Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier: mQ8aQW84yXKJ9nOFEsUVsBG47ancwFze1FFpRXGGC7Y=
Subject key identifier: BC:43:F4:36:67:A4:DD:DF:95:A5:D2:6A:CC:97:86:A0:03:5E:DD:EA
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 019D97E20B445229290C8D2C2C3A3A28D030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number: 0D20
Signing time: Thu 16 Apr 2026 20:01:06 +0000
Manifest this update: Thu 16 Apr 2026 20:01:06 +0000
Manifest next update: Fri 17 Apr 2026 20:01:06 +0000
Files and hashes: 1: _7mKcHkP3uOTS3kjipFm2tPGwgM.roa (hash: ngQx3yfqLseWqUcTbW2AyI+1iXtC1eJXGPQDz+lGjDw=)
2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: yb04R68ljhP1vD3wR2CyYNr5uJbKKnWGp3aMgbK8Ips=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:0b:44:52:29:29:0c:8d:2c:2c:3a:3a:28:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Apr 16 20:01:06 2026 GMT
Not After : Apr 17 20:01:06 2026 GMT
Subject: CN=bc43f43667a4dddf95a5d26acc9786a0035eddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:98:66:a8:26:79:0c:40:92:e6:bf:69:85:
5a:59:64:a1:59:18:30:5b:26:00:4a:7c:55:8a:e2:
62:5e:dc:76:60:5f:84:9e:51:70:72:44:1d:ed:66:
1b:08:f8:20:41:5e:6d:28:48:fa:bc:b1:26:49:ef:
6d:22:ef:8e:92:1c:a1:bb:89:89:20:29:d3:02:00:
11:db:49:33:11:b0:46:22:d4:e4:d2:d0:15:e6:55:
e4:40:d7:1a:ff:6b:a0:d1:bf:12:e8:3b:0f:3b:6c:
a0:4b:73:51:e0:c4:55:43:02:d8:ca:a5:b8:4d:b0:
e9:e2:b7:95:d7:55:fc:fb:15:e2:9b:4c:c5:74:38:
db:00:92:fc:3d:cf:b8:aa:16:bf:c5:0b:70:4b:7d:
4d:5e:b4:38:f3:e7:6f:7b:ed:17:ce:2d:8d:3f:41:
d2:af:1c:55:c1:e8:66:77:53:42:ee:40:85:c9:96:
dd:e3:39:bf:88:77:42:a7:4a:c5:f9:f6:01:1d:74:
10:d4:40:99:ae:9c:90:44:a2:ed:cf:a0:76:1e:36:
44:9b:42:43:a7:18:1a:69:c0:14:a2:fc:03:bb:f4:
db:68:22:c3:25:ad:a5:09:a2:2b:55:b2:64:9b:9a:
9d:35:4c:96:85:d1:b8:71:fc:cc:d6:b1:a5:17:2e:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:43:F4:36:67:A4:DD:DF:95:A5:D2:6A:CC:97:86:A0:03:5E:DD:EA
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:76:98:17:7f:5c:cc:6f:a9:b9:27:54:33:ca:42:e2:06:92:
6d:47:5d:57:65:31:1a:6b:4b:05:8c:23:82:08:82:90:b5:c4:
d3:93:d3:c8:52:6a:91:f7:bc:4c:b2:c7:6c:dd:72:c1:1a:29:
a3:6e:57:ab:09:3d:2e:e2:76:26:03:3f:2c:a8:9d:b1:9c:24:
35:f8:a4:a5:ac:fa:6d:d3:26:51:9c:94:74:b0:82:dd:85:23:
47:5d:0c:aa:b9:d6:11:97:1f:f7:10:05:cb:0f:fb:5f:f9:a8:
6b:77:16:24:b5:a0:f8:8c:95:5e:fe:95:14:96:37:03:5d:61:
f1:b0:9c:0e:f4:c6:48:82:56:7e:a4:ba:a9:a3:f5:4d:e3:8a:
ce:82:d9:a2:24:41:83:6a:73:1e:e0:9f:8c:de:37:1f:53:24:
e4:7f:5a:03:ed:e3:de:5a:10:69:03:05:65:89:6e:4d:0f:2b:
d8:68:c9:1f:0c:96:d8:a4:9e:1b:e0:8b:00:44:03:f4:3b:07:
28:83:b7:20:f2:ec:a9:55:8d:dd:6a:33:cc:fa:59:7a:d6:21:
fe:7c:3d:88:9a:db:93:43:5b:c5:19:cc:1b:0f:1c:0d:ae:b2:
57:d3:09:92:8c:9a:8c:77:3b:77:15:e8:e4:74:10:18:2d:14:
b1:d6:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:35 2026 by rpki-client