Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File: WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier: NHADUXzbrogsdc1XYxRIu+Kcy7FRfoltIJqfcc+e9Es=
Subject key identifier: 18:6E:C0:64:F5:E9:A3:C5:AA:C6:28:12:A7:34:6A:1A:46:17:4E:CD
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial: 019D9A7499DAD354E6CC2B97CA4AFE6D8F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: HWYj0Yf7UI2v4SI2DFohqiF03TQ.roa (hash: 161NIRovwk7K/08FGjsTUbLJAR0H5vgFaLSQ618AUbc=)
2: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: GVNB3wsF8GxRr+3lcAoiMKqWINC7BflxGcQrOF5rmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:99:da:d3:54:e6:cc:2b:97:ca:4a:fe:6d:8f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=186ec064f5e9a3c5aac62812a7346a1a46174ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:c7:8e:d5:19:72:47:91:eb:62:64:2b:a1:
ce:eb:e9:06:1f:74:f6:bb:cf:e2:f1:80:86:43:62:
a4:63:c6:f5:ff:8c:34:9a:03:df:cf:70:fa:25:f4:
9b:db:ef:8f:92:b9:e0:37:34:c4:58:6a:f8:d1:81:
66:e5:27:27:66:06:c3:10:b0:a1:a0:5d:3d:ca:83:
a7:21:72:f8:94:8a:1b:11:67:16:bc:f5:69:8d:39:
50:ea:6c:f1:d0:bc:e0:e2:00:27:6f:19:47:1b:2d:
a4:d9:d7:fa:d5:d3:ef:99:4b:24:e7:38:37:dc:ba:
02:bb:a4:a5:04:fb:ec:77:43:50:3d:08:ab:a3:c2:
29:86:66:46:a8:d2:f2:92:26:7e:7c:92:be:23:c0:
54:32:8d:b5:10:07:d9:db:3a:c4:85:d9:64:4f:9f:
f5:45:22:e2:bb:96:41:93:94:58:61:b5:68:92:55:
74:b4:30:c0:57:c5:2f:b0:d9:be:df:3d:ee:45:41:
01:93:31:59:bf:61:5f:0e:ea:33:6b:fb:ac:55:fc:
d5:22:bd:f0:db:8b:c5:0b:cc:d0:b6:7f:cc:f6:62:
1c:86:f8:66:41:47:ac:48:fa:94:8e:07:65:23:e2:
4e:f4:8d:6f:cb:69:84:69:75:c4:10:b7:e0:2e:d2:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:C0:64:F5:E9:A3:C5:AA:C6:28:12:A7:34:6A:1A:46:17:4E:CD
X509v3 Authority Key Identifier:
keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e3:9e:ae:70:dc:43:76:f3:2e:bc:cf:83:df:08:9d:c7:66:
a8:fb:98:b1:90:76:4f:86:ad:20:26:93:83:3e:ad:c9:e8:58:
f6:3d:10:45:5f:2e:36:57:6f:2d:c0:c5:86:fb:6a:1a:0e:21:
50:97:dd:92:a5:9a:95:b0:bc:bb:27:b0:76:3e:3c:fc:a0:c5:
ac:d9:7f:16:bd:16:4d:57:2e:92:4c:02:d8:f5:25:72:14:ea:
a8:fb:d4:70:8a:c3:d1:e0:b1:2c:7a:09:df:35:f3:78:e2:44:
e8:ec:73:33:49:55:51:2e:90:ae:8c:f5:d9:6a:b6:ee:d4:0f:
9d:31:05:2f:3e:c6:f7:bc:0b:32:e5:32:19:59:ea:21:3a:c4:
19:a3:c8:dd:4b:7a:89:3c:bf:13:22:1a:d8:63:14:fe:82:3c:
1b:69:8b:3e:d6:d6:b6:78:bc:31:b7:66:67:13:71:b6:7f:69:
84:1a:5c:e5:58:51:65:14:92:de:dc:4d:8f:45:00:38:8c:29:
86:d7:72:5c:19:62:2f:e8:5d:b8:df:15:7e:5c:5b:d4:79:95:
16:9d:1e:de:c5:8e:26:94:99:8e:16:4e:9b:b1:50:08:c0:4d:
90:a5:00:81:55:74:d3:ed:d5:90:f6:4e:e6:64:7c:1b:03:84:
a7:a0:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:37 2026 by rpki-client