Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: ifGSLelv/CwFya0wEw/eazFmbeCIZUqUfwL9FpgZOCo=
Subject key identifier: 5D:A4:C3:65:42:66:14:60:F1:31:4F:88:E8:19:7A:3E:A0:4C:1C:25
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 019D9998DCFE3CD6DA1D795DC62EFF1048EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 15F8
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: lDAhyO7ry1oOdhaO+7JxlvLKjBvdAHsKU6W9oYxVOvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:dc:fe:3c:d6:da:1d:79:5d:c6:2e:ff:10:48:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=5da4c36542661460f1314f88e8197a3ea04c1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:ba:6c:61:23:86:4e:44:24:97:74:ad:93:
0d:4e:96:ce:08:79:4d:c4:0a:8c:cd:1a:60:d6:27:
3c:28:77:c6:3b:42:5f:7c:8b:4b:ba:be:55:21:08:
eb:15:88:3f:ec:d9:2c:e8:d9:30:5c:21:d2:c3:1e:
c9:cb:46:5b:dc:a5:45:64:30:a0:bd:7a:8b:24:22:
9d:b1:41:14:d4:d1:48:4b:67:c5:4d:ef:87:b6:c9:
7a:6a:06:3d:ce:e2:7e:af:51:e1:0e:32:59:fb:48:
bb:b2:52:d2:55:25:66:3e:9c:aa:b8:eb:f8:1b:5d:
9c:1e:25:33:07:6f:a3:2b:49:2b:f1:0d:33:18:ce:
a0:56:7d:52:6e:66:a0:4f:43:f7:8f:97:a4:3f:2a:
16:19:03:3d:47:57:08:84:14:df:33:7f:ab:d8:7b:
7a:43:35:01:66:6b:98:4b:51:69:5a:21:62:97:78:
83:30:8d:20:07:33:55:15:ab:8f:18:6d:fb:3f:6a:
78:62:c9:16:8a:0b:70:d2:3e:87:e0:45:13:9d:65:
d0:aa:64:9b:e3:ac:3f:e0:23:36:c0:3b:f4:75:0b:
08:1f:47:36:5a:86:09:1e:bc:84:67:09:11:8e:89:
47:38:9e:4b:1b:dd:53:2c:8e:e3:f4:59:d6:ec:4e:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:C3:65:42:66:14:60:F1:31:4F:88:E8:19:7A:3E:A0:4C:1C:25
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:7d:ae:30:e8:4f:6a:d9:9d:fd:ae:46:55:0c:83:1c:c0:
fd:50:d5:e2:2e:2a:e6:40:e9:b1:30:fb:ed:f2:9f:3c:bb:93:
42:1f:48:bf:4b:0c:1e:9f:86:19:97:a5:95:ca:ac:0c:5f:74:
d8:93:05:23:47:79:4d:f6:f1:c0:96:44:03:75:d5:66:bf:03:
0f:07:c7:85:f6:32:cd:3a:13:ac:75:29:45:52:9b:ba:4f:b9:
52:06:50:f9:5e:49:95:d1:d1:31:40:b7:e8:cd:ea:1c:48:37:
19:c4:66:29:6e:ad:95:c1:4b:84:87:f4:a9:08:3e:6e:05:ed:
21:81:ad:28:bb:07:05:1f:ac:80:b7:bb:37:d3:d4:25:3d:e3:
1a:a5:fb:5f:5d:5e:17:30:63:54:a5:09:49:c7:ed:98:f9:a7:
49:5c:5f:00:a1:e8:ec:c9:09:c4:7f:b6:d4:0e:b2:a3:2b:5f:
91:43:18:9e:4c:88:22:23:de:6f:41:5e:b7:37:ab:18:2d:f0:
30:06:9c:31:d4:1b:3f:f0:52:df:cc:aa:21:95:c0:1a:44:29:
56:eb:b4:39:a7:f9:1b:1e:7d:bd:ae:75:b6:41:b6:61:a3:26:
6d:50:20:06:68:21:9b:7c:bb:75:21:64:1e:99:97:bb:c8:ed:
87:c4:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:13 2026 by rpki-client