
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: pz2RBU9Wp9tBvSaU6eI2/20MDuiWGglIs2fW7px28Oo=
Subject key identifier: 04:FB:2E:E5:35:BB:9A:57:46:09:F6:BC:45:8F:38:15:BC:34:73:87
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019DA309F5141105AEB0BC594D2786E4E160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 08AB
Signing time: Sun 19 Apr 2026 00:00:31 +0000
Manifest this update: Sun 19 Apr 2026 00:00:31 +0000
Manifest next update: Mon 20 Apr 2026 00:00:31 +0000
Files and hashes: 1: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: qCI10HDaZMXURUUXMOJSZT/AyAFiofwvYeMsxKXmMCE=)
2: oog2fr3azEwEvR96dUyVexH-pPI.roa (hash: 5Y/z/o0CKihXpA4MvidWc/Ioyt/faMA9m4DgHjwqJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:f5:14:11:05:ae:b0:bc:59:4d:27:86:e4:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Apr 19 00:00:31 2026 GMT
Not After : Apr 20 00:00:31 2026 GMT
Subject: CN=04fb2ee535bb9a574609f6bc458f3815bc347387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:fc:40:ea:43:3e:25:be:f0:6e:e3:1a:03:
51:82:25:39:fb:9d:fa:41:a3:61:70:1b:81:3e:b3:
68:ca:09:88:fc:b4:f6:c5:cc:84:0d:2a:78:0d:a1:
80:69:8a:84:73:df:6a:49:03:09:3e:4c:24:46:f3:
d4:06:ee:f3:dd:18:d3:b2:b1:77:92:75:e0:88:87:
fc:52:7a:6a:55:f1:68:52:70:62:11:e1:54:b7:8f:
97:b0:fd:22:9f:dd:68:61:6d:a3:cf:1e:04:b5:9d:
94:3d:4f:d1:09:ab:83:ce:bf:ca:16:4a:c9:dc:8c:
3b:11:53:bc:ac:0a:89:e5:b8:58:67:c6:23:83:c5:
69:0a:83:1b:e2:fa:f4:b1:81:43:89:fe:e0:f0:42:
e6:60:d1:2f:aa:ef:9c:d3:bb:ae:6a:76:40:88:f9:
50:7b:e9:89:2d:5e:79:2c:c7:aa:03:02:6e:4e:49:
1a:cb:f3:c5:c0:6c:c6:77:1f:9c:91:f5:3a:bd:e3:
86:40:91:a4:1f:8e:96:b9:9a:a4:b2:55:9e:05:6e:
a9:e7:a9:97:42:4e:f5:19:cd:a7:20:c0:80:96:d1:
64:fc:e8:67:ce:7f:1b:db:fb:02:ba:8c:12:7f:bb:
06:e4:0f:6c:7f:0a:29:d6:61:12:ef:94:de:d2:7d:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:2E:E5:35:BB:9A:57:46:09:F6:BC:45:8F:38:15:BC:34:73:87
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a0:32:46:0e:67:62:6b:97:8d:d9:ad:cb:d4:38:ec:42:01:
98:05:1a:bd:e4:b7:1f:83:b0:c4:7b:8d:96:6f:02:94:53:f2:
76:bf:2c:2f:5a:3a:e1:67:a3:2f:49:26:2d:bd:7d:ca:b4:66:
db:b0:d4:5b:d4:e4:12:93:07:c0:c1:d1:15:7f:b2:44:64:3f:
02:bd:0b:5d:78:8a:bf:56:32:03:d2:bb:6e:00:96:ad:ac:a4:
f1:9b:6d:57:b8:95:35:71:b1:ab:90:31:e8:02:38:61:60:e1:
42:e1:62:21:c6:41:ec:bd:8b:3a:40:c6:d8:b9:7c:1e:04:15:
dc:88:00:32:c2:de:d3:fa:70:90:81:bb:99:c6:9f:fe:d3:1d:
2b:3e:90:b2:52:39:c5:ce:9d:8a:a6:ec:ee:29:ce:7b:0c:8e:
bf:7a:5f:73:56:25:27:9c:5a:88:95:3f:d9:74:95:73:09:85:
89:4b:f7:50:18:7c:a2:04:d5:10:28:be:3d:e7:ed:67:e2:a5:
d2:08:56:47:10:85:e1:bb:8e:a5:8e:7a:59:bf:44:c7:ad:5e:
a7:1e:6d:8a:2a:bf:3d:ec:d8:ae:57:41:8a:f5:30:6a:b1:eb:
ee:d8:26:12:51:d2:9c:02:bc:3a:4b:2e:d8:9e:89:8e:b4:22:
6c:c5:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:44 2026 by rpki-client