Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier: fFtS9rUNxl3R/r+5KTeuBuhiDcaxyK4gHANEFQEg0YU=
Subject key identifier: 59:80:0A:16:A9:72:1E:DA:82:77:ED:4B:85:7C:E7:51:94:61:72:1A
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 019D9AABE389B5045D4B35147A84D5F364D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:49 +0000
Manifest this update: Fri 17 Apr 2026 09:00:49 +0000
Manifest next update: Sat 18 Apr 2026 09:00:49 +0000
Files and hashes: 1: 2vg_kV-IwRmAxn8B26cLW4LkU0w.roa (hash: VDT6JmSN6c2xivEG5k5KapTeu18e10k6mZCk7l+NGZg=)
2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: rt71MVZbCW91bmq2X3LQKMAMbtBYK49vmxsxYXigzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e3:89:b5:04:5d:4b:35:14:7a:84:d5:f3:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Apr 17 09:00:49 2026 GMT
Not After : Apr 18 09:00:49 2026 GMT
Subject: CN=59800a16a9721eda8277ed4b857ce7519461721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:8d:f6:c3:5d:d8:6e:1a:ca:a4:2b:e4:e3:
9c:c8:4f:dd:94:a5:ad:85:42:57:41:b7:7c:73:3a:
dd:27:d5:65:27:df:e7:83:6a:71:c5:f9:5e:01:86:
0a:61:39:f6:c3:c6:fd:f9:ce:b2:59:95:57:41:39:
71:20:ae:49:b5:35:b3:4c:b1:39:cb:25:88:0a:b3:
71:3c:0f:0c:37:f3:af:b9:aa:64:88:80:b3:3c:66:
7b:8e:c6:f6:05:9d:06:ed:25:2a:9c:4c:27:6a:9d:
ac:52:85:23:5b:5d:6a:40:af:5d:75:5a:84:2f:e9:
31:71:ce:f1:55:18:19:1f:c4:95:18:74:c6:70:27:
7e:28:95:25:cf:c5:42:20:e3:d8:c0:fa:6a:46:8a:
22:a4:55:ae:ae:c7:12:3e:e1:2d:a9:4b:2a:ba:e5:
9c:d0:54:fa:d6:df:f0:46:67:ba:0c:be:55:58:84:
cc:a8:12:d1:67:bf:38:e6:6d:52:77:0e:29:c5:ad:
d7:f6:56:09:07:f0:ff:83:0e:82:c2:c4:ad:e0:5d:
58:6b:bf:62:cc:c3:a8:c3:a4:a7:46:f5:f5:1c:c2:
12:95:2e:e0:63:c7:5e:fe:b2:11:bb:6b:60:54:52:
b4:2f:f9:1d:5d:86:6f:41:61:be:e1:bf:76:10:20:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:0A:16:A9:72:1E:DA:82:77:ED:4B:85:7C:E7:51:94:61:72:1A
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3a:94:d5:af:a3:2f:a9:d5:bc:2f:db:6c:47:69:02:13:35:
a0:65:0f:2a:4f:df:e3:0a:02:d5:c7:7f:aa:e4:f8:12:eb:13:
c4:ef:44:4e:e7:7b:59:a6:30:be:f0:27:6c:ed:10:5b:a7:be:
87:17:26:42:12:0a:16:79:1f:f4:db:9d:df:4c:54:5f:0c:79:
08:d3:09:aa:d5:c9:b2:81:77:03:58:84:dd:49:fb:b4:e9:31:
24:73:0f:b2:50:16:64:d8:42:7d:77:2c:8a:58:8f:23:ee:6f:
9a:20:38:84:0c:96:6a:e3:58:1b:9f:ba:ee:24:15:28:60:79:
9c:ec:48:06:eb:bb:42:e1:2b:53:a2:75:f1:4b:5a:d4:2c:6c:
2b:91:29:61:4b:61:d0:57:7b:d0:aa:7b:d5:c1:9c:56:d6:d5:
0e:7b:07:48:79:7b:93:4d:51:1f:fa:d8:12:42:d9:3f:df:dd:
a5:33:c6:6a:77:d5:65:06:fd:74:b0:20:bf:b1:8d:13:91:06:
4f:aa:13:f8:82:bb:e6:3c:0a:78:9f:db:20:51:6c:d2:58:83:
01:67:b5:08:dd:ac:c4:52:90:6a:64:3c:e5:d0:cb:13:c3:ca:
c8:da:f4:4b:ea:30:29:df:1a:e4:e5:73:ce:a4:91:c3:ef:2b:
64:be:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:05 2026 by rpki-client