Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: 2EKfqi1GreeSaBUIMkrqcLEvWe0xVk7Oi1mSw1siRlI=
Subject key identifier: EA:D5:ED:3C:71:16:BF:93:B7:85:89:79:5E:67:FF:52:8A:91:F2:8E
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 019D9B515F7D0682399DB44CEE429107CE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 12:01:34 +0000
Manifest this update: Fri 17 Apr 2026 12:01:34 +0000
Manifest next update: Sat 18 Apr 2026 12:01:34 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: Y0GxuaXHNwRp327GcWNZkl4izXrwt2lplwltvBEd6VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5f:7d:06:82:39:9d:b4:4c:ee:42:91:07:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Apr 17 12:01:34 2026 GMT
Not After : Apr 18 12:01:34 2026 GMT
Subject: CN=ead5ed3c7116bf93b78589795e67ff528a91f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:96:b2:6d:86:c4:39:ae:82:33:4b:ee:0f:
84:51:cb:95:d9:38:e7:99:82:56:97:e4:21:99:c6:
c3:00:51:70:2f:b7:59:6f:1c:d0:6e:ca:8a:60:e3:
44:aa:76:08:88:74:4f:fe:22:ec:0b:a3:b6:40:db:
a6:9b:58:0d:44:b6:ea:56:21:df:42:e5:51:c0:d5:
4b:9e:b4:55:39:88:65:ea:41:f2:e8:d8:4c:a5:66:
39:8b:77:9e:ff:01:45:54:7c:74:d9:93:fe:94:b2:
84:eb:95:ec:97:19:1b:b0:1a:68:4d:f4:b7:4e:07:
46:d6:da:96:2f:da:5f:c1:c9:44:9c:e1:8e:4e:19:
f6:21:02:e4:10:55:fc:e5:b7:1c:87:f3:85:c9:9b:
fc:2f:f8:25:f6:3a:50:16:6c:73:44:f0:44:6c:07:
1b:e2:6a:55:07:a6:f7:0e:e2:db:94:7b:ed:cb:0b:
2e:ee:c4:5c:b2:93:08:79:f0:98:67:be:ba:57:64:
ca:6c:86:d9:9a:cc:8f:45:7a:33:d0:26:2f:93:89:
da:37:be:59:60:02:9c:33:d1:03:93:05:01:3f:f6:
03:04:d1:d8:67:b3:13:6b:cf:8a:09:ed:5e:11:ff:
b7:88:c0:b0:e8:ea:44:81:43:ad:c5:65:89:3e:09:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:ED:3C:71:16:BF:93:B7:85:89:79:5E:67:FF:52:8A:91:F2:8E
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:82:88:21:77:1a:a5:3b:50:97:83:3c:24:40:0b:c9:fb:fb:
4c:2f:b5:b6:55:01:e8:9f:5d:ff:3e:8c:e3:d1:7e:31:a7:2e:
bb:88:44:30:bd:f5:3f:e6:fb:bd:c7:d1:41:4b:11:39:d9:d0:
d0:70:41:ea:c1:7d:59:18:db:d4:16:6d:c0:0c:8a:12:1d:5b:
64:a6:ba:ad:13:67:70:6a:2e:e1:78:6e:ac:79:09:0e:3b:9b:
37:2f:d5:04:26:5b:60:5a:0b:0c:4c:ee:c2:d6:4f:f4:9c:64:
2b:d8:c1:b1:88:0b:ae:e8:36:ab:40:68:fc:b5:92:69:10:1d:
35:4e:13:ff:19:d7:59:a7:b5:28:1e:10:16:7a:75:98:a5:09:
26:69:df:25:5b:af:e5:43:e0:4e:0c:30:48:ad:d7:ce:27:6f:
33:d0:ac:5c:e0:de:92:9a:4a:7c:7e:c4:e8:50:86:b1:24:df:
77:7e:eb:3d:fc:4b:ee:03:c9:da:df:d2:53:0f:f2:ea:a1:c7:
38:c7:c4:92:d9:2d:c8:c0:52:4a:e2:e9:04:49:04:13:52:7d:
0a:56:f8:5c:f2:ed:5e:57:db:7e:74:9e:ab:ad:81:27:39:0b:
20:ec:a9:92:95:3e:71:c8:6b:40:da:2d:b2:dc:30:9b:69:35:
aa:4a:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:37 2026 by rpki-client