Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: FUkt2cf8auIM3Ils6TnvsunbWIvSRt490S9MBaO8uU4=
Subject key identifier: 40:7E:FE:17:84:EB:8A:73:91:23:FD:36:34:90:43:8F:59:7B:93:84
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019D992BA9ABED796B6CF14D0B18E04A2EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 1195
Signing time: Fri 17 Apr 2026 02:01:08 +0000
Manifest this update: Fri 17 Apr 2026 02:01:08 +0000
Manifest next update: Sat 18 Apr 2026 02:01:08 +0000
Files and hashes: 1: gWlv5iDtX9nVjLLKKMShSTPx4uA.roa (hash: LL5oSQlkIVfG3xLLP9DHUwmZyFU2l1CdAagBhNZJ0QQ=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: iI6f636/s/OJsjYUjqBP42x4C/u1Q5O/CiNU4zKdjrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a9:ab:ed:79:6b:6c:f1:4d:0b:18:e0:4a:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Apr 17 02:01:08 2026 GMT
Not After : Apr 18 02:01:08 2026 GMT
Subject: CN=407efe1784eb8a739123fd363490438f597b9384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:7b:31:93:7a:15:7f:66:d2:43:13:c6:92:
e1:ae:db:97:49:70:f9:4f:19:11:0d:32:26:dc:e6:
e2:b7:7d:70:fa:46:ca:ee:f8:39:ea:cc:a3:a4:29:
d3:27:e8:75:60:46:83:a1:bd:32:ce:2b:ca:a2:ac:
45:03:1d:4f:dd:95:f1:3b:19:1e:ad:e2:d6:97:5b:
f3:4a:50:7a:e2:fa:97:e8:d4:9e:b2:a1:ea:bb:1f:
35:05:6d:b2:9b:a6:b9:77:2c:cd:96:26:a2:be:98:
8a:c9:5b:ac:18:48:8d:37:16:5c:53:8c:34:5a:d5:
37:b5:07:9b:c2:e4:f7:9f:f3:7e:9d:ed:f8:3d:5e:
87:b3:e8:62:63:d3:e2:7e:77:e6:ce:bb:79:1e:40:
c0:94:e7:2b:a2:e0:01:e6:6b:66:e0:6f:aa:22:b7:
9c:5e:5e:1f:4a:6e:8e:93:ec:36:40:76:ef:46:25:
f3:e7:75:c1:47:c9:62:a9:2b:66:54:1e:1c:70:81:
74:35:cd:55:47:b0:56:9e:1a:0c:51:86:89:55:fb:
b2:e7:66:2c:01:59:9b:17:79:c7:3f:cd:bb:84:53:
ec:50:d7:6b:13:a2:bc:d1:38:9f:f8:c7:8a:b8:30:
71:13:ed:41:6a:3b:42:4e:01:0a:95:13:d5:44:f1:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:FE:17:84:EB:8A:73:91:23:FD:36:34:90:43:8F:59:7B:93:84
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b5:b6:8f:c5:ec:90:fe:a2:72:8a:b2:0a:a2:d5:84:69:5d:
0b:00:b2:c4:a9:54:46:97:72:b9:9a:bb:e3:85:6b:ac:7f:85:
7e:7b:c5:7e:7d:55:54:49:7b:65:2d:11:2c:13:32:1b:51:09:
45:e4:45:e7:ff:40:91:c5:9c:8c:b3:bd:cf:bd:13:90:ea:bb:
6d:20:5c:02:7d:00:e0:9d:6f:89:08:b6:85:a1:10:67:92:bc:
35:6e:22:07:93:40:9a:ed:ff:a4:f7:43:27:d3:b0:ee:9a:99:
d3:90:8e:b9:57:7c:ed:a7:a7:e7:6f:26:25:50:6b:0d:24:e9:
05:1d:d9:b1:ed:a9:f1:b6:44:36:22:1b:44:02:7c:a9:92:d6:
e9:f4:c2:19:c0:d5:41:45:e2:46:b1:a9:f6:66:07:5e:24:c8:
b1:27:0c:bd:a3:52:b9:b6:fd:12:ed:28:58:2f:22:61:41:1a:
7e:0b:6e:33:e8:e7:e1:23:c9:14:0c:e8:80:ef:da:7c:d1:92:
7f:e7:15:a3:7b:d1:ef:e3:4d:49:53:81:63:19:14:21:86:19:
0c:77:b6:ce:b2:c9:5d:9e:c8:9f:8a:a3:bc:d5:19:1e:a6:b1:
6a:38:2c:8d:07:7e:0d:66:96:62:13:83:05:aa:8e:ec:9c:ab:
5f:de:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:56 2026 by rpki-client