Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: OXlLN0CmoUj3EOjPDTYE73z3C1IW5+GBJKTuZVBu1g8=
Subject key identifier: CB:A0:48:D5:67:8B:52:0A:11:A1:D7:B1:E3:23:2F:9B:3C:A2:36:08
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019D98F4DD2D2EE5018FB784C1AD000AE86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 08DB
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: gESsJAze+ZJq0J6T1VEuFJaA0lLDkcMpNakpJC/8ZRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:dd:2d:2e:e5:01:8f:b7:84:c1:ad:00:0a:e8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=cba048d5678b520a11a1d7b1e3232f9b3ca23608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:23:6a:45:14:85:12:01:12:ae:e0:a8:82:
2a:b2:77:fd:c1:eb:ef:ee:69:68:db:68:bc:de:37:
72:49:2c:44:e9:f7:a0:dd:2a:05:c0:be:8f:53:e4:
7b:3b:f9:b2:97:44:a5:d8:78:c9:8a:7d:0d:b0:46:
61:0f:f9:b2:7c:24:3e:92:a8:ac:80:e0:e4:08:f2:
1e:e8:00:6a:ec:ee:bd:d9:b8:bc:a9:85:5c:39:37:
39:21:ea:4d:4a:19:51:55:0a:02:19:1f:12:5f:4a:
94:28:c1:46:50:73:50:74:c8:8e:16:17:fe:38:7d:
f5:84:95:ea:1a:50:92:ba:e1:78:da:6d:e8:4b:79:
62:b0:da:4a:51:c2:3b:2d:65:41:d6:39:c2:f3:0f:
01:86:46:4b:7a:8e:e8:6e:a5:47:bd:79:73:1d:e8:
44:4e:94:e9:d9:6c:ba:cc:4f:48:bb:5a:44:33:ec:
dc:66:9f:c1:52:ae:42:90:b4:12:40:b2:b8:c9:ad:
d0:ec:36:2d:4c:3c:87:c8:7d:33:74:58:68:2d:86:
49:71:be:8c:60:a5:d4:68:a4:2d:2f:c0:52:80:e6:
95:ad:f6:d6:b5:98:78:75:11:30:f9:fa:e9:37:dd:
3c:0e:64:c5:89:d7:d9:b3:77:ce:de:7a:e7:dd:bc:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:48:D5:67:8B:52:0A:11:A1:D7:B1:E3:23:2F:9B:3C:A2:36:08
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6f:07:f3:07:74:00:37:cb:41:54:84:bd:68:d2:58:36:f0:
5f:99:53:e3:56:34:68:ae:9a:b2:ae:65:6b:4b:e2:46:fa:15:
62:10:f3:af:01:ea:db:84:57:68:ef:75:c3:05:0a:85:bf:6b:
57:db:a6:5e:ae:4c:b3:ab:53:90:3e:8e:1f:18:03:db:5b:08:
37:9d:52:5e:8d:bf:fe:1b:6d:66:05:be:28:23:89:62:71:4f:
c9:f3:44:85:82:2a:d2:4f:91:2e:79:cc:63:f0:19:89:1e:93:
77:aa:3e:46:93:b1:71:91:45:a4:b1:9b:fb:d7:95:91:e6:2b:
94:69:e3:8b:45:40:a7:b6:84:e5:02:e0:56:34:54:21:d1:b6:
d1:07:cb:41:d2:00:15:6e:25:c3:db:c6:de:82:ab:b4:d1:a1:
77:9a:32:1a:82:43:da:d0:3a:2e:c5:f3:d8:4d:ca:95:d7:be:
85:da:52:b1:35:e9:3c:97:83:d5:57:45:b1:4a:4b:0c:d8:81:
88:56:fe:9b:fe:44:1a:53:79:0f:6c:de:71:e7:67:39:03:75:
00:12:7f:67:36:43:84:76:2f:0c:d7:01:8c:24:f4:9a:2c:5d:
ec:36:71:58:a1:fe:6d:06:fa:2f:8f:26:a3:04:c9:db:db:d3:
cd:17:e4:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9N0tLuUBj7eEwa0ACuhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ3MjRjYTU5YWRkZDBmN2Y4MTA4YjAxMDU5Nzk1ZjM0
ZDMzNDUwHhcNMjYwNDE3MDEwMTE3WhcNMjYwNDE4MDEwMTE3WjAzMTEwLwYDVQQD
EyhjYmEwNDhkNTY3OGI1MjBhMTFhMWQ3YjFlMzIzMmY5YjNjYTIzNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYojakUUhRIBEq7gqIIqsnf9wevv
7mlo22i83jdySSxE6feg3SoFwL6PU+R7O/myl0Sl2HjJin0NsEZhD/myfCQ+kqis
gODkCPIe6ABq7O692bi8qYVcOTc5IepNShlRVQoCGR8SX0qUKMFGUHNQdMiOFhf+
OH31hJXqGlCSuuF42m3oS3lisNpKUcI7LWVB1jnC8w8BhkZLeo7obqVHvXlzHehE
TpTp2Wy6zE9Iu1pEM+zcZp/BUq5CkLQSQLK4ya3Q7DYtTDyHyH0zdFhoLYZJcb6M
YKXUaKQtL8BSgOaVrfbWtZh4dREw+frpN908DmTFidfZs3fO3nrn3bwrZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMugSNVni1IKEaHXseMjL5s8ojYIMB8GA1UdIwQY
MBaAFMFNckylmt3Q9/gQiwEFl5XzTTNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgt
NGY1NjRjZTA3MTI2LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgtNGY1NjRjZTA3MTI2
LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW8H8wd0
ADfLQVSEvWjSWDbwX5lT41Y0aK6asq5la0viRvoVYhDzrwHq24RXaO91wwUKhb9r
V9umXq5Ms6tTkD6OHxgD21sIN51SXo2//httZgW+KCOJYnFPyfNEhYIq0k+RLnnM
Y/AZiR6Td6o+RpOxcZFFpLGb+9eVkeYrlGnji0VAp7aE5QLgVjRUIdG20QfLQdIA
FW4lw9vG3oKrtNGhd5oyGoJD2tA6LsXz2E3Klde+hdpSsTXpPJeD1VdFsUpLDNiB
iFb+m/5EGlN5D2zecednOQN1ABJ/ZzZDhHYvDNcBjCT0mixd7DZxWKH+bQb6L48m
owTJ29vTzRfk9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:34 2026 by rpki-client