Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: lVcxcG8J51qg1FRKsCCEiHX3szGTlvLxWccp4gWp/24=
Subject key identifier: AC:28:9D:C3:A8:AC:A8:43:FE:7C:A0:8D:A4:93:72:3D:11:45:2B:0F
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 019D9BBE2864285C2FCA89B6DF54D3D444B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 033C
Signing time: Fri 17 Apr 2026 14:00:23 +0000
Manifest this update: Fri 17 Apr 2026 14:00:23 +0000
Manifest next update: Sat 18 Apr 2026 14:00:23 +0000
Files and hashes: 1: 95LH8iT08gOP0LyS5iIMvY0i6Y4.roa (hash: rvbh2lQJxuy6pklt/YLcgLGAVc7KO25xNNDsARVJ8hc=)
2: iaxSEFPna8TyKdmTjuSeFpaWvyM.roa (hash: W5V0Bee0y21s/n22k7zsVnAg+dyP9kx7XhHVMqWJb2c=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: bfj+HkjPimbloIsmELA3jf9ItSzy5nEawrNeBUEz70Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:28:64:28:5c:2f:ca:89:b6:df:54:d3:d4:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Apr 17 14:00:23 2026 GMT
Not After : Apr 18 14:00:23 2026 GMT
Subject: CN=ac289dc3a8aca843fe7ca08da493723d11452b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:75:96:cf:d3:b0:1a:74:6d:76:0c:a0:0b:
c7:40:0b:33:8f:c2:de:c9:04:c1:1f:e9:b4:0f:6e:
ed:6f:e6:6d:ca:76:22:7c:fb:05:2d:ce:97:5c:1e:
94:8b:c6:c0:f7:12:58:52:6a:de:c9:9a:80:74:0f:
64:b4:63:75:1e:12:99:b7:9a:94:b4:c2:02:66:ba:
1f:10:91:b5:95:c5:31:01:66:6c:21:ef:10:9c:22:
19:f1:2e:98:fb:3e:c6:3a:2a:6b:8f:41:b4:0a:72:
47:61:39:08:36:a6:e1:50:0b:ee:16:99:2b:a2:8b:
a1:7a:6e:a3:72:d1:09:70:4b:f6:e2:2a:6f:8c:0e:
c4:b8:49:ec:bf:2c:5d:d3:d3:3c:ae:a4:5c:7c:a7:
bd:55:35:40:6e:09:bc:15:e8:9c:f5:a9:7f:07:72:
87:dd:4e:74:7f:f5:54:ed:3d:5a:fe:17:fd:1f:a7:
00:0a:ff:25:a8:9a:cc:7c:e4:68:f3:64:8e:02:48:
db:ee:71:3b:82:af:67:62:7d:2c:91:81:6d:77:e2:
3c:d6:d6:7b:cb:51:e6:89:be:05:aa:76:35:40:2c:
76:42:18:89:cf:a1:b9:8f:75:76:16:8f:4c:81:37:
ea:84:f5:d6:39:5c:6f:ac:03:a8:ce:a4:b8:8b:54:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:28:9D:C3:A8:AC:A8:43:FE:7C:A0:8D:A4:93:72:3D:11:45:2B:0F
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:07:33:c6:95:a2:25:17:28:06:fd:25:d5:dc:65:ab:94:24:
04:97:8d:47:b4:e2:82:3b:f4:87:0c:74:ba:e1:e3:b7:52:e9:
90:92:c8:e5:a3:92:3a:04:5a:d9:85:47:c0:0c:3c:f2:bb:68:
55:3f:00:90:b4:6a:77:2b:22:14:c0:35:42:10:2d:e6:da:bf:
29:e8:e0:7c:c0:36:11:61:b9:89:7e:74:11:b9:53:ff:1a:80:
53:0c:f1:5d:df:71:91:26:11:11:c2:39:a5:4f:35:b6:db:0f:
83:aa:54:4f:04:cb:f7:c4:5e:b5:21:e9:c4:b4:d6:da:db:34:
42:8d:39:ef:4c:65:c1:ca:2b:80:e5:e5:23:c9:8e:9f:dd:a2:
cd:c5:8e:6c:18:b3:9d:1b:31:1a:58:23:ba:13:fd:02:93:1a:
cd:13:8a:6c:4b:dd:99:16:8f:63:50:20:00:ab:29:6d:b1:01:
8f:15:77:cd:ad:8d:87:60:d7:77:78:66:31:1c:1e:e7:d7:dc:
46:a2:01:b3:6a:cd:dd:dd:c7:c5:e6:65:fa:06:92:09:f9:b9:
ad:8e:ad:92:32:51:5c:a8:f8:20:58:5f:12:db:5f:14:bc:bd:
ec:35:4f:28:31:a3:34:48:fb:ef:f5:c9:17:66:23:5e:50:2f:
d6:12:74:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:16 2026 by rpki-client