Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: 4lffIe976fBuoOET1qE1PUSjJdykbBLwv7rehn5UvE4=
Subject key identifier: D1:7C:FB:70:64:70:49:05:A3:F4:2C:4E:97:51:8F:89:5F:D1:15:93
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019D9A06EB199F566A8C9C7E2EBEC39176BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0EC6
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: 7pKVdrBx2cW+PcuiwkvU5if+22OTGoUj6MVDiM5SGzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:eb:19:9f:56:6a:8c:9c:7e:2e:be:c3:91:76:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=d17cfb7064704905a3f42c4e97518f895fd11593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:f1:07:74:19:fa:fb:6f:a8:96:ae:15:d3:
b3:71:8a:6b:ba:24:b3:94:57:d7:3a:d2:50:05:43:
1b:da:62:1f:82:a3:75:e4:c5:69:cc:ac:6d:cd:ce:
eb:54:e9:fe:83:e1:5d:01:6f:49:ff:d1:c6:57:9d:
59:35:50:78:5f:4a:08:63:f5:f2:e4:71:5d:a3:94:
d4:36:e7:e2:9b:6a:98:6e:6d:7d:24:01:54:13:a6:
bf:59:74:e3:6c:a3:03:d9:d6:0c:40:10:45:5b:29:
32:81:08:45:e1:bc:b0:59:ac:4f:94:97:82:5b:1a:
a4:38:8a:d0:04:78:68:39:e9:27:02:5b:a1:e3:4e:
9c:f5:c3:50:e7:8f:c8:2e:d8:42:8f:6b:30:b7:30:
77:e3:f2:6b:de:e1:aa:8c:48:c8:79:5f:5c:fe:06:
4d:92:d9:eb:3d:3f:bd:3d:07:2b:b5:38:aa:7b:63:
4e:e0:9c:37:ff:8c:7a:03:38:48:da:2a:aa:1f:4e:
73:79:a3:4d:0f:3b:26:cf:fc:f0:ba:11:22:c9:ba:
1e:c0:4b:03:30:cc:23:c1:29:47:ea:c0:68:57:88:
f8:cd:c0:3b:2b:a5:32:77:8c:78:1f:60:8c:2d:60:
53:88:60:e2:55:34:0d:94:ab:1c:29:67:30:7c:e8:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:FB:70:64:70:49:05:A3:F4:2C:4E:97:51:8F:89:5F:D1:15:93
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ca:1e:c9:50:2b:c6:9f:9f:b2:79:ab:b4:5c:26:42:4d:61:
1e:d6:a8:a6:e2:c5:08:63:c9:22:60:fa:53:4f:f2:ac:56:94:
7d:87:84:5c:ee:91:a7:5d:7b:c3:67:6c:dd:1b:f7:6c:31:b7:
5d:d7:d5:35:8c:85:9e:76:5d:25:61:2b:51:46:42:2b:c4:8d:
1f:2d:2c:c2:cf:a0:44:ed:20:12:7a:af:c3:61:0b:cb:7d:70:
6c:34:1f:d0:c3:41:d6:21:df:23:38:6a:ec:63:f4:6d:68:92:
8d:27:bd:a9:fe:42:ba:0e:1b:01:1f:5b:15:9c:a3:58:b3:1b:
2e:62:f9:ae:2d:e2:3b:7a:57:19:53:35:ff:84:ec:a4:f3:33:
ee:cf:4f:c7:bc:6d:db:d0:f9:41:03:c7:12:84:5e:00:8e:4c:
28:39:7c:17:15:a1:f2:c5:fc:22:53:ff:f6:c7:b9:f8:99:4b:
f6:17:19:c2:bf:71:1b:5d:54:1a:58:2c:41:61:2f:9d:98:12:
1c:b1:35:f4:e3:23:64:a0:b8:ba:89:2d:4c:d0:29:e7:1c:d8:
62:6d:d2:90:be:a9:db:78:ea:d2:b6:67:16:16:96:dc:76:1b:
e3:a6:2d:e1:0a:70:23:9c:bc:d0:bf:89:80:81:d2:0b:a1:7b:
ec:6c:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:47 2026 by rpki-client