Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier: t3ugn2hndiybJtp6wEs4qbtulzN+6DcpzZQLEoQTsjI=
Subject key identifier: 85:23:79:16:A9:0C:03:5F:AB:B4:B2:C6:49:E3:2F:D1:6B:AA:70:D4
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 019D98864EEA79DD435453AC14765A42EB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:31 +0000
Manifest this update: Thu 16 Apr 2026 23:00:31 +0000
Manifest next update: Fri 17 Apr 2026 23:00:31 +0000
Files and hashes: 1: 2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa (hash: cybpkVwdsMajo+j6GQEPWPYPJtxhQXNnJjY27Ojj6kI=)
2: H-6m9OAus7SJdJgHPXm_EOjYjKw.roa (hash: gi8ow+847xYV+vC4uNruDQ8q4FPVqzKl6+lW3Re5puA=)
3: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: TSX8n7+uUkQXL3jZgtZYTXFE4c3C3iPOJIYgQ7hck60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:4e:ea:79:dd:43:54:53:ac:14:76:5a:42:eb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Apr 16 23:00:31 2026 GMT
Not After : Apr 17 23:00:31 2026 GMT
Subject: CN=85237916a90c035fabb4b2c649e32fd16baa70d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:02:59:cd:75:e9:77:1c:37:1e:43:65:bc:
a8:d3:04:88:59:08:2e:e2:b1:68:43:12:b0:d3:a1:
dd:a8:50:23:24:91:69:06:70:ee:3d:ce:6a:c9:41:
80:36:45:da:d1:e1:f6:85:06:48:f5:aa:04:c0:90:
a1:b5:bb:2f:65:16:5a:dc:07:4e:88:70:6d:84:07:
0c:8a:15:7c:f6:3e:9a:f0:dc:88:ba:2a:05:0b:96:
fe:8e:9c:aa:45:e7:cd:13:51:79:75:0c:19:b6:33:
20:cd:66:02:d8:3e:79:1e:40:39:74:6b:58:8f:eb:
0d:b3:24:f7:e2:5f:ee:9b:6f:aa:37:86:25:4d:ce:
c8:b1:b1:4c:76:38:3a:b2:7d:ec:b5:50:af:ea:bd:
a2:d7:0f:55:5e:a2:86:84:fa:ed:42:d8:b4:8e:06:
87:01:d2:75:0e:bf:61:8d:ba:4d:8e:1b:77:2f:cc:
dd:ff:97:52:2e:8b:1d:be:e1:8c:b4:db:15:6d:4e:
6a:74:2d:7c:26:65:9d:65:be:25:bc:24:f7:36:c9:
38:34:33:83:06:d8:53:df:8b:d3:d7:62:a7:32:17:
7f:d4:e2:15:63:85:92:58:8e:03:aa:dd:7d:95:76:
34:da:f8:83:cf:5e:36:6c:8a:a0:5f:e7:1e:02:3e:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:79:16:A9:0C:03:5F:AB:B4:B2:C6:49:E3:2F:D1:6B:AA:70:D4
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b1:92:55:65:75:16:b3:18:a4:89:cf:4f:75:8e:bb:92:f6:
9e:ef:b0:5b:f4:33:d4:0b:c7:6f:10:a8:62:5f:21:6a:91:70:
66:15:68:82:0f:7b:ac:39:67:55:1c:0b:88:bf:1a:86:43:84:
54:e1:41:25:68:1a:19:1b:73:6b:9d:f4:99:5d:05:fe:e8:ce:
f2:82:d1:56:68:10:72:a3:93:78:d4:79:5a:b0:bf:52:4f:ec:
50:e8:d0:f6:e1:7b:5d:07:89:77:f9:08:83:ee:b9:39:de:56:
17:8f:ec:40:4b:56:40:61:ba:5b:7d:03:ec:4b:20:49:f6:2a:
4d:d6:6a:46:9c:10:f3:83:88:ae:17:c6:ab:0e:c4:41:f2:12:
d8:75:72:c0:b3:43:96:0a:46:87:02:e0:35:4b:00:e4:ee:ec:
3f:f1:57:d0:53:7a:1c:0f:b5:11:f5:3a:af:98:b8:f2:a7:e4:
10:48:20:6a:6b:fa:6d:0e:36:7f:be:df:bc:2a:33:cb:6f:28:
1f:5a:d4:d5:a9:77:22:d6:bf:48:73:c3:80:aa:24:0a:76:07:
3c:9d:73:12:d0:b5:91:13:6a:36:a3:6a:b1:d8:05:e1:f2:9d:
7e:32:a1:e4:18:32:8e:de:b7:d6:0a:53:2c:0f:f8:9e:83:bf:
e5:0e:50:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhk7qed1DVFOsFHZaQusaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi
MDA1YWQwHhcNMjYwNDE2MjMwMDMxWhcNMjYwNDE3MjMwMDMxWjAzMTEwLwYDVQQD
Eyg4NTIzNzkxNmE5MGMwMzVmYWJiNGIyYzY0OWUzMmZkMTZiYWE3MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+gCWc116XccNx5DZbyo0wSIWQgu
4rFoQxKw06HdqFAjJJFpBnDuPc5qyUGANkXa0eH2hQZI9aoEwJChtbsvZRZa3AdO
iHBthAcMihV89j6a8NyIuioFC5b+jpyqRefNE1F5dQwZtjMgzWYC2D55HkA5dGtY
j+sNsyT34l/um2+qN4YlTc7IsbFMdjg6sn3stVCv6r2i1w9VXqKGhPrtQti0jgaH
AdJ1Dr9hjbpNjht3L8zd/5dSLosdvuGMtNsVbU5qdC18JmWdZb4lvCT3Nsk4NDOD
BthT34vT12KnMhd/1OIVY4WSWI4Dqt19lXY02viDz142bIqgX+ceAj7FNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUjeRapDANfq7SyxknjL9FrqnDUMB8GA1UdIwQY
MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt
ZGJiYjM1YzllMzc4LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4
LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7GSVWV1
FrMYpInPT3WOu5L2nu+wW/Qz1AvHbxCoYl8hapFwZhVogg97rDlnVRwLiL8ahkOE
VOFBJWgaGRtza530mV0F/ujO8oLRVmgQcqOTeNR5WrC/Uk/sUOjQ9uF7XQeJd/kI
g+65Od5WF4/sQEtWQGG6W30D7EsgSfYqTdZqRpwQ84OIrhfGqw7EQfIS2HVywLND
lgpGhwLgNUsA5O7sP/FX0FN6HA+1EfU6r5i48qfkEEggamv6bQ42f77fvCozy28o
H1rU1al3Ita/SHPDgKokCnYHPJ1zEtC1kRNqNqNqsdgF4fKdfjKh5Bgyjt631gpT
LA/4noO/5Q5QRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:56 2026 by rpki-client