Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: PVMMSqeinJLaE4zTlgfG5bvFOIKOpBXFu22APU5KLkM=
Subject key identifier: DE:DF:8A:2D:EA:7B:14:4D:0D:08:14:20:D5:FC:B5:7B:51:07:14:CB
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 019D9A74DF8D76A46D69B5510E75516CEFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 120F
Signing time: Fri 17 Apr 2026 08:00:43 +0000
Manifest this update: Fri 17 Apr 2026 08:00:43 +0000
Manifest next update: Sat 18 Apr 2026 08:00:43 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: qQBTJW0+/s6NciMEd7SK22XS2vmLTGzUTikK5ITp26Q=)
2: fgkPvFZ2_f_B8Kes99MALTJ_h0M.roa (hash: he1XePUMYZj0hBporE6i0fgZ6VJq2FNLflajrVKGWrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:df:8d:76:a4:6d:69:b5:51:0e:75:51:6c:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Apr 17 08:00:43 2026 GMT
Not After : Apr 18 08:00:43 2026 GMT
Subject: CN=dedf8a2dea7b144d0d081420d5fcb57b510714cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:39:0d:80:73:fc:42:73:37:14:cd:b3:7e:
2e:6a:d6:36:e9:1f:8c:ce:e0:3f:cf:f3:d7:62:e8:
37:a5:4d:fa:21:2c:2d:a0:d8:2a:8f:ba:df:67:47:
f1:53:63:94:52:9c:47:9a:fe:51:d2:91:cb:b2:3a:
19:4b:44:25:fa:c1:34:41:44:c7:0b:48:c0:20:38:
b1:29:07:60:56:82:f4:a6:4d:57:92:e6:f5:d5:34:
62:ed:bb:20:77:32:48:98:d5:42:64:65:87:22:4c:
77:60:ae:aa:d9:d9:1a:e9:2b:0a:75:c7:7a:ae:ca:
95:e9:3f:52:89:cc:39:14:fc:5d:08:e7:4e:7d:99:
5b:64:f9:ba:73:25:f7:80:f1:8d:d3:19:b7:4c:08:
5b:41:57:43:51:2d:e7:7b:15:9f:e0:3d:00:5b:46:
00:67:29:13:e7:81:f7:d8:00:f8:0c:ad:25:39:61:
2d:9b:7d:8f:99:5f:a0:b6:e7:ad:77:ec:61:2d:c0:
7f:84:6d:1d:ee:db:77:0b:4f:ec:ed:92:8e:f9:e6:
06:59:de:20:a1:71:ff:3f:7d:8d:7c:96:81:9a:99:
81:e5:21:0b:db:ae:ec:81:b4:ad:8f:05:6e:a2:12:
e5:e6:a9:20:f7:fc:0f:c5:3d:bd:cc:de:32:49:7a:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:8A:2D:EA:7B:14:4D:0D:08:14:20:D5:FC:B5:7B:51:07:14:CB
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:6a:81:0e:e0:67:be:0c:24:f6:c4:4d:11:ec:19:7b:71:
a1:1f:09:59:ab:84:6e:10:74:17:7a:87:76:b2:16:6b:31:8b:
00:a3:0f:5f:68:13:33:56:00:15:36:fc:01:ba:55:32:d3:0e:
51:d6:59:47:13:f6:d0:b3:01:e6:c2:9d:73:48:e8:e7:21:b3:
ec:91:47:b1:00:17:08:e5:a3:17:bb:f7:c6:78:0b:9b:73:71:
2d:0f:00:18:15:66:ba:07:6d:5d:8f:48:6a:89:08:8a:af:ef:
3d:6f:87:08:6b:60:fc:d1:54:f7:d6:69:12:ed:18:c0:44:b9:
28:ee:b1:a8:5d:dc:a3:16:01:8e:82:5c:96:01:f7:c2:a5:ee:
b2:34:56:b0:2c:b2:21:0b:b1:e0:cc:44:fb:d2:a2:31:b0:3f:
1a:07:66:3e:e7:47:80:6c:77:2f:61:cd:46:5d:eb:55:93:2e:
ff:cc:0c:2f:b3:6c:62:a2:af:07:8e:6e:ac:85:60:30:83:3c:
8c:18:51:71:e5:ce:7b:da:08:ab:32:ae:fc:ae:e4:32:74:aa:
47:81:e1:5b:c0:2b:8d:ea:ef:7c:1e:66:4a:bf:9b:ea:6d:47:
1d:b4:43:88:f8:02:49:c8:23:f2:b2:aa:8d:20:af:f9:a2:70:
93:77:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:16 2026 by rpki-client