Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: eIVl/Zm26YZhEbYexL3B2pCnw9A3hzS5jpHvkrLExVI=
Subject key identifier: 4A:9F:CE:37:47:F7:D1:A5:55:FD:55:D3:85:66:DF:3E:E3:6B:F7:21
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019D9B19B5D1A88B43A76B1C5E655F84B0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:46 +0000
Manifest this update: Fri 17 Apr 2026 11:00:46 +0000
Manifest next update: Sat 18 Apr 2026 11:00:46 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: XAzO+82KCkCGWJVq1RENY/1bigFqle7aSZ+GCgibCqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:b5:d1:a8:8b:43:a7:6b:1c:5e:65:5f:84:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Apr 17 11:00:46 2026 GMT
Not After : Apr 18 11:00:46 2026 GMT
Subject: CN=4a9fce3747f7d1a555fd55d38566df3ee36bf721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:77:fe:48:f2:ea:6e:d0:3f:47:de:de:4d:
26:e1:c5:12:06:23:ab:51:a5:42:59:17:04:98:b2:
57:9b:7b:2e:3e:92:f4:fd:b2:1d:9b:d1:58:48:a3:
0e:e8:55:e1:0f:17:db:dc:30:2c:f3:28:42:d1:c3:
24:4c:76:e6:42:91:00:01:df:62:4a:17:dc:de:26:
1d:ce:ae:e1:a0:bc:dc:25:ae:74:e2:81:bb:fc:ff:
09:32:90:4c:07:1a:ca:10:31:a6:ec:b4:d6:8b:c2:
0b:50:16:1e:a9:8b:dd:e2:c5:7b:38:14:a9:9b:7e:
ee:6b:ec:02:e9:6a:3a:a5:8c:50:5b:ca:5c:4a:62:
90:ee:5a:84:da:f0:1f:a9:f7:f5:64:fd:ce:a5:db:
37:77:df:b1:6f:6e:7e:21:80:e7:2f:be:a3:8a:14:
8a:1e:77:65:28:80:7e:8e:7f:db:45:e5:22:50:f1:
ba:57:d6:0a:f2:28:ef:c6:2f:76:1a:6e:c2:25:49:
91:8a:05:35:4a:f5:39:75:04:8e:7e:46:9f:7c:09:
5b:74:40:95:bc:f5:29:5a:3f:e8:3e:2d:eb:9b:15:
a5:14:54:6a:e0:aa:84:e4:f2:4e:0e:a5:96:ec:59:
cd:ca:ab:6c:08:4e:db:a8:3e:ff:d6:5d:65:3b:98:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:CE:37:47:F7:D1:A5:55:FD:55:D3:85:66:DF:3E:E3:6B:F7:21
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:6b:0c:1e:99:eb:de:31:ff:c9:f1:35:3c:56:a4:08:c3:
68:82:37:5a:a8:43:a8:9f:84:14:d3:45:34:52:bf:3d:d6:cc:
3d:18:43:29:22:94:a9:25:b3:c8:ca:15:6a:1c:79:9c:ef:f3:
30:ff:9f:7c:d6:6d:ed:e2:f2:39:85:be:a4:57:1b:21:be:f0:
23:be:7b:df:91:fb:a2:61:dc:2b:2f:6e:ba:4e:45:d3:0b:b2:
46:ff:2e:f8:a4:3e:7f:26:67:84:f9:b4:d2:46:6e:1d:13:17:
09:62:de:46:2b:e2:1a:4c:3c:35:c4:11:ae:de:e7:6e:35:85:
fe:2b:c7:a7:6d:6d:ee:84:3a:68:6e:b5:c1:0a:fe:49:e0:aa:
e9:ae:05:8f:d6:b9:03:45:cd:0d:d7:3f:bf:e6:1b:c5:4b:fe:
89:ae:5c:0d:de:f6:c4:0b:0a:08:fe:a0:90:6e:06:78:e4:93:
94:cf:56:8a:d1:7e:1a:02:84:65:8e:bc:3c:a9:9c:62:14:e7:
2d:ef:ce:e6:84:e1:60:e4:f4:54:f0:a6:91:e6:a1:cf:94:c4:
1d:b8:c6:50:69:ef:27:97:48:a3:7b:db:21:fa:65:f4:7a:9d:
97:62:b6:c6:30:ca:92:ca:b2:03:5a:99:7d:a0:5b:87:60:d7:
53:c7:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:09 2026 by rpki-client