Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: 9250kGYwC0XaohaeeKRIpqGTAC7LTfIyLvqxxZOil9M=
Subject key identifier: A2:28:D3:38:36:81:D9:1D:3D:35:22:99:C5:4C:AF:04:E1:A0:3D:C9
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 019D9AE3821F7D8F0975B1046FEDA42A2D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:01:34 +0000
Manifest this update: Fri 17 Apr 2026 10:01:34 +0000
Manifest next update: Sat 18 Apr 2026 10:01:34 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: +LjSdMUFXrHY5bAMQOq7puzPugNeVMpcaezaMv6Tl1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:82:1f:7d:8f:09:75:b1:04:6f:ed:a4:2a:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Apr 17 10:01:34 2026 GMT
Not After : Apr 18 10:01:34 2026 GMT
Subject: CN=a228d3383681d91d3d352299c54caf04e1a03dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:8e:5f:c7:91:85:66:b1:2d:2a:8a:43:b6:
b1:e7:e5:59:1f:75:55:2f:9a:b5:43:eb:fd:ae:d3:
d2:13:88:c3:71:8b:38:9b:23:cc:63:14:57:b1:c4:
d8:17:96:cd:93:ac:32:c5:e0:af:72:6a:47:40:b0:
f6:db:a0:b8:7d:c2:3f:a5:74:b6:8f:7b:26:bd:23:
72:1a:eb:54:57:a4:7a:f8:16:38:1f:20:9f:68:44:
9f:6b:06:26:ef:94:98:a1:77:76:af:c4:a2:63:9e:
bf:7a:fe:67:73:b7:1e:d3:86:16:bb:f0:30:27:b5:
4f:38:31:10:f1:68:33:a6:77:77:f1:09:f9:6a:40:
8d:c1:b1:0b:e1:8d:6c:d2:6b:e7:45:b1:f4:fe:7d:
04:b7:03:e5:87:bc:d7:15:c4:d5:3b:13:61:55:ac:
e2:4a:3d:8b:9c:77:89:33:d8:d1:f4:3e:25:db:86:
85:ea:da:ca:16:a3:78:98:91:c0:92:b4:bb:c8:66:
6b:f9:41:be:f9:4a:dd:54:e7:92:d8:6d:fc:ff:ad:
55:d8:9f:b1:dc:0b:56:37:2f:e7:8c:76:9d:36:49:
48:56:ad:b6:e9:55:c5:ba:9c:cd:00:6c:ce:91:12:
42:35:ec:8b:e1:ff:37:4a:89:13:d6:cd:84:8c:80:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:D3:38:36:81:D9:1D:3D:35:22:99:C5:4C:AF:04:E1:A0:3D:C9
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2d:6d:be:4c:5d:21:ea:d7:54:6e:e5:69:79:0d:a7:ac:6c:
7f:46:e2:dc:ba:f9:e5:7e:1b:bc:be:e0:f5:ad:b3:ad:28:f4:
5b:c3:d9:50:5d:bb:5b:a1:07:72:a4:c5:a7:f5:ec:80:7b:c0:
54:45:7f:a5:e5:7a:8d:e6:d7:11:2b:15:3d:fe:52:dd:4a:f0:
c5:3d:13:b0:26:a0:1a:8c:37:b3:58:30:78:31:e5:9b:f6:23:
47:92:e7:4e:0c:15:2a:26:35:05:06:b2:a3:b7:59:d8:f3:cd:
06:fb:d8:ae:b7:72:a2:29:8d:e9:f4:15:09:4a:71:53:05:6c:
72:17:68:ac:ce:d6:c7:e5:1a:6f:00:52:29:3c:1e:2e:3a:b6:
27:e4:64:61:20:dd:df:2c:9e:8e:8c:6c:13:31:24:42:76:ba:
e0:ae:6f:0b:7d:32:27:21:1d:c9:51:59:bd:fc:c0:f7:6b:9c:
65:32:ee:d9:a8:c3:6b:bf:64:2d:2b:0f:14:94:30:84:e2:b0:
83:f4:fd:6f:48:cf:77:f3:33:66:5b:ba:83:02:f8:fc:af:4a:
70:75:ce:69:79:91:40:0b:ca:93:67:0f:f4:99:b8:8d:8b:2a:
f7:b9:57:97:62:0c:34:3f:10:ab:14:fd:35:3f:19:3e:0f:b5:
48:f7:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:22 2026 by rpki-client