Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: LO9MXudjlf88fmY0IsUM/X4qjc32iMGCX6J1uVaEmGk=
Subject key identifier: F5:46:34:83:4E:4D:A1:0A:47:3E:B5:E2:86:36:DD:2F:0F:7C:99:9F
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019D9C2D2C15AD5EA6E93BAE2FD79DF4DE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 16:01:39 +0000
Manifest this update: Fri 17 Apr 2026 16:01:39 +0000
Manifest next update: Sat 18 Apr 2026 16:01:39 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 8zK5aMeC7g8fi9EgGpJX5J1FP9hqvpurUua8xAHziaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:2c:15:ad:5e:a6:e9:3b:ae:2f:d7:9d:f4:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Apr 17 16:01:39 2026 GMT
Not After : Apr 18 16:01:39 2026 GMT
Subject: CN=f54634834e4da10a473eb5e28636dd2f0f7c999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:c4:cd:78:21:95:88:e1:df:cc:e2:7d:b5:
66:a5:cd:f0:cc:48:30:e5:b9:6d:03:cf:04:0e:f7:
2d:d0:04:51:a1:1e:6b:13:eb:0f:bc:15:44:e8:4f:
43:01:70:a0:7f:bb:7f:4d:16:4e:71:9f:00:d7:4c:
8e:2a:bb:c8:d1:8e:b2:cf:e7:5d:04:1b:5d:56:2c:
85:5f:eb:a2:38:2a:0b:ba:36:ca:3b:1c:30:c6:23:
97:84:b8:6d:3b:f8:7e:f1:23:a3:a7:c6:63:54:d4:
e7:0a:66:ea:03:77:8f:e2:8f:da:c1:cd:d8:1c:22:
ef:a4:96:12:e8:c8:b9:10:49:24:c9:33:51:04:21:
4c:33:3f:4f:d8:bf:86:76:5e:50:1b:fe:ed:92:57:
de:ec:81:27:4f:e1:4d:98:1e:f7:6d:d6:03:d6:a2:
e8:76:ac:1f:d9:bd:34:31:de:f5:89:53:52:11:da:
e4:13:ee:a6:48:e5:67:e5:5a:ec:98:d7:62:b0:4e:
72:88:3b:2b:bb:01:01:f7:2e:6c:81:7c:38:b7:1c:
31:59:23:8d:dc:5d:3e:32:62:08:9c:16:a1:cf:6f:
74:98:72:00:34:9b:99:61:c7:59:d5:80:44:db:d8:
35:5f:89:7f:e0:00:e9:11:48:5e:90:53:52:f4:40:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:34:83:4E:4D:A1:0A:47:3E:B5:E2:86:36:DD:2F:0F:7C:99:9F
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6a:94:20:86:7a:73:11:f9:53:35:50:5c:96:34:84:9e:f5:
e4:6a:cb:aa:c3:9f:e0:a2:f4:37:23:93:94:c4:6f:68:a7:74:
10:ff:d0:bf:1a:43:32:e0:0e:36:f2:ad:94:06:a4:39:a4:d0:
9b:bd:6e:75:a0:75:12:16:1e:f7:50:cc:b4:bb:ac:b7:6b:53:
a3:a6:9f:18:20:54:c4:a7:05:bf:42:df:92:4b:08:46:ec:89:
c4:18:18:27:cf:17:05:05:c9:53:a6:2b:10:95:b6:71:a2:f3:
d6:a6:3c:54:5e:4a:b9:20:9f:86:f5:fa:40:33:b2:3f:de:78:
60:9e:19:cc:34:59:21:70:19:65:3c:98:9f:86:e8:d1:ee:ed:
85:63:11:7a:56:07:5b:c4:11:31:86:0b:1e:de:d1:19:f1:48:
2c:f9:e1:94:33:32:28:80:ca:80:3f:df:fa:5b:88:01:32:94:
ad:cc:ea:d7:b1:b4:7b:7d:8c:d8:1d:bb:dc:22:dd:29:aa:01:
a4:52:d4:37:ee:a2:41:0b:94:be:86:40:d4:a5:e5:6b:98:9a:
30:fd:20:8d:c0:61:78:17:07:3a:81:03:85:58:59:9d:a3:d8:
6d:13:f5:c4:fd:74:f7:85:9a:d4:be:0d:2c:48:00:70:91:e2:
ad:b7:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:22 2026 by rpki-client