Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: IcMSop2N1GIxzeCxWiNFYIf2awUBha6Al7F5vDbCcHo=
Subject key identifier: 31:D0:7A:A7:D9:73:78:8B:86:5D:1E:39:8B:2D:ED:9A:30:F6:8D:ED
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019D9886D674D9FFD51B833CC9D2FE81F47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 23:01:06 +0000
Manifest this update: Thu 16 Apr 2026 23:01:06 +0000
Manifest next update: Fri 17 Apr 2026 23:01:06 +0000
Files and hashes: 1: Be5RoMw-ds5u2XTKB0fRW06anJM.roa (hash: /kKlE5noyKkxWgeKwC5k06c0zlzs+Aq9eYc5li0SiaA=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: X9umx5XSKJAdCapnTfr+FJkKEsVoVyGeyQ0uy/WQGOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d6:74:d9:ff:d5:1b:83:3c:c9:d2:fe:81:f4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Apr 16 23:01:06 2026 GMT
Not After : Apr 17 23:01:06 2026 GMT
Subject: CN=31d07aa7d973788b865d1e398b2ded9a30f68ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:0c:c4:73:fa:df:52:b1:c2:03:0e:cd:3d:
bc:a3:50:65:55:07:13:68:aa:c6:b3:46:17:56:8a:
b4:7b:d7:fd:fd:ad:b4:4c:1c:a4:92:35:81:3c:ef:
36:81:4b:1f:e7:19:41:9d:75:78:b1:9c:2b:0a:27:
c4:fc:fd:e0:02:01:20:6c:80:7c:46:74:34:68:1f:
7e:61:f2:22:53:09:12:9f:31:20:ff:cf:2e:70:5f:
ce:f6:27:35:2f:a4:f1:03:82:60:3d:1b:e1:4d:1b:
20:fb:45:d7:fb:a6:9f:94:06:c3:2d:68:1f:07:0f:
49:dc:78:ff:c0:8e:dd:4f:b8:ac:9d:a5:5c:b5:b9:
75:4f:f3:f6:18:02:b3:04:e0:99:b2:e1:af:69:db:
36:c7:e0:59:59:2d:69:72:23:91:92:ad:b9:17:10:
61:bc:9c:fd:57:7a:b6:b5:d7:64:41:32:26:40:9b:
ac:20:9d:9b:10:82:ca:e4:f3:82:cf:74:53:8e:fb:
23:89:4f:2e:1d:78:5f:35:35:3c:6a:97:0c:a2:2d:
16:bb:e8:1e:28:d4:eb:27:ff:80:c3:a9:73:3b:4d:
c5:7f:15:ea:5d:04:28:99:5d:e4:ea:de:30:5c:3c:
2e:1d:f3:cf:e1:5e:92:d1:5f:55:5b:a6:1b:ab:a0:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D0:7A:A7:D9:73:78:8B:86:5D:1E:39:8B:2D:ED:9A:30:F6:8D:ED
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:dc:b3:7f:cb:92:2b:b8:44:95:4f:15:16:07:3b:48:d3:28:
4c:bf:84:a4:2c:35:ba:53:1d:f3:fa:6a:87:87:f8:8e:af:f5:
fa:f9:c9:e0:a1:87:4f:4b:a6:ca:f6:f7:3b:56:d4:4a:d1:ac:
dc:27:87:f6:90:a2:71:4f:8e:b8:b8:6b:54:2b:45:3b:a0:87:
20:89:af:d8:17:ba:47:00:58:bc:97:85:22:91:c8:b5:9f:70:
b6:49:32:f0:b5:3d:15:f9:e1:c9:61:4d:ab:89:3e:21:5e:a1:
96:b0:42:f3:eb:ca:a9:90:e8:91:fe:0f:de:96:06:f2:24:53:
47:71:3f:b6:ad:c6:56:24:7f:14:3e:b3:c1:d0:8f:10:4e:c9:
09:79:55:c0:f3:40:96:b6:c8:77:8d:c3:fa:dd:d1:ff:7b:64:
4e:45:3a:3f:81:73:8a:82:28:b3:c9:93:07:d8:a5:40:72:34:
0e:5f:de:97:39:eb:27:cc:9f:44:d3:ae:8c:51:8f:5e:c1:d2:
0a:b2:96:3b:a0:b9:f6:40:20:6a:21:e2:11:a0:3c:e8:05:e3:
66:2b:fe:5b:a4:26:61:4a:d5:85:3f:cb:1e:98:93:d4:b3:70:
6c:1a:be:a3:b9:1e:5e:23:cf:93:83:47:b3:ab:3f:31:28:dc:
6d:72:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:56 2026 by rpki-client