Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: 2CAdizOLj69g8O2VgqFFx3GhJ7/xPFjykILAEAvMlJQ=
Subject key identifier: 93:CD:E6:33:98:2B:C6:FD:C3:40:D2:0D:82:5F:5F:4D:84:2C:C9:15
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 019D98F421D7AC661C424A8291614547209B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 16B1
Signing time: Fri 17 Apr 2026 01:00:29 +0000
Manifest this update: Fri 17 Apr 2026 01:00:29 +0000
Manifest next update: Sat 18 Apr 2026 01:00:29 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: 0Q9IoGj59M9yB/HKPA9itFkU9V6LnTl/k/iPbmn2iF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:21:d7:ac:66:1c:42:4a:82:91:61:45:47:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Apr 17 01:00:29 2026 GMT
Not After : Apr 18 01:00:29 2026 GMT
Subject: CN=93cde633982bc6fdc340d20d825f5f4d842cc915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:ca:c9:dd:7c:ef:5d:36:52:b7:0c:49:59:
7f:7f:98:6e:78:7f:e6:51:33:27:aa:dc:4e:ae:f4:
6e:5b:d4:da:09:a3:9e:3c:d9:59:64:fe:07:e8:59:
26:e4:8e:b1:78:fc:33:88:d6:84:42:60:77:f4:19:
a7:f5:d4:32:bf:21:02:32:ba:bd:15:87:bc:7b:64:
69:89:51:b3:e0:9d:1e:43:14:61:4f:ff:a4:c4:55:
75:a9:0e:0a:2f:26:9f:c9:d2:a1:a0:e1:7a:0d:9e:
88:a5:6c:e8:77:12:53:8a:ed:e8:dd:48:f4:10:42:
85:dd:c8:16:11:66:35:b2:58:5a:2b:f4:e9:be:cb:
ff:6f:5c:ac:1c:d4:bc:97:fb:40:39:63:ee:fa:51:
4d:ce:41:03:67:4c:9b:f3:78:35:73:44:31:56:81:
97:66:c1:d8:d7:6e:d3:3e:67:88:8a:e7:18:94:76:
c6:b3:5f:5c:34:78:b7:b6:3e:da:6e:72:6b:3c:fe:
d4:41:ce:ca:3e:2f:5a:9a:43:d1:75:3d:81:16:4d:
c7:c1:39:0e:da:3e:f4:59:08:89:1e:b2:3f:b8:00:
47:1e:03:a7:53:f6:25:43:8a:88:27:5c:e4:6b:50:
4a:be:c3:0e:a2:17:3e:af:a8:cd:7b:90:90:1a:ed:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:E6:33:98:2B:C6:FD:C3:40:D2:0D:82:5F:5F:4D:84:2C:C9:15
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:27:53:29:22:31:d5:dd:02:2a:51:e1:35:e5:85:58:65:76:
83:01:72:03:d5:68:15:e6:49:3f:37:3c:a5:55:57:9f:c8:da:
6a:eb:49:08:98:f8:4c:d8:dd:9b:86:52:f7:a1:c5:2b:c0:f3:
a2:41:ad:3c:78:e0:e5:c7:57:0f:5c:c4:6e:b1:1d:c1:34:30:
61:b6:ee:1d:28:a1:86:1b:52:71:54:3d:c6:b9:7d:f6:da:84:
3f:65:76:59:a8:de:e1:d0:fa:a5:0c:9e:c8:83:06:37:0c:f8:
8c:eb:22:a0:99:f2:39:8a:fc:61:38:49:38:96:c4:b6:82:d2:
8e:69:dd:ee:89:2e:16:58:91:0f:b3:87:e9:4b:13:16:1d:3e:
83:9d:60:3f:ee:a0:ef:77:8f:2a:23:25:8f:ed:b5:fc:6d:dd:
6c:9b:49:e3:e5:49:83:f6:5e:98:8e:b1:0c:76:51:c1:88:a3:
e4:54:c2:3f:b0:a5:26:62:17:a4:a5:76:63:c0:27:a1:e8:bd:
2f:ea:39:54:cc:1a:25:06:c5:59:6a:5b:fa:27:3f:d9:d5:07:
81:16:49:d9:08:0c:d0:9c:69:d4:ef:38:b9:7c:12:09:ec:81:
bd:9f:b8:40:b2:9e:20:99:2f:f0:90:a4:03:0f:3a:0e:99:29:
8b:bb:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:45 2026 by rpki-client