Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
File: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft (raw, json)
Hash identifier: w8f2fF8oMt74K1ZDaeczly9iRioX1trlzzxI43Zt5H8=
Subject key identifier: F5:FB:99:D1:82:CE:CB:26:4B:98:E6:E3:B2:CA:11:CB:C8:CF:07:21
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 019DA48AFB74F5387FE3B49E1EBE12B8DBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
Manifest number: 0B7A
Signing time: Sun 19 Apr 2026 07:01:04 +0000
Manifest this update: Sun 19 Apr 2026 07:01:04 +0000
Manifest next update: Mon 20 Apr 2026 07:01:04 +0000
Files and hashes: 1: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl (hash: 04knPr87o2azMgTsDUeLZ7HX9au9+LCt8G1dVkoIs08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:fb:74:f5:38:7f:e3:b4:9e:1e:be:12:b8:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Apr 19 07:01:04 2026 GMT
Not After : Apr 20 07:01:04 2026 GMT
Subject: CN=f5fb99d182cecb264b98e6e3b2ca11cbc8cf0721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:4d:18:7e:50:17:d3:9f:5f:16:cf:71:c8:
83:ba:50:a3:01:ee:15:17:96:9c:b3:33:7c:83:6b:
1e:87:7a:dc:e5:99:95:f5:ae:24:3d:df:d8:45:a8:
10:06:e5:41:98:83:8d:d4:ce:f0:d2:a5:81:f1:32:
69:c7:fb:d6:1f:26:82:1f:8f:61:e8:59:14:0b:b3:
e4:05:6e:c0:a8:13:ba:5f:72:d8:c7:68:91:91:21:
bf:19:76:d3:14:6f:1b:d8:09:bf:df:c9:e8:97:54:
64:aa:fb:a9:32:27:81:97:9e:5c:90:fc:03:1b:a3:
15:4e:39:8e:90:ca:94:2f:c9:7c:fe:4f:99:22:c6:
0b:13:f2:f2:57:b5:9e:0b:18:55:80:7e:4a:97:66:
88:e8:01:51:c1:ef:c8:dd:9a:ed:f1:68:bd:17:74:
21:b3:e7:4a:de:dc:b9:36:08:dd:3f:82:95:2f:7e:
f0:62:50:00:cf:60:1c:a5:47:c8:9b:91:83:2b:b6:
0e:41:b3:7b:2e:73:9f:e9:31:a5:a1:90:8f:c8:1e:
a6:a7:14:25:ba:75:60:7e:e1:75:68:6e:40:16:99:
a7:50:81:33:8d:8f:06:44:18:48:fd:6b:d1:fd:c1:
3b:e2:d1:ae:fb:dd:d2:7d:a6:45:86:f8:4b:62:f1:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:99:D1:82:CE:CB:26:4B:98:E6:E3:B2:CA:11:CB:C8:CF:07:21
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:78:00:14:5a:3b:0b:37:34:3a:d1:93:4f:08:2c:35:e1:d3:
08:19:03:7f:8b:6b:27:d6:31:71:24:33:af:2a:1a:47:6a:87:
88:6e:23:b8:0b:95:f3:a2:56:12:e9:70:eb:38:90:72:2b:1a:
42:88:bb:94:ea:c4:9f:1f:2d:18:18:3f:67:60:26:45:86:8b:
f2:dd:06:70:bc:96:00:0a:f8:f4:04:16:b5:e2:be:46:18:cc:
b7:23:b4:6e:57:e3:33:ad:ef:35:44:32:67:6b:85:26:9a:f2:
5c:20:a9:b9:d4:f1:5f:0b:2f:df:cf:80:3a:d0:e6:26:4d:47:
87:f0:c7:85:3f:40:c6:19:3b:35:6c:62:58:a1:6b:44:a4:38:
b0:2e:27:5a:9c:cf:5a:d1:5f:fe:42:30:f7:ca:8e:d0:ad:99:
90:38:b6:ed:dd:91:ba:2d:bb:4b:29:ef:d7:7e:db:18:60:68:
83:0c:a3:56:6e:f7:55:22:27:d4:20:b1:a7:ff:71:30:75:a0:
82:60:94:ac:75:57:66:96:72:0f:66:d8:02:2e:de:fb:86:93:
44:73:3f:bc:01:26:79:b6:d7:8f:e0:ca:3a:14:1d:ce:65:ab:
4f:0b:21:e1:6f:7b:a9:bb:01:fd:f5:b5:7f:27:87:b6:70:12:
6d:90:27:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kivt09Th/47SeHr4SuNvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzNmYWU5OWQ2NTEyOTg4NDVkMjJmODlkOGQyYjJlMWQx
M2JjMDQwHhcNMjYwNDE5MDcwMTA0WhcNMjYwNDIwMDcwMTA0WjAzMTEwLwYDVQQD
EyhmNWZiOTlkMTgyY2VjYjI2NGI5OGU2ZTNiMmNhMTFjYmM4Y2YwNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+lNGH5QF9OfXxbPcciDulCjAe4V
F5acszN8g2seh3rc5ZmV9a4kPd/YRagQBuVBmION1M7w0qWB8TJpx/vWHyaCH49h
6FkUC7PkBW7AqBO6X3LYx2iRkSG/GXbTFG8b2Am/38nol1RkqvupMieBl55ckPwD
G6MVTjmOkMqUL8l8/k+ZIsYLE/LyV7WeCxhVgH5Kl2aI6AFRwe/I3Zrt8Wi9F3Qh
s+dK3ty5NgjdP4KVL37wYlAAz2AcpUfIm5GDK7YOQbN7LnOf6TGloZCPyB6mpxQl
unVgfuF1aG5AFpmnUIEzjY8GRBhI/WvR/cE74tGu+93SfaZFhvhLYvGV9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX7mdGCzssmS5jm47LKEcvIzwchMB8GA1UdIwQY
MBaAFMNz+umdZRKYhF0i+J2NKy4dE7wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEt
MWRlNTZlNDc1ZmJmLzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEtMWRlNTZlNDc1ZmJm
LzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXgAFFo7
Czc0OtGTTwgsNeHTCBkDf4trJ9YxcSQzryoaR2qHiG4juAuV86JWEulw6ziQcisa
Qoi7lOrEnx8tGBg/Z2AmRYaL8t0GcLyWAAr49AQWteK+RhjMtyO0blfjM63vNUQy
Z2uFJpryXCCpudTxXwsv38+AOtDmJk1Hh/DHhT9Axhk7NWxiWKFrRKQ4sC4nWpzP
WtFf/kIw98qO0K2ZkDi27d2Rui27Synv137bGGBogwyjVm73VSIn1CCxp/9xMHWg
gmCUrHVXZpZyD2bYAi7e+4aTRHM/vAEmebbXj+DKOhQdzmWrTwsh4W97qbsB/fW1
fyeHtnASbZAnmA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:34 2026 by rpki-client