Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File: wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier: KzJB8Qps/RLRq8LuUvogZgCxdKXvWuzTRVfVmbm7Gi4=
Subject key identifier: F1:CD:17:2D:9C:7B:3C:3B:D5:B3:6F:38:51:8B:64:D3:1C:EB:AA:BD
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial: 019D9B504484E6369DCC0758A1052B67F4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number: 07A0
Signing time: Fri 17 Apr 2026 12:00:21 +0000
Manifest this update: Fri 17 Apr 2026 12:00:21 +0000
Manifest next update: Sat 18 Apr 2026 12:00:21 +0000
Files and hashes: 1: J4rL1Jg5V2IoUUTVBjeovLJnAeI.roa (hash: HuC3dI4gjcfntzO7yeVJHjKTBqW9v5vPfeXmEq56k1k=)
2: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: edxMeWMk0XYjFd0mmN17V0SsvTzxiv+qedy5qm5+XKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:44:84:e6:36:9d:cc:07:58:a1:05:2b:67:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Validity
Not Before: Apr 17 12:00:21 2026 GMT
Not After : Apr 18 12:00:21 2026 GMT
Subject: CN=f1cd172d9c7b3c3bd5b36f38518b64d31cebaabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:6d:8c:86:33:e0:aa:79:f8:49:9d:c1:2b:
82:7a:3e:2c:55:90:b9:7d:92:43:c1:aa:a8:ca:10:
df:a7:58:b1:a6:8a:b8:7b:70:ee:2d:d3:de:22:df:
94:42:ff:1c:e4:3c:95:13:30:7b:22:11:93:d2:51:
73:74:9d:1e:23:1c:27:d8:7c:f5:c1:44:af:38:95:
5e:10:12:21:02:20:62:26:6a:bc:a0:f7:44:29:c8:
65:28:0a:59:f2:fe:cf:10:27:f2:4d:7f:1b:82:37:
79:61:fb:ab:e6:6d:9d:04:7c:b7:92:81:90:3b:5f:
26:58:cc:d1:e5:e9:a1:4f:ee:20:11:84:ac:ec:aa:
ff:c1:23:a2:7c:dd:68:35:09:a7:68:83:f6:f3:a0:
aa:1b:ed:a7:b3:e3:9e:d4:3d:03:2f:39:57:e3:a4:
d7:02:32:c0:11:51:85:ea:e5:ce:7d:9d:51:af:f9:
71:b2:71:e1:04:91:3b:5b:d6:f4:65:79:61:ca:49:
6e:e3:ef:6f:f1:86:f0:a8:a0:81:55:57:4d:49:94:
32:0a:eb:a2:f2:9f:76:3d:7d:ec:52:18:70:c1:39:
84:82:02:75:5c:59:b7:c0:f8:a7:a5:bb:50:d6:a9:
51:05:ca:d3:19:90:66:50:7d:aa:31:ec:42:e6:19:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CD:17:2D:9C:7B:3C:3B:D5:B3:6F:38:51:8B:64:D3:1C:EB:AA:BD
X509v3 Authority Key Identifier:
keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f8:0d:d1:a1:13:80:82:7f:c2:88:3d:4a:32:0f:6a:ac:d3:
67:d4:a1:6c:71:43:71:0d:6b:80:2f:bf:4d:b2:3d:bd:fa:31:
0b:bc:09:49:77:e0:70:59:4d:d0:9c:a1:b0:4a:18:21:31:d3:
79:90:84:d2:15:a0:e3:29:06:2d:3f:dc:1d:8b:f2:41:62:79:
6c:c5:15:a6:8c:10:ed:09:a0:72:94:c4:31:82:01:81:10:df:
00:46:9c:75:b9:b6:4c:d1:54:3b:fb:43:9a:a2:d3:86:0d:de:
b8:21:45:54:f6:7f:ad:a2:be:50:d5:a6:67:52:54:e5:ea:64:
c8:ab:fb:91:f5:0b:f9:c9:7b:9f:25:36:b8:d5:c6:cf:fa:59:
19:1d:04:6c:42:c8:e9:54:b6:aa:37:ea:ad:4a:16:78:f4:f8:
d3:bb:05:c6:aa:64:c1:68:bd:5f:44:5b:a0:e5:37:b0:db:35:
07:83:39:17:bf:84:47:88:f0:7a:b0:01:65:6d:80:b7:cb:ee:
81:d4:7b:ba:4e:d8:ce:1b:fa:b8:db:88:17:73:05:f4:01:3f:
2d:14:90:57:7e:2a:29:83:36:cb:af:d1:53:41:f0:f6:c0:6d:
de:61:01:4a:52:f8:67:ea:51:f3:4f:a8:62:41:43:1f:da:d8:
56:cd:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:04 2026 by rpki-client