Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: luSpfyeD32DDOazYUsUxOtqGRHxsv/BxWLFVwbuedEs=
Subject key identifier: D8:22:4A:E6:94:AB:AD:1E:97:25:5A:B1:09:AF:0F:6C:AC:35:42:30
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019D984F7F5CBDA59B5BEC01B8E0B85C0CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:00:39 +0000
Manifest this update: Thu 16 Apr 2026 22:00:39 +0000
Manifest next update: Fri 17 Apr 2026 22:00:39 +0000
Files and hashes: 1: RAiUuWAS6kcQ-QJt6I-SFZa80cQ.roa (hash: ttJu1TEjHl6NqHl89N7ouZ4TGNYPAl0suf8bz/Ts/Kg=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: ixeR0NNHcr2OcHxrOqowu2ObDW7eNmeEcHOzZ0osZWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:7f:5c:bd:a5:9b:5b:ec:01:b8:e0:b8:5c:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Apr 16 22:00:39 2026 GMT
Not After : Apr 17 22:00:39 2026 GMT
Subject: CN=d8224ae694abad1e97255ab109af0f6cac354230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:7a:45:62:2b:6a:bf:bc:da:e1:6e:5c:25:
cc:3f:b1:fe:bf:8b:59:f4:ed:02:45:83:32:11:6a:
3b:90:4b:69:2e:86:6a:67:08:dd:94:91:35:37:76:
58:c8:ac:7f:90:6f:c2:93:c0:6e:60:72:aa:58:1b:
e3:18:7e:84:1a:7f:10:aa:6d:82:e6:1f:db:d6:f5:
c3:e6:75:38:5b:11:3d:96:57:48:9a:39:df:12:7c:
67:e7:cb:d9:20:4a:f7:69:63:2e:7e:f4:a9:82:e5:
6b:13:fb:20:15:8b:21:aa:5d:dc:8b:b4:32:4d:2a:
2d:3e:ae:b8:9f:f6:ac:25:ac:db:a4:57:94:7e:98:
b9:e1:f7:0c:b8:2b:97:6e:b0:50:9b:fd:0f:23:a8:
f4:8a:de:49:65:b0:78:cb:9c:1f:9c:26:c8:9d:1e:
b0:bf:71:22:36:69:c5:b3:6e:ff:b2:7c:9a:2a:7b:
66:43:67:dc:5c:18:87:44:09:5f:d5:5d:c8:3e:35:
f8:c5:08:91:13:ba:bc:04:71:59:b0:09:35:b8:5d:
30:e1:72:c5:0b:a5:0f:00:c5:51:8a:7c:82:01:9f:
aa:f0:48:15:06:b8:aa:95:90:c9:6d:6a:1e:bd:e9:
30:55:e5:f1:b5:da:0c:4d:ed:7d:5e:cb:74:59:1d:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:4A:E6:94:AB:AD:1E:97:25:5A:B1:09:AF:0F:6C:AC:35:42:30
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8b:8e:6b:2f:88:ca:0a:18:0c:67:8f:b9:41:38:ac:44:28:
63:e1:c1:52:95:3e:b7:b6:ab:64:40:7e:29:d5:03:c0:37:16:
b5:c4:cc:6d:62:29:ef:7a:01:8a:f1:3a:89:0a:96:91:bf:2c:
8a:b0:df:e4:59:aa:eb:d3:c9:45:51:97:c1:94:c4:74:cf:57:
52:84:c1:63:6c:92:e6:85:6e:5d:e3:a3:3e:71:0a:54:58:87:
bc:5f:00:b1:98:f3:d3:00:36:b6:71:70:4a:ce:89:a9:6a:2f:
9a:85:88:7a:9c:51:46:a5:b8:91:33:e0:e4:e2:b9:07:9f:4c:
ce:8d:53:94:21:9d:c4:4d:29:ac:4a:0c:28:5e:76:97:bf:93:
35:28:7f:9b:7b:04:d6:65:c3:be:d3:98:4e:e6:68:c0:71:cd:
00:74:1f:1c:3f:5d:66:53:fa:1d:ad:f1:25:8f:9a:ae:48:d2:
13:9e:9c:dc:54:1e:7a:c8:b0:86:bd:46:83:d6:eb:8d:10:da:
fb:2c:24:ea:14:a4:d0:75:95:aa:40:ff:6f:be:24:45:ff:08:
72:97:ef:e4:3d:c4:d1:1d:b3:68:12:20:32:b5:0a:a9:28:e5:
1d:a9:a6:80:a3:7f:d3:ad:8e:73:bd:db:64:5f:03:fc:9c:a2:
e9:da:39:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT39cvaWbW+wBuOC4XAzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw
M2M3NjkwHhcNMjYwNDE2MjIwMDM5WhcNMjYwNDE3MjIwMDM5WjAzMTEwLwYDVQQD
EyhkODIyNGFlNjk0YWJhZDFlOTcyNTVhYjEwOWFmMGY2Y2FjMzU0MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwd6RWIrar+82uFuXCXMP7H+v4tZ
9O0CRYMyEWo7kEtpLoZqZwjdlJE1N3ZYyKx/kG/Ck8BuYHKqWBvjGH6EGn8Qqm2C
5h/b1vXD5nU4WxE9lldImjnfEnxn58vZIEr3aWMufvSpguVrE/sgFYshql3ci7Qy
TSotPq64n/asJazbpFeUfpi54fcMuCuXbrBQm/0PI6j0it5JZbB4y5wfnCbInR6w
v3EiNmnFs27/snyaKntmQ2fcXBiHRAlf1V3IPjX4xQiRE7q8BHFZsAk1uF0w4XLF
C6UPAMVRinyCAZ+q8EgVBriqlZDJbWoevekwVeXxtdoMTe19Xst0WR10hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgiSuaUq60elyVasQmvD2ysNUIwMB8GA1UdIwQY
MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt
ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2
LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbouOay+I
ygoYDGePuUE4rEQoY+HBUpU+t7arZEB+KdUDwDcWtcTMbWIp73oBivE6iQqWkb8s
irDf5Fmq69PJRVGXwZTEdM9XUoTBY2yS5oVuXeOjPnEKVFiHvF8AsZjz0wA2tnFw
Ss6JqWovmoWIepxRRqW4kTPg5OK5B59Mzo1TlCGdxE0prEoMKF52l7+TNSh/m3sE
1mXDvtOYTuZowHHNAHQfHD9dZlP6Ha3xJY+arkjSE56c3FQeesiwhr1Gg9brjRDa
+ywk6hSk0HWVqkD/b74kRf8Icpfv5D3E0R2zaBIgMrUKqSjlHammgKN/062Oc73b
ZF8D/Jyi6do5sg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:14 2026 by rpki-client