Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: fKIFjJg81rPYQlkzaBr+Mo5rhkp4kS35ihMEWlBfP8Y=
Subject key identifier: DB:90:91:16:F8:F7:0C:CF:34:C9:BF:97:85:24:9D:52:5A:C9:B4:89
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 019D98F43244D38AC77683F3A7C49E69183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: dZSi20z+4dyWul5kxG3s2aIe21p6hRNCS4+IxmFevIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:32:44:d3:8a:c7:76:83:f3:a7:c4:9e:69:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=db909116f8f70ccf34c9bf9785249d525ac9b489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:c8:49:eb:03:26:0e:cb:c6:59:4f:21:65:
cf:83:13:20:48:5b:92:1f:94:78:fb:76:e5:e0:a1:
57:d9:ce:47:b5:2b:24:83:dd:3f:75:b5:bc:3b:92:
28:28:61:81:65:d2:99:7b:b0:5f:27:b7:95:a0:54:
a3:c2:24:b3:e5:70:b3:9c:a2:a5:8d:cd:e3:7e:6c:
3e:60:c7:33:d4:ae:af:bb:45:f7:ba:3a:3b:eb:f7:
5b:3f:d2:44:e4:10:f8:55:40:b0:6e:95:d9:63:7c:
e2:e5:ba:ec:c2:72:e7:d5:8b:88:21:e2:4a:16:40:
7d:9c:64:f0:a7:f6:aa:44:52:4b:b7:f9:db:73:b8:
90:a4:86:3a:73:b6:09:5d:de:9f:86:5f:7f:8a:4d:
f9:bf:ff:49:da:2a:45:fd:f4:02:43:4a:d8:bf:60:
d0:50:38:3d:1d:9a:df:d4:c1:03:c7:57:f9:03:71:
8b:c1:d7:e0:78:6b:29:86:f2:a6:19:3d:71:06:3e:
31:b8:8d:65:92:a8:61:46:03:46:c7:cc:43:79:8f:
e4:f5:32:d4:45:cd:2d:b6:70:0b:10:1e:8c:74:72:
82:e9:c7:8f:ea:23:06:8b:ce:26:30:97:c9:30:89:
bf:32:83:a4:55:e2:8f:04:6f:00:58:7b:82:15:1c:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:90:91:16:F8:F7:0C:CF:34:C9:BF:97:85:24:9D:52:5A:C9:B4:89
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:67:a8:da:a8:3f:a1:0a:37:cc:98:2f:30:76:26:da:8d:b8:
65:ca:f6:b5:65:5c:29:d1:fc:18:a5:44:94:48:80:32:8f:91:
d7:7a:6b:78:de:29:b2:c0:a6:b1:c0:a3:ff:04:80:92:9c:b8:
7c:37:1a:70:79:aa:ac:a1:df:14:0b:e3:26:76:5a:c0:c6:1d:
99:73:88:a5:8c:3c:d3:d7:2d:c7:10:92:ff:b1:a9:db:8d:6f:
fb:2b:61:bd:cd:2c:ed:cd:18:24:8d:c6:a3:1a:c9:ab:87:7f:
9d:01:bf:b3:9e:6d:4d:3e:d8:1f:44:0c:c1:48:3b:59:56:32:
da:d9:af:0f:a9:f8:46:07:1d:08:5c:95:10:c4:57:03:ea:4a:
e8:75:7f:cd:fa:e9:5d:60:4f:dc:37:03:ab:27:ab:6f:19:76:
6c:e9:03:c3:ab:aa:bb:e0:e4:f1:da:6e:ba:51:7f:1f:dd:1e:
48:42:13:c3:79:79:e1:06:91:6a:0b:b9:9b:15:de:4d:e5:3f:
e8:81:c1:7d:c6:83:50:0c:9f:4c:c2:f4:13:d8:1a:26:c0:71:
49:86:0b:ef:e0:f3:4c:9b:9f:d2:b9:43:af:e0:87:13:0e:e8:
1f:1b:60:cc:49:ed:41:74:2d:ee:0c:6c:0a:01:b1:e4:d3:05:
3c:66:a2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9DJE04rHdoPzp8SeaRg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYmQ2OWQ5OTg0ODRjMTM5ZmFjMTI2NWE2NDU3NDVmMzMz
M2NmMWQwHhcNMjYwNDE3MDEwMDMzWhcNMjYwNDE4MDEwMDMzWjAzMTEwLwYDVQQD
EyhkYjkwOTExNmY4ZjcwY2NmMzRjOWJmOTc4NTI0OWQ1MjVhYzliNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSjISesDJg7LxllPIWXPgxMgSFuS
H5R4+3bl4KFX2c5HtSskg90/dbW8O5IoKGGBZdKZe7BfJ7eVoFSjwiSz5XCznKKl
jc3jfmw+YMcz1K6vu0X3ujo76/dbP9JE5BD4VUCwbpXZY3zi5brswnLn1YuIIeJK
FkB9nGTwp/aqRFJLt/nbc7iQpIY6c7YJXd6fhl9/ik35v/9J2ipF/fQCQ0rYv2DQ
UDg9HZrf1MEDx1f5A3GLwdfgeGsphvKmGT1xBj4xuI1lkqhhRgNGx8xDeY/k9TLU
Rc0ttnALEB6MdHKC6ceP6iMGi84mMJfJMIm/MoOkVeKPBG8AWHuCFRwxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuQkRb49wzPNMm/l4UknVJaybSJMB8GA1UdIwQY
MBaAFFu9admYSEwTn6wSZaZFdF8zM88dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAt
Y2ZhOTczODRiYzlhLzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAtY2ZhOTczODRiYzlh
LzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0meo2qg/
oQo3zJgvMHYm2o24Zcr2tWVcKdH8GKVElEiAMo+R13preN4pssCmscCj/wSAkpy4
fDcacHmqrKHfFAvjJnZawMYdmXOIpYw809ctxxCS/7Gp241v+ythvc0s7c0YJI3G
oxrJq4d/nQG/s55tTT7YH0QMwUg7WVYy2tmvD6n4RgcdCFyVEMRXA+pK6HV/zfrp
XWBP3DcDqyerbxl2bOkDw6uqu+Dk8dpuulF/H90eSEITw3l54QaRagu5mxXeTeU/
6IHBfcaDUAyfTML0E9gaJsBxSYYL7+DzTJuf0rlDr+CHEw7oHxtgzEntQXQt7gxs
CgGx5NMFPGaiow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:24 2026 by rpki-client