Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: 0dg/o2cHyEPionwr6gHscIailzz8dk1BvUKyMbsiQQM=
Subject key identifier: 8B:33:63:AF:08:DC:82:50:3E:5F:74:50:BD:6B:8C:38:9B:0C:DE:71
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 019D9B1967B94BB8F0FA401BD3E90DCC42F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:00:26 +0000
Manifest this update: Fri 17 Apr 2026 11:00:26 +0000
Manifest next update: Sat 18 Apr 2026 11:00:26 +0000
Files and hashes: 1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: 7QgMhcr+BUs7PzutZpfecvSmQ4IFx7wE5c4MM1iBw8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:67:b9:4b:b8:f0:fa:40:1b:d3:e9:0d:cc:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Apr 17 11:00:26 2026 GMT
Not After : Apr 18 11:00:26 2026 GMT
Subject: CN=8b3363af08dc82503e5f7450bd6b8c389b0cde71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:8e:ec:c6:1b:de:e6:71:6b:dd:77:13:af:
22:93:53:1b:3b:46:c6:5c:63:0a:00:a3:73:68:c0:
8f:18:90:14:2c:f9:c6:fb:03:20:72:96:b2:86:43:
ed:85:47:57:35:bb:3e:7e:f1:f5:d6:da:16:a3:b4:
d0:b6:33:dc:a7:1a:8b:35:46:d1:3a:b6:fd:e3:be:
9b:db:57:3a:f0:c5:78:ef:ec:66:68:46:93:30:c9:
b0:02:91:7b:e1:d3:c5:7a:30:90:2d:4d:9e:e3:33:
cb:c0:a3:7b:0f:c0:8a:60:5d:d6:4c:70:2e:4c:32:
ea:95:8a:19:47:d0:cc:d5:1b:f6:f9:be:50:2e:71:
f4:f5:f5:0e:b9:6b:0c:07:62:ec:b9:2f:03:f9:b8:
1a:87:66:d2:67:d3:51:7d:73:ee:94:af:c8:1c:c8:
b8:d2:18:fd:92:d0:b9:c7:2a:11:ec:a9:3b:94:5a:
39:b6:f9:36:0f:d6:b7:4b:20:3e:da:cd:a0:0e:c5:
07:bd:6c:bd:48:19:54:e1:8f:41:12:ad:88:d2:42:
1c:90:54:e9:36:0a:c2:58:a8:0c:76:df:8a:9c:ae:
42:03:26:39:be:82:21:38:8d:a9:a6:93:02:9d:74:
cd:fb:8a:38:c7:5c:f1:f1:6c:9d:18:17:c7:01:5c:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:33:63:AF:08:DC:82:50:3E:5F:74:50:BD:6B:8C:38:9B:0C:DE:71
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:12:e3:d2:94:09:43:ff:a2:51:ec:c4:ec:4d:07:aa:8f:e9:
54:82:2d:65:82:01:dd:7a:37:5f:54:b6:6a:d1:4a:07:60:cd:
27:06:b0:37:00:51:17:b6:e5:aa:53:31:e3:c2:1c:27:90:ba:
9b:89:4e:97:f3:bb:c7:0f:c0:aa:ff:bc:d3:9d:d8:08:71:ff:
cd:c2:f5:84:fb:d3:ff:e4:04:97:28:de:29:7b:25:b4:bb:8f:
e0:60:f5:02:0b:15:75:d4:5d:9b:04:1d:79:7c:3d:f6:44:8a:
63:f2:f9:53:aa:d5:24:81:13:b7:a5:ab:32:99:04:f5:5e:8d:
44:68:7e:93:20:d4:b9:e1:30:ea:73:a4:81:b2:26:7a:04:c5:
38:23:8b:8b:70:51:db:d8:c3:88:86:02:03:8d:81:fd:59:f5:
c6:51:3e:3f:49:55:5f:df:9b:8c:a4:bf:ad:7c:38:de:a0:aa:
28:a8:65:72:69:1c:61:fa:68:de:88:9d:bb:72:e2:ad:75:64:
de:08:4e:09:e4:1b:ca:7b:39:44:e3:7b:bb:5e:e6:aa:fa:45:
72:1e:f1:e3:06:fa:30:33:56:87:5b:21:67:61:a9:ab:f2:ae:
4a:27:59:da:dd:83:c1:28:43:21:aa:96:ad:ac:01:b2:6b:24:
1a:5e:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:08 2026 by rpki-client