Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: tRcbfkcS8EsipXJdyfpQ4ebb2CSm5uCTrVyprlFuyt0=
Subject key identifier: 78:A2:47:B1:33:51:CC:22:FB:21:C4:58:E0:01:1A:5F:85:51:C1:95
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 019D9CD1210DCC3ADD469166EF10BE0E5122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 0828
Signing time: Fri 17 Apr 2026 19:00:44 +0000
Manifest this update: Fri 17 Apr 2026 19:00:44 +0000
Manifest next update: Sat 18 Apr 2026 19:00:44 +0000
Files and hashes: 1: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: wMaqesGHVEcCZjV84Cye38qsBVRVqfVAJlZVN1Z20XU=)
2: pCg_IO1cPrzNc2xa1m7otiwxh4Y.roa (hash: xhDhbtSEarX85N5AGFHu5oduKKvgeHiQNe7PQ5nfYFQ=)
3: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (hash: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:21:0d:cc:3a:dd:46:91:66:ef:10:be:0e:51:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Apr 17 19:00:44 2026 GMT
Not After : Apr 18 19:00:44 2026 GMT
Subject: CN=78a247b13351cc22fb21c458e0011a5f8551c195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:18:8d:05:f4:3f:79:88:cb:f3:35:25:bf:b0:
46:53:c1:e2:04:20:ee:83:19:95:39:20:66:9f:4b:
df:f4:59:02:b2:0c:ce:42:0a:d2:34:27:ad:35:d8:
73:57:9d:7b:3b:38:50:f3:63:f5:74:7d:43:f5:6b:
cc:3d:84:b6:08:b7:29:37:d2:33:45:0c:26:22:2f:
53:50:04:e3:14:3c:0d:ff:ec:a7:0b:89:2e:5d:9d:
bb:98:af:81:77:19:fb:0e:ed:50:00:93:d2:0d:0c:
89:b4:5f:09:9c:56:08:40:73:cc:fd:60:2d:0e:fe:
17:85:ae:d5:43:0b:97:89:7f:36:2c:67:34:c2:73:
89:ca:fe:d0:4c:2e:cc:7c:87:2a:54:88:73:a2:a0:
bf:b1:8c:91:ef:46:d6:1b:de:f3:41:68:4c:06:1f:
0b:07:c4:7a:9b:63:88:dc:fb:9a:99:03:f6:05:ac:
b8:07:cd:f3:80:ba:bb:93:fa:f3:95:8c:23:e0:d2:
9d:01:c7:80:03:ce:f8:c5:c5:1c:9c:14:ef:d0:12:
29:d5:0a:4b:38:e5:50:77:9b:23:0c:c6:ee:f3:28:
63:7f:d4:e6:d1:63:61:4d:15:d5:ed:77:f1:d7:02:
21:a5:34:6b:1d:aa:d8:7a:0a:b0:2a:b8:a9:37:f7:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:47:B1:33:51:CC:22:FB:21:C4:58:E0:01:1A:5F:85:51:C1:95
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bc:79:f5:71:ca:e3:a1:3d:41:d0:fb:9a:6f:59:fa:eb:fd:
87:74:e4:5c:82:5a:22:91:31:6f:37:d3:9b:84:6f:b0:ae:9f:
04:9a:d0:c7:99:e3:b7:c4:13:9c:f1:ac:79:7d:3e:0e:77:82:
75:e3:85:c7:1c:72:33:90:66:87:0a:10:43:01:39:e7:b0:14:
b6:94:85:ad:2a:50:c0:30:d2:0a:07:45:2d:57:4a:95:67:7c:
ba:31:4d:89:eb:05:d8:e6:09:3b:f8:b3:6b:93:96:59:f7:6f:
bc:ed:34:f5:66:2a:5e:8f:69:d6:de:11:9d:3c:89:3e:73:98:
cb:5d:67:95:0d:05:f6:ad:35:b3:5a:3e:d9:b4:c2:70:3e:d3:
4d:e1:88:09:08:cf:21:de:3f:b0:05:29:5d:2a:02:b9:a3:c1:
4e:e8:9b:3d:bf:ec:5a:3c:fb:a3:89:84:3a:04:3d:2a:87:14:
01:2d:80:03:5f:3e:64:c8:3a:e2:b3:f6:bc:ce:90:38:6e:cd:
14:ad:1e:12:d8:65:87:c9:19:b6:b0:12:10:a4:cc:fd:a4:10:
e4:a2:c4:67:66:c1:8e:1d:40:87:dc:96:0f:b8:25:c7:4c:28:
7e:d2:72:7a:48:4c:06:b3:09:d1:41:82:cc:18:25:36:f4:18:
f6:60:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:39 2026 by rpki-client