Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: D94G+o1V9rdzXW23CqlaHKcMHtzgddqy+tgEWw005sc=
Subject key identifier: 76:C4:C9:DB:89:F9:67:29:5A:EC:51:E9:7A:69:AB:BF:B3:8A:E7:00
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 019DA4F93442D6E160FCE5EB52BA485DA615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 0523
Signing time: Sun 19 Apr 2026 09:01:28 +0000
Manifest this update: Sun 19 Apr 2026 09:01:28 +0000
Manifest next update: Mon 20 Apr 2026 09:01:28 +0000
Files and hashes: 1: NpGUmqE9n-wLzkQYMJgktAVQDec.roa (hash: jKDsKPpujuY8oxz+Om3wlzTAhMZxAodY1X1VfsB0nws=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: ZLKTV8SQs2fbgkfPq6tb2cDxaXIDYUx+2HN4okpP4mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:34:42:d6:e1:60:fc:e5:eb:52:ba:48:5d:a6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Apr 19 09:01:28 2026 GMT
Not After : Apr 20 09:01:28 2026 GMT
Subject: CN=76c4c9db89f967295aec51e97a69abbfb38ae700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:a0:00:b0:13:9c:9a:ec:fd:b0:58:ed:59:
af:af:08:69:13:f9:e6:2d:75:10:73:0d:27:66:69:
6a:2f:29:22:ef:77:d0:b0:e3:05:06:11:d4:99:ff:
fc:1e:bb:0c:90:2c:4c:34:ad:48:30:ad:4b:33:08:
73:1d:1c:18:0e:34:45:5d:67:ed:fe:66:c7:e1:44:
da:82:f0:1d:ed:d4:c0:5d:e9:9c:5c:81:00:90:d7:
30:a8:f2:c0:68:b1:fc:2a:0c:85:df:09:d3:a3:9a:
f5:26:e5:3c:62:4c:cb:eb:09:e5:64:de:0a:9d:74:
c5:b3:4a:74:20:02:f1:9c:5c:e4:17:21:05:47:a3:
d1:56:b1:0c:26:35:f9:45:f9:9b:24:d4:76:f0:56:
7e:6f:81:f5:00:d9:af:51:6d:c6:28:88:96:83:be:
78:bd:eb:8f:55:18:fb:7b:81:70:64:a3:29:89:2f:
f6:44:6b:02:a5:4e:19:e2:d2:fb:23:d9:2e:06:7b:
a4:bf:62:a6:33:28:d8:a9:96:22:43:bd:a2:9d:64:
76:33:f8:1c:3e:84:52:5d:a5:6a:53:75:99:17:c4:
df:52:0c:d7:26:64:3f:67:f4:6a:5f:df:e6:60:4a:
e9:a7:d5:75:cb:65:ef:06:ac:af:95:f9:a7:24:a8:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:C9:DB:89:F9:67:29:5A:EC:51:E9:7A:69:AB:BF:B3:8A:E7:00
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ac:b1:c3:34:ff:e3:dd:a9:52:e0:6c:11:8b:c5:8a:86:87:
59:5f:0d:37:ec:09:9b:65:b8:ec:d2:d6:fd:ae:3e:e5:4b:19:
98:a9:c4:00:23:17:57:cc:05:66:54:f6:24:8b:40:34:e4:43:
3c:0c:de:56:57:8e:06:2a:5e:c5:21:02:8c:3f:4a:ba:b8:b0:
62:d1:06:39:fc:2e:b8:96:b4:37:6a:ca:ef:66:05:df:90:6b:
f4:5b:cd:95:71:0d:3f:af:0a:ee:e9:af:1a:08:42:81:ec:b3:
09:e9:ed:94:64:e4:b6:67:40:d4:e7:73:3a:f0:b0:da:d9:64:
a2:1d:4d:9d:40:42:72:5c:ff:a5:c7:b4:11:2d:1e:7e:e4:cd:
5b:1e:6e:d7:ad:25:e8:70:a1:e4:30:3c:2a:ab:37:9a:3d:57:
7c:97:1a:ba:ca:24:24:e8:19:aa:07:1b:36:33:25:f9:d5:75:
07:f3:96:42:91:0e:3b:aa:c5:66:4b:e2:b2:f0:24:78:25:3d:
9c:6e:42:30:95:2c:87:df:88:14:1e:ff:2d:14:ff:93:8c:f1:
2f:9f:8a:38:dc:78:87:b9:5c:da:44:f7:4f:44:e2:fd:48:62:
65:cf:37:0a:ed:a7:80:be:75:f5:77:2b:31:a6:de:47:06:a6:
38:ff:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:45 2026 by rpki-client