:34:99:
12:37:21:8c:1f:4b:09:07:9c:56:60:91:08:4f:01:
28:9c:6f:5e:e1:1b:01:3e:71:c4:f5:93:65:3f:6f:
e0:1a:c9:0d:4d:b9:d0:ae:f7:a2:6e:98:d0:5c:90:
d9:ab:10:b5:8c:2d:f5:5e:93:e8:0d:34:37:bf:1e:
b2:59:ee:c6:e5:2a:ca:a8:12:28:d2:8f:05:20:51:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:55:A0:56:19:9B:99:37:8C:92:F1:43:D7:23:25:D7:AC:AC:5D
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7b:e7:df:1f:57:17:34:57:9c:56:c8:02:62:04:1a:06:06:
35:85:f3:09:8b:f9:70:78:e4:ca:57:14:47:d1:eb:90:81:ce:
8f:05:b4:cd:a6:7d:3d:5e:82:80:90:59:28:d5:9a:94:6d:56:
a0:7a:01:73:1c:e8:49:98:1d:0c:49:d9:6d:94:ac:61:95:03:
ba:ee:2f:07:5f:0a:b1:aa:be:f6:fc:85:8a:b2:ff:33:8b:40:
9c:7c:ee:49:99:92:e4:9e:84:eb:cc:89:80:11:a4:6f:a7:eb:
44:a9:3b:6c:94:55:0b:50:ff:a7:47:98:ed:26:83:1d:f1:63:
c9:e1:11:14:a9:c2:64:6d:d2:75:31:7d:bf:cf:7a:45:82:53:
1e:03:9e:0b:f5:8a:56:7c:b6:ca:d5:fc:d9:cf:3b:73:00:b1:
bc:e0:6a:15:31:4d:37:e0:b6:c0:40:04:64:92:58:1e:26:ea:
65:a5:4d:a2:22:b8:46:52:23:09:59:a6:18:62:23:68:a4:d3:
3c:f6:4f:c3:f8:b5:be:d7:c8:88:f0:ba:38:c5:61:1e:fc:0e:
81:15:a9:00:23:55:92:14:11:36:6b:44:a6:49:9f:77:ac:25:
b7:9a:ed:8b:66:17:f5:a3:ac:4d:81:32:cd:a7:f1:c8:2c:4b:
fa:9e:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:32 2026 by rpki-client