Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: vCK95nH3wQ/LBLo4Lu+CMl6HTnRvrZzb02id5xa+/sk=
Subject key identifier: EA:7D:87:57:EB:B2:C3:B7:EB:0C:2E:C7:00:FA:A0:2B:40:3D:42:20
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019D9998E15DC1AD146FC94AA45F4369DF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0E37
Signing time: Fri 17 Apr 2026 04:00:26 +0000
Manifest this update: Fri 17 Apr 2026 04:00:26 +0000
Manifest next update: Sat 18 Apr 2026 04:00:26 +0000
Files and hashes: 1: hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa (hash: vntZWOVkcSUsnEymKfN5wS2x8DI+HCyMmnVf/ey0knI=)
2: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: Dl1JffVhHjQ3jRSVNOfofHrpNNkDer08JiRfnboYFw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e1:5d:c1:ad:14:6f:c9:4a:a4:5f:43:69:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Apr 17 04:00:26 2026 GMT
Not After : Apr 18 04:00:26 2026 GMT
Subject: CN=ea7d8757ebb2c3b7eb0c2ec700faa02b403d4220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:15:f0:8c:77:8c:3e:88:6b:74:7b:ad:e0:
21:3b:d4:fd:bc:b0:e2:4b:83:d1:13:7f:7b:11:22:
96:e3:e0:2a:d4:0d:c3:6a:25:fc:fa:1b:5a:22:2c:
0b:51:c2:20:8f:48:0a:15:c2:91:58:03:48:bc:31:
2b:53:aa:cf:0c:90:53:47:92:4a:47:1b:8d:2c:52:
21:57:13:ec:79:c6:96:cb:01:0e:07:4d:92:ab:ed:
ae:f2:0f:11:eb:82:7b:39:d7:25:cd:dc:b9:64:f8:
08:d4:b5:81:98:4e:86:18:2b:94:2c:1d:e9:0c:77:
af:e7:a1:fd:d0:19:3d:0a:59:3b:8a:89:cf:26:95:
97:47:a8:57:da:d0:0f:f3:0c:8b:40:f7:41:e5:af:
1b:e3:8a:5f:97:9f:be:85:15:22:21:e8:12:18:01:
c1:db:cd:74:10:d8:6e:e9:b6:9c:69:30:bb:87:41:
cc:3d:fc:1c:57:61:88:d7:33:a4:65:dc:2f:21:82:
5a:4b:de:c6:63:76:0e:d4:c1:5f:12:6e:a5:ed:cf:
24:18:35:9f:02:db:2e:72:2d:28:e8:d1:09:c6:0d:
bb:11:33:13:50:d8:d0:82:f8:da:df:c0:45:1d:9b:
fa:40:8d:d3:83:7b:8e:6b:3d:68:a9:ad:62:e6:1f:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:87:57:EB:B2:C3:B7:EB:0C:2E:C7:00:FA:A0:2B:40:3D:42:20
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2d:d9:3d:89:a4:23:dc:07:3d:34:76:52:96:93:a5:24:63:
3e:b4:79:76:20:5b:78:3d:79:86:74:87:ae:9b:56:2e:99:36:
14:61:99:12:42:0b:e7:0d:96:ec:5f:1b:8d:e5:93:ea:b0:51:
6a:e8:b4:09:f5:8c:63:02:71:e8:e9:fc:11:a0:40:4f:4f:ce:
51:ae:5a:e0:3c:e5:72:40:12:bf:05:0a:bd:a0:91:a3:ae:cc:
21:4d:6f:88:d7:45:0e:46:5c:ac:c8:23:d3:fc:b9:f0:be:18:
cc:ea:28:25:a9:32:2e:ac:8b:42:6a:11:d4:de:6f:d5:e1:b8:
50:b3:3c:fc:8e:55:2d:18:88:21:d2:46:fe:3e:8d:3a:93:a7:
9a:34:e9:4a:94:1b:ab:b3:15:03:e9:06:75:e1:8c:03:57:a5:
fc:5a:c1:a7:b0:68:b5:e1:09:27:66:9f:df:28:bf:d8:5c:16:
9b:f5:f3:8a:57:09:1d:2e:0f:d2:1e:f0:6f:85:b2:72:43:13:
50:b3:2d:14:c3:b5:52:c4:21:59:f9:c4:f3:3f:1b:82:1f:88:
57:e7:1a:88:23:43:ed:e0:98:3e:a7:ac:38:22:01:f7:11:33:
d4:46:d3:0c:b8:15:d3:7c:7d:e5:1c:1b:3e:1a:3e:87:8f:eb:
73:17:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:02 2026 by rpki-client