Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: ptlXM5ilV+iaEvUv5AWdmmRXVN2kzaflFJK12OgnWmo=
Subject key identifier: 9E:D4:8D:F8:0D:62:E3:04:83:BF:BB:3A:EC:0A:5A:12:35:CF:08:6D
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 019D9AABCB8E6746716FDBF2B1DACBF62218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: epu072M-yH5fn0wfi8GRSm2aacI.roa (hash: 9aUM3YHdPt6HdRiEkTchPF8BsPvndsWsaCnn8YIY3Mc=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: GcRmRhG3Frgv0fstRlUVMP/fhCOZ2wgLeZHPDSvPM/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cb:8e:67:46:71:6f:db:f2:b1:da:cb:f6:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=9ed48df80d62e30483bfbb3aec0a5a1235cf086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:ac:15:99:3e:96:a4:f5:17:db:4c:c8:9b:
c1:1f:aa:7c:03:86:2f:c9:77:96:24:f2:a0:7b:eb:
b6:5a:e4:51:bb:49:05:cd:7a:bd:93:76:c1:31:ee:
9c:1d:44:5e:c7:fe:c1:8a:44:e4:e3:0a:2b:0b:98:
e7:25:3c:24:ae:d7:80:c4:c5:4f:c8:ad:d6:5b:de:
61:4f:b6:1a:db:4b:65:7d:85:6c:d5:85:0b:f9:d7:
32:2e:9d:89:b4:4b:73:16:24:ff:c2:8a:a1:c2:c7:
fe:f1:7e:d8:76:5b:0f:6e:b4:a1:f0:bf:ba:ca:3b:
0f:c1:b2:21:6e:c1:26:dc:6a:e6:7b:6b:99:06:1a:
6d:d3:53:bc:b5:7a:67:66:97:3e:ef:05:26:4e:64:
9f:65:bc:89:81:7d:8a:ca:30:d8:a4:cf:ec:7e:08:
37:ef:0e:75:a0:a3:e0:19:7e:89:f8:95:22:48:a5:
62:2e:12:22:0f:20:c2:40:0f:05:7d:f6:ab:d0:24:
ee:ed:56:37:cd:52:01:11:c5:a7:20:61:a4:b6:e7:
f5:8e:ac:ff:8a:0c:46:54:44:5f:dc:ad:5f:91:9f:
c1:3d:5b:63:ca:56:be:b1:4c:15:6e:ad:40:71:39:
4a:a1:44:46:40:bb:d9:cc:e4:dd:27:31:d9:12:0c:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:8D:F8:0D:62:E3:04:83:BF:BB:3A:EC:0A:5A:12:35:CF:08:6D
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:66:37:c2:6a:e8:cc:a8:c7:12:10:91:23:1c:6b:b4:3b:
b6:d2:c1:97:09:92:cc:6f:9b:16:f8:c1:19:cc:78:b8:3f:97:
9f:2e:dc:b7:d3:84:2d:9a:5e:ae:67:10:f1:8a:67:43:95:70:
91:84:85:5f:ef:f3:80:9c:05:8d:37:a1:61:3c:c9:7d:7a:80:
67:b1:fc:ba:ba:50:18:12:5a:0b:d1:ca:b6:d6:22:61:c5:f8:
bb:60:36:52:f9:1f:2a:7a:7c:65:5a:c4:5c:b0:a5:d2:18:02:
34:aa:f3:51:a2:05:3c:95:31:3b:0a:c6:44:56:06:97:81:1a:
ef:89:a8:d8:a5:5c:0a:fa:27:a9:e6:4e:ac:bc:5b:dd:38:a6:
93:96:98:63:c5:65:da:cd:e7:62:26:0c:e4:d3:e0:85:0b:86:
b6:40:56:20:fb:82:ff:c3:b7:8a:ce:71:13:ae:42:1e:0e:ef:
40:4e:4a:d3:dd:10:ab:fd:9a:19:d5:3b:a1:7a:95:04:f5:3f:
13:cd:49:15:43:56:c4:e5:52:93:04:fd:c8:c9:e9:a6:cf:53:
6e:88:38:9b:72:3a:2b:aa:c9:df:2e:08:01:d8:4a:21:0c:54:
e4:da:79:c4:a8:8c:70:ec:b9:e9:fd:da:42:b2:ed:9f:f8:e8:
42:93:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:59 2026 by rpki-client