Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: Xin20GPh7o6UcBTDxtgtW7Y6KcEhDA2RANJ2Zuuc7Bo=
Subject key identifier: F9:FB:87:6E:7C:B0:D9:B2:0F:01:E6:B6:27:25:6E:07:6F:A3:60:08
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 019D9AE37FB3069055276F558EC4D400E056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 1555
Signing time: Fri 17 Apr 2026 10:01:33 +0000
Manifest this update: Fri 17 Apr 2026 10:01:33 +0000
Manifest next update: Sat 18 Apr 2026 10:01:33 +0000
Files and hashes: 1: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (hash: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI=)
2: adEMxHyupcifqh018PDSo4aZYRU.roa (hash: 2ejGSNPMnDgazqPRclsg72M/nQyRhAE01Ub1Oiox0Y0=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: f26N9pLYDItW22/kZ5cKaOms6JZ4QnDvQc88FOcRWwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:7f:b3:06:90:55:27:6f:55:8e:c4:d4:00:e0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Apr 17 10:01:33 2026 GMT
Not After : Apr 18 10:01:33 2026 GMT
Subject: CN=f9fb876e7cb0d9b20f01e6b627256e076fa36008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f8:53:57:6b:94:e5:a0:ea:9b:c3:15:f0:ac:
31:62:f4:4f:58:5e:03:81:c8:b2:9b:7c:67:85:73:
d2:59:da:43:ba:35:55:49:a5:93:59:8f:19:76:bc:
6c:e2:41:0d:cb:f3:12:ae:1c:ac:17:bb:c1:11:71:
8d:49:c2:b9:c3:f1:12:90:c4:85:56:9d:24:da:6d:
59:d1:aa:14:1b:34:2f:73:c9:72:80:79:c8:eb:c3:
ae:e2:da:b2:23:91:08:75:f5:83:73:01:1e:da:37:
19:d4:63:85:78:89:ed:01:e1:0d:39:ff:0f:d5:60:
86:45:a1:fb:9e:38:98:2c:a5:15:2e:60:f6:5d:2d:
41:cf:ea:41:a7:02:14:23:30:a7:98:72:af:3d:c2:
73:1a:1b:e7:82:60:07:53:bf:93:6d:da:8e:34:26:
98:20:1a:7a:4f:1a:79:8b:ab:73:31:59:e3:f6:eb:
e7:99:22:f5:66:05:4b:be:db:46:a1:0f:07:8d:db:
cc:47:0b:10:14:a1:ff:5a:79:77:06:bd:09:e0:ef:
50:a1:a7:cd:37:d6:33:35:16:98:3d:33:9e:84:d1:
eb:14:5a:06:bc:bd:12:d2:8e:58:f8:11:bb:93:84:
b1:a6:32:67:1b:75:f9:d3:ba:17:19:3b:c5:bd:c3:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:87:6E:7C:B0:D9:B2:0F:01:E6:B6:27:25:6E:07:6F:A3:60:08
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a2:87:12:bd:8d:4b:ec:68:e8:26:90:3b:8d:33:c7:56:8d:
23:8a:29:7e:82:b7:1b:1a:d5:6f:95:97:22:fd:de:c3:dd:40:
10:4d:08:21:0b:4c:ce:08:a9:0f:19:13:e6:36:ec:53:c9:89:
b7:b7:84:87:9c:62:c7:fc:40:5d:1c:76:96:94:66:83:26:34:
07:30:b8:08:d0:da:ea:84:f0:87:b7:29:a6:9c:fb:51:b4:50:
0e:d8:89:ea:0a:b7:52:43:85:c7:c3:38:f3:c4:ce:b0:e5:01:
82:98:c2:ec:7e:a0:51:0c:af:7a:19:ba:dc:a3:62:cc:c7:74:
fa:00:67:76:d1:44:98:b9:5a:23:34:18:16:4f:ab:c4:e7:b9:
ed:5e:f9:ab:d8:e5:74:cf:9c:43:ad:aa:a5:3f:e1:b0:57:4e:
8d:e1:be:1f:7c:54:05:68:02:e3:fe:8a:23:de:a9:75:c7:d0:
47:f5:e4:3d:91:25:70:b4:b0:63:79:8d:49:d6:ec:37:b9:40:
be:6b:a0:6d:ff:7d:cf:c9:3e:ad:e6:6d:e7:35:ea:08:c6:14:
c7:ad:c1:68:00:72:87:63:f6:7e:fb:28:99:b8:27:21:54:83:
e8:70:54:ea:ea:09:99:2d:f5:a0:e3:bb:c7:3a:2a:b4:d6:59:
e4:29:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:19 2026 by rpki-client