Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: P+riqcG/NFUbgycBetOkTG/wkoXnVdd+LK9COj5zQFw=
Subject key identifier: 2D:07:BE:28:F7:6C:4F:65:7B:9E:EA:B1:2F:4D:CF:84:D4:D5:A8:55
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 019D99D04FEE6C43E95928784259CC24CFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: PM2xutOtApHOjMCZG4fRaGN19-A.roa (hash: cmOF+MvtNkb0EB47v73B7IdtgsKunZ1G49rR7QDbH58=)
2: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: E0V415Lm0WVstj8vT4cDVup2AXVDltIKeFYbRgWYqpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4f:ee:6c:43:e9:59:28:78:42:59:cc:24:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=2d07be28f76c4f657b9eeab12f4dcf84d4d5a855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:f8:ee:e8:c2:af:52:4b:3f:74:94:31:ab:
66:de:a2:51:0b:a9:29:20:6f:13:20:d9:b0:33:f2:
5c:e9:80:c2:97:08:4f:23:c2:7b:4a:9c:1b:44:77:
a2:73:8e:16:a2:33:d8:46:37:2d:c9:c5:be:fb:f4:
93:05:d1:8a:4e:fa:18:4d:7d:a3:e1:f3:a1:42:37:
84:91:a2:36:69:4b:c1:52:47:21:d5:1a:0b:48:2b:
f5:5c:1e:a5:18:8d:e2:83:ea:80:e6:16:b0:32:c2:
64:8a:ac:ba:33:f8:3c:f3:14:d3:83:95:61:6c:5d:
e9:e7:81:53:d5:0d:54:82:d5:3d:99:5f:a8:0d:8d:
bb:10:a6:fb:87:90:73:3b:5a:e2:ad:76:68:2c:84:
02:4b:57:31:3d:f4:50:cd:2e:ed:0c:a0:86:1c:97:
70:8f:99:01:69:81:10:28:5c:1a:bf:b9:05:b4:bb:
62:6a:a3:94:af:d6:36:f5:6d:9b:03:17:ad:aa:ef:
10:5f:b5:d4:3a:33:2d:73:90:6d:84:4f:99:7f:42:
da:13:5c:a0:6b:f4:0f:ea:cf:57:80:10:6d:cc:78:
68:47:e6:c9:26:d5:6f:93:3a:49:fa:1a:8f:90:36:
2a:6d:27:bc:53:a3:28:15:65:be:0b:f2:f3:23:c5:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:BE:28:F7:6C:4F:65:7B:9E:EA:B1:2F:4D:CF:84:D4:D5:A8:55
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7b:bc:9c:77:44:8c:c4:05:ab:06:7f:43:3d:39:ef:01:e8:
e4:ab:3a:14:1a:91:a4:70:1b:b0:a3:2f:4e:b7:30:58:a7:a9:
d4:b4:70:91:90:0c:c9:2d:e8:71:dc:f4:ce:92:8d:e6:b3:29:
5c:14:f9:39:1d:a2:db:1d:dd:13:47:a8:a4:20:3a:9e:88:d4:
c3:d8:77:07:e2:71:dd:2e:ff:41:99:a8:5a:f6:3f:58:e8:ed:
35:65:6d:fc:e0:49:5b:91:54:03:d1:93:c4:59:9c:a7:76:b3:
88:ee:64:ee:6a:fb:22:2d:2a:6d:aa:55:ab:c2:1b:d5:15:37:
70:2b:cf:67:40:8e:03:f4:24:e6:cc:3f:3d:9b:8e:b5:6e:56:
dd:31:99:3c:0a:5f:78:72:a3:b2:5e:25:2e:93:58:e5:4c:3d:
85:2d:67:ec:c9:22:2c:ce:94:de:75:68:e0:26:37:2b:02:70:
4f:b4:f0:0d:a3:ea:b4:2d:dd:06:12:76:d6:92:a8:84:00:3e:
92:2e:51:36:71:67:d3:a7:ef:dd:05:c4:0a:91:8e:df:e4:96:
de:46:a5:51:05:05:61:34:26:7a:63:df:68:16:f6:19:db:6c:
bd:cb:ac:d8:7d:64:a9:98:4d:bb:db:30:f6:24:39:01:45:de:
77:5f:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:53 2026 by rpki-client