Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: dgmNo8oU3lPWqgJgKfDsSVE1/KZ8QqGpPO3aLefm74g=
Subject key identifier: 4D:68:8A:1E:CC:F5:16:75:8F:DC:34:64:37:49:47:FB:C2:AA:D1:13
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 019D9AABB7155BF11D184124B3F1EE6A0177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: 9q8SdW4K_Qfg_qhjmay8aSi22H8.roa (hash: Ep0bFnw6XVVIIq0VGt/sxRJ3Mflsj+GO7Wgmc5rKidw=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: jtFfm1Wif5qRaG1LRDtf+MZVNDYOSK1KmKbOL6msOfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b7:15:5b:f1:1d:18:41:24:b3:f1:ee:6a:01:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=4d688a1eccf516758fdc3464374947fbc2aad113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:a3:69:2c:83:cf:e7:26:66:6b:f7:9c:f1:
bc:b1:ef:fd:45:e3:b8:a2:4c:c0:c2:1b:96:94:c9:
05:75:35:7e:97:22:e3:a0:e0:c5:90:53:31:03:47:
94:59:30:26:8a:8c:62:7a:ee:b1:68:c7:91:a1:e4:
f3:96:3c:f6:0d:d2:96:09:5a:f2:a4:4a:96:35:b3:
eb:17:47:50:d6:6c:71:15:58:99:c5:18:c3:56:14:
ce:11:ea:6c:a4:6f:49:8b:9b:8b:96:33:c6:fc:a5:
b4:6b:18:34:0a:f1:80:e0:19:a1:2f:5c:92:64:8e:
a4:20:0a:df:61:18:e5:eb:6b:2c:d8:98:8c:23:17:
5c:ac:d5:0b:c8:8f:45:79:6d:cb:11:22:92:43:e4:
c1:b5:11:fe:1f:0a:5c:77:81:00:bd:66:cd:34:00:
7c:78:66:ee:4e:40:a0:2c:94:c0:3a:d5:66:15:90:
c2:b5:b4:4e:15:ad:22:fe:87:5b:d0:0c:01:b4:07:
1a:48:05:8c:80:3c:7d:ad:1f:d4:9d:4b:62:2b:66:
d5:10:32:c8:b0:bd:2d:b7:c6:93:5c:47:aa:bb:ff:
eb:3a:6f:7a:41:60:34:a1:04:e9:0c:d1:4d:ce:3e:
74:00:87:48:5e:f5:a7:b7:5b:10:2a:23:b6:c3:3e:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:8A:1E:CC:F5:16:75:8F:DC:34:64:37:49:47:FB:C2:AA:D1:13
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bf:f6:72:0f:e5:51:0e:15:45:39:ce:4f:bd:0e:88:cb:07:
6f:9e:5f:74:ab:1d:11:14:8e:81:d1:ff:1e:5c:5e:05:17:70:
36:32:23:f1:20:0c:9a:1c:85:be:f7:68:3b:18:ff:81:23:2f:
9c:13:b3:a7:68:f3:ae:95:a6:e7:79:46:3e:f3:a2:88:40:bf:
3c:65:77:0f:88:59:1e:f3:91:1b:cb:8e:4f:4c:9d:92:a8:ed:
95:f8:c9:fc:46:72:cc:2d:b1:99:a5:fe:d2:52:7e:ca:ae:bb:
fe:3c:46:a2:cd:4f:48:04:d5:e9:9b:ec:15:89:69:14:a1:4c:
2e:c5:d2:5c:d3:99:30:ff:e7:75:06:de:f7:44:19:cc:f2:0b:
03:fb:1c:54:c2:b7:1a:49:51:0c:d1:b2:05:a3:fe:91:4a:8e:
5d:6f:a0:ac:ce:10:e5:73:d3:dd:b8:fd:f9:1e:b8:a9:b9:b4:
e9:3b:df:4f:b0:c6:8d:ac:1b:67:1c:a0:01:c5:26:b8:a1:54:
d0:a1:38:0d:57:58:88:62:49:b8:89:b6:c2:44:e3:42:ea:fb:
e6:bd:9c:88:bf:e1:34:1e:0f:6d:11:8c:f6:64:d5:25:9f:39:
ae:23:c3:d1:67:ef:ca:82:2b:d1:11:ca:7f:a9:92:17:07:43:
b0:37:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:29 2026 by rpki-client