Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: mYx6xZBb8uekqKdCQUxpkdsbYQOhKsZhtvXN+x8Burs=
Subject key identifier: 6D:BA:17:38:AF:1C:1F:03:59:AE:B1:38:71:70:E1:5B:18:15:C3:CC
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 019D98F4C07CAA59DDEDA0585223D6CE1AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 136A
Signing time: Fri 17 Apr 2026 01:01:09 +0000
Manifest this update: Fri 17 Apr 2026 01:01:09 +0000
Manifest next update: Sat 18 Apr 2026 01:01:09 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: tvVexR+tkj8PcKAoFw/HR+cj1h9q9uVUrCPdiIM88B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c0:7c:aa:59:dd:ed:a0:58:52:23:d6:ce:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Apr 17 01:01:09 2026 GMT
Not After : Apr 18 01:01:09 2026 GMT
Subject: CN=6dba1738af1c1f0359aeb1387170e15b1815c3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:7f:10:6d:e8:bd:68:f7:87:86:31:06:0b:
47:56:37:bd:86:e6:ff:0a:8a:f3:97:5d:a7:3c:f9:
70:e7:e2:06:ae:ad:55:6e:09:0e:95:9e:6e:a1:90:
47:0f:01:0a:fb:88:c3:1b:2b:22:28:52:99:63:73:
a1:e2:32:fa:50:f4:97:da:3e:4d:3b:6b:9a:c6:03:
90:58:23:40:be:c7:35:88:b6:22:e6:ec:cf:dd:1d:
19:1a:1e:50:3b:e0:24:6d:15:bf:2b:81:de:33:78:
89:72:b9:ac:53:d5:90:c7:12:2f:62:f7:a4:26:7f:
ff:26:e2:4e:07:43:5d:ce:70:29:8d:b0:16:07:6e:
30:e4:01:0f:1f:28:fa:9a:c7:cc:73:d0:da:21:ea:
3f:9b:18:4c:f9:a1:0e:68:6e:21:5a:d2:59:ec:2e:
a4:eb:61:33:59:90:3b:f9:f1:dd:c8:ad:84:df:ad:
43:98:d0:0a:4c:d1:d8:9b:86:2a:49:41:24:cd:ad:
a7:7e:17:44:7a:fe:39:91:7b:8f:68:36:92:c7:2f:
8c:67:ee:4b:35:e5:f4:a5:98:c7:28:99:2d:7f:ea:
98:51:b5:ac:ac:13:6a:3b:bf:00:56:85:a5:1c:45:
a4:b5:8e:a3:69:8e:9d:40:0f:f3:46:d1:17:17:60:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BA:17:38:AF:1C:1F:03:59:AE:B1:38:71:70:E1:5B:18:15:C3:CC
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:83:6d:a5:ba:07:23:71:2e:5e:67:4f:33:9e:c0:13:32:e3:
c3:fa:ca:4c:94:d3:cd:60:66:cf:17:d1:5b:f3:a6:d7:b4:00:
17:a8:3f:1b:83:28:ba:c2:1b:a2:01:56:ae:02:95:54:3b:0e:
b2:93:82:90:d3:99:83:80:0f:af:30:27:96:95:df:58:9d:2a:
08:1a:ec:26:6c:37:4d:a9:25:50:c2:6b:b8:46:61:53:ae:0e:
5f:6c:54:dc:22:dd:2f:9f:76:0a:f1:a1:b4:c5:49:cb:6d:01:
c1:e8:a7:13:f4:af:07:1b:b6:f1:91:92:fa:7f:fd:d6:32:d1:
ca:d8:8a:57:41:ab:b5:9c:5d:4d:77:f1:0e:a6:98:f0:56:94:
82:c5:3f:5b:2d:d6:9c:74:52:d2:36:c7:54:20:3a:59:a4:de:
0f:80:25:45:fc:5b:90:b1:34:d8:8b:b5:23:31:bd:6b:b7:55:
a8:89:d3:84:89:b7:d3:ae:e2:7e:95:d9:9b:d1:db:f7:92:37:
84:09:c0:96:cc:5a:ab:12:87:b0:73:41:bf:c5:db:b9:53:92:
6a:c9:4d:29:f9:96:ae:1e:46:1d:28:12:df:dc:22:03:74:21:
f5:f4:94:6c:89:74:48:f0:b5:af:5c:c1:ab:63:cc:6d:c7:73:
fa:a7:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:37 2026 by rpki-client