Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: l8ZnAznQij1C1Y/vFWhh3ezsFbOD47w5UXpbWTkKWHI=
Subject key identifier: 85:33:3E:CD:06:9A:2B:91:F1:BB:9D:CB:B9:5C:A7:08:EC:8B:03:91
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 019DA378FD5B41220F276D8D74DD4EADE197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 02:01:48 +0000
Manifest this update: Sun 19 Apr 2026 02:01:48 +0000
Manifest next update: Mon 20 Apr 2026 02:01:48 +0000
Files and hashes: 1: Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa (hash: IFvAqWAV36VhOvXLelo0nvun/QoXpwk8T72OiDJu/UQ=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: pWVUaUj3wnBphXIy7nuDASRDISaAWhcwgRCSndLb9OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:fd:5b:41:22:0f:27:6d:8d:74:dd:4e:ad:e1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Apr 19 02:01:48 2026 GMT
Not After : Apr 20 02:01:48 2026 GMT
Subject: CN=85333ecd069a2b91f1bb9dcbb95ca708ec8b0391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:db:7e:ea:27:df:41:ca:08:07:03:3c:39:
00:6a:d3:5e:4a:45:4a:ed:a2:8c:ce:cb:08:6b:c9:
1e:af:2a:9a:f0:8a:90:f7:ce:27:8b:66:b0:e3:c7:
0c:20:7a:c8:d1:e1:69:7d:20:a4:dc:8d:8c:5e:95:
49:67:eb:82:17:58:26:43:54:4b:ea:a2:3b:f3:d4:
59:21:47:24:f2:a5:af:0e:24:49:d9:09:1b:e1:84:
80:9c:e5:bb:e9:8a:8d:97:6d:b5:e5:70:fc:56:88:
4f:c4:97:70:7d:74:51:79:c9:2c:97:32:82:9b:17:
80:0a:b9:ba:a4:ed:1d:56:dd:57:95:36:a4:08:7d:
e1:2d:02:aa:6d:6d:66:8b:23:9f:a3:77:12:0e:24:
c3:e5:6e:31:8f:de:db:9b:a0:d3:e2:ac:cd:e1:1a:
95:24:0b:60:61:6b:5f:77:82:ef:35:3b:00:89:dc:
e5:bd:4a:95:76:b8:51:f5:da:40:0e:8a:dd:26:c8:
b1:1f:61:24:c6:63:31:5d:e7:6b:15:84:b3:0c:d1:
be:59:a4:e1:25:01:5b:5f:13:ce:96:89:72:5c:aa:
ed:97:9c:2d:e1:0f:98:12:eb:3a:9c:fd:3b:2e:b3:
d0:ac:10:f1:90:ac:b7:5f:74:cb:77:4b:f6:a2:db:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:3E:CD:06:9A:2B:91:F1:BB:9D:CB:B9:5C:A7:08:EC:8B:03:91
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:75:a8:8d:ad:db:51:72:cf:c8:6a:3b:4a:2f:93:1a:37:
40:84:64:f8:1e:85:76:68:c5:18:85:f6:da:e8:5e:cc:55:13:
16:9d:7b:20:29:f6:d3:a5:6c:6a:66:1e:22:4d:b8:63:14:2f:
62:77:53:91:f9:2a:23:50:fa:91:16:04:30:10:47:11:fe:ce:
6c:3c:d0:1f:f2:db:28:cf:9c:a9:16:03:62:6d:86:87:8a:e7:
17:99:8b:64:d3:cc:8f:8b:47:d0:c3:37:ee:b8:7c:d3:8e:a1:
8d:ca:9e:ba:83:79:30:f8:a8:95:62:7f:1b:7d:04:3d:b7:c5:
da:c4:f4:a6:f0:be:b9:e9:f1:12:46:59:78:42:91:ba:bf:a0:
5d:9d:98:69:80:f6:ee:f4:e1:67:f3:f7:94:69:4b:41:aa:38:
f7:b7:12:01:f9:a5:2c:fa:f1:a1:7e:72:a2:25:0c:0a:f6:0d:
57:b2:ef:75:4f:8c:8f:9e:29:35:89:a1:0c:59:ab:d1:19:a6:
7a:70:83:41:6c:9a:8d:72:43:cc:15:d3:ee:b8:c5:44:f8:0b:
e5:b6:7b:3e:1e:b0:70:c1:84:47:47:62:46:b3:46:19:b8:c3:
c6:39:4e:8d:bf:e6:79:8b:8d:f3:14:0a:53:db:b6:58:97:65:
1c:b1:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:38 2026 by rpki-client