Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: HDuXHY+u64W6lSTLo0Z1MgywVonvgsdNDWzR4CvsU/I=
Subject key identifier: 28:F2:1D:7E:CF:29:B4:6B:46:87:D9:C9:B3:27:C8:F1:0F:44:64:38
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 019D996235D75978EA6420D9376D63EB07F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:43 +0000
Manifest this update: Fri 17 Apr 2026 03:00:43 +0000
Manifest next update: Sat 18 Apr 2026 03:00:43 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: PcetmcefUrdbnV1gObMA1fHRIs76wMhq8A7Ph5rL2GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:35:d7:59:78:ea:64:20:d9:37:6d:63:eb:07:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Apr 17 03:00:43 2026 GMT
Not After : Apr 18 03:00:43 2026 GMT
Subject: CN=28f21d7ecf29b46b4687d9c9b327c8f10f446438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:40:5f:45:fa:0e:e2:fd:1c:88:99:7d:b8:
46:63:61:f6:99:b7:ec:1d:4c:48:b5:28:6d:3c:a4:
2f:20:03:df:a6:b2:e8:26:a3:2d:5b:7c:8d:93:48:
7c:f9:b7:5a:75:00:05:c7:a8:e1:18:ac:d2:03:0d:
1c:e7:3a:e2:a8:bf:ef:7c:8f:15:98:54:87:e2:8e:
74:c6:de:9f:2e:67:76:39:47:0c:e4:55:26:9c:b1:
24:5c:76:2b:5c:66:5e:41:c3:54:95:cb:34:08:3d:
3b:84:83:8a:97:a6:a1:4e:d9:89:e0:c7:b4:80:9e:
e9:53:3a:88:39:ef:2d:18:ef:fe:43:1c:7a:e8:17:
5c:a9:18:e0:db:e4:70:ea:59:34:4f:6c:8a:52:82:
1e:e1:41:a6:af:16:56:09:30:21:1f:cd:a3:cc:99:
da:91:43:99:27:26:7e:f0:2a:c8:a2:1a:12:c3:25:
20:84:2c:cf:7c:4b:07:d0:5d:52:13:5a:cc:2b:47:
32:a2:67:52:9e:25:ac:07:67:9f:56:f9:4b:40:12:
09:c0:56:35:46:55:1a:68:b5:da:8a:55:24:54:78:
c6:6d:71:2f:46:5a:7d:09:80:46:c2:52:76:21:15:
0c:b2:b7:81:80:cb:a7:70:12:10:77:7e:ba:c0:51:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F2:1D:7E:CF:29:B4:6B:46:87:D9:C9:B3:27:C8:F1:0F:44:64:38
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:8e:6c:9c:f6:e1:41:d9:d5:f6:9e:40:8b:d9:91:ac:b1:
4b:48:66:b3:f4:84:61:20:c7:15:9c:ab:cf:89:df:c2:13:60:
23:3b:d3:df:59:cb:17:b3:af:ec:a7:50:49:95:45:5f:8e:ab:
6f:b4:57:10:eb:32:ae:4b:59:ae:8a:b0:07:2b:08:d3:96:64:
b7:c7:de:54:89:c1:1b:0a:35:11:63:02:93:32:ae:d0:db:86:
0e:d9:f0:d6:99:c3:b8:e0:ae:34:1d:bb:ee:2a:2f:c4:45:77:
c0:c1:cf:79:2f:3d:a9:d3:a4:ed:69:a1:71:2b:ed:66:41:fd:
26:74:68:31:9c:ae:49:ec:21:4e:fa:93:ac:ef:a1:34:82:46:
38:47:82:d3:b2:fe:81:6b:d9:38:e5:ed:a7:4e:b9:f4:b3:63:
e3:42:cc:20:5a:12:fc:e7:f1:6b:fe:dc:de:48:bb:7d:42:c9:
5e:b2:fe:ed:05:7b:83:e0:2d:e7:cf:a6:c9:ab:75:9e:54:ee:
49:f1:0d:07:84:a0:bc:e1:16:e4:20:cb:04:a4:f1:cd:48:e0:
27:e9:ac:43:76:6c:56:53:f5:40:ac:cc:c0:50:72:94:69:8d:
eb:6c:2b:eb:ab:dd:23:8e:ce:59:70:06:e5:65:de:02:a4:ab:
2a:cd:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:10 2026 by rpki-client