Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: Q2PeBHbQ4Gf/1lAa/8GNBDptxHtwcakEn1RlmzEbxiM=
Subject key identifier: 7E:CB:7B:D5:B5:FA:B0:90:5A:6C:CD:5F:86:83:DC:0E:47:7C:83:A0
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019D9A06E40B6C26171558909F4EECC78527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:35 +0000
Manifest this update: Fri 17 Apr 2026 06:00:35 +0000
Manifest next update: Sat 18 Apr 2026 06:00:35 +0000
Files and hashes: 1: WrB_6nEScPqneHKwQCA6QB4d4QA.roa (hash: 85wjB4Jt2bkwpAvi6/jsQd4XiX94VRI5UhSDcmPSSb0=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: rZIGRpl4jQBJMn27HbsTLMxghPTV/BRl2+VrcibZGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e4:0b:6c:26:17:15:58:90:9f:4e:ec:c7:85:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Apr 17 06:00:35 2026 GMT
Not After : Apr 18 06:00:35 2026 GMT
Subject: CN=7ecb7bd5b5fab0905a6ccd5f8683dc0e477c83a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:2d:59:44:57:18:75:ff:64:56:01:97:4d:
95:1d:a5:3a:59:14:6e:fa:ce:d4:90:b4:3e:b2:d2:
61:26:0e:33:08:3d:40:57:b2:87:99:a8:be:f1:7e:
8f:8d:04:2f:47:02:af:20:d4:08:19:c8:2e:ab:fd:
b4:72:32:29:61:c8:9b:36:f0:65:46:a0:0e:ae:fd:
b7:54:b0:97:79:6c:c9:80:15:95:da:70:9a:b6:cb:
09:86:b2:c3:aa:47:45:ea:24:32:98:a1:32:4e:50:
bf:fe:ae:2f:0c:65:a1:14:bf:47:ae:09:0b:8c:c3:
8f:e7:60:04:9d:d6:7e:b5:3b:b1:7c:6d:fc:65:e8:
b8:bf:c0:ee:b1:5b:f4:84:ca:a6:19:ff:d3:6a:10:
06:1d:80:f7:87:0e:5b:8a:3e:3f:d9:7f:63:d4:41:
a2:b7:82:99:29:66:89:1b:f0:d8:86:52:b5:58:78:
f1:44:a3:0e:7a:fe:77:4d:5c:ed:4d:0d:58:b9:4a:
c6:73:4f:58:c5:60:8c:c4:e5:fe:e3:12:6d:2f:af:
42:14:6f:ca:ac:5e:0f:cc:2f:16:ed:7e:74:a6:f7:
7b:24:23:ff:fa:ca:24:5e:8e:5f:30:51:84:b8:d3:
ec:92:34:a0:9c:b4:87:b6:bb:44:2e:80:e2:05:0e:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:7B:D5:B5:FA:B0:90:5A:6C:CD:5F:86:83:DC:0E:47:7C:83:A0
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:53:ee:99:af:c9:7c:9b:7c:c0:df:30:3e:26:36:7b:89:41:
ba:42:21:3e:2c:0c:8f:25:f1:6a:32:3e:b2:00:93:24:e9:5e:
5c:01:2d:b8:f7:fc:e6:5e:06:a1:06:2a:69:63:1c:67:ac:f9:
2c:87:0a:93:51:ec:04:84:80:db:c4:6c:b3:6a:9c:4d:1f:1e:
e1:08:c5:d5:b8:b8:cd:75:58:48:fb:4a:ad:ab:2a:9d:55:73:
89:96:47:41:7f:f8:99:fa:30:dc:9b:fa:39:36:70:1c:3b:c7:
4e:b5:67:75:81:09:47:5e:bd:14:30:c5:bc:65:b3:08:c4:8d:
bb:20:69:75:48:c4:4a:20:8c:22:cd:29:02:f9:35:31:fa:63:
87:95:f4:fa:49:70:98:eb:40:c2:fd:b4:dd:25:83:59:7d:89:
da:b1:a8:c5:ac:ce:1c:f2:ab:94:5e:5c:92:5f:1a:47:58:ef:
e7:b4:e6:49:34:03:39:a6:ba:a9:5d:8a:63:b0:6d:58:c9:d1:
e4:ac:8a:82:60:9e:63:1c:b9:30:cf:95:66:ff:35:5b:1b:ab:
3e:d6:36:20:86:e3:c6:af:c9:87:12:58:fb:cc:2e:6f:f9:5f:
dc:7c:f8:03:09:07:b1:f8:ba:df:c3:8f:2c:be:97:be:f6:39:
63:b4:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:41:21 2026 by rpki-client