Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: ZTx3bJ+XTlt3vAPuDI3FZ+qOQ7ft3k78V3JM3QLZXZc=
Subject key identifier: 7B:53:C5:8B:2E:38:CD:25:02:81:2B:CD:E8:91:F2:CF:51:1A:3D:72
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019D9AE298DA7532D2D4B06BFED82CDF8E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0B3B
Signing time: Fri 17 Apr 2026 10:00:34 +0000
Manifest this update: Fri 17 Apr 2026 10:00:34 +0000
Manifest next update: Sat 18 Apr 2026 10:00:34 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: rYD+pA3qrvKQyKxAOltimzaMbeVPwheDMWxAX4P5YJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:98:da:75:32:d2:d4:b0:6b:fe:d8:2c:df:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Apr 17 10:00:34 2026 GMT
Not After : Apr 18 10:00:34 2026 GMT
Subject: CN=7b53c58b2e38cd2502812bcde891f2cf511a3d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:a9:06:cd:1c:86:0e:c5:9e:61:3b:74:b1:
0b:fe:b4:7f:0b:1e:37:9d:ea:66:50:ee:93:f4:30:
1d:eb:5c:a6:c7:85:d5:53:d9:32:80:f5:9c:f1:69:
0c:10:5b:52:3e:0d:eb:40:d4:ec:1c:5b:3e:74:37:
41:e8:c6:73:08:3e:1d:ec:2f:d5:cf:6f:6d:e0:0b:
f2:f7:60:24:49:21:93:9e:b7:c0:cf:d5:3b:90:2c:
07:1c:ba:ef:87:16:83:60:55:31:f7:4a:13:29:64:
19:7b:a8:ac:23:f6:ff:f5:db:50:eb:3b:fd:6a:92:
13:41:3d:01:d9:cb:23:24:73:87:e0:be:c9:1f:62:
02:62:67:28:8a:9c:9b:2c:88:9a:9c:80:89:96:ac:
24:d8:ef:c6:1d:c5:d1:91:10:a4:cd:94:d4:e7:4c:
e8:95:cc:3e:41:e9:f4:e8:6f:0f:b3:6c:98:4b:06:
13:af:20:d1:ac:65:61:83:23:56:a2:e5:ac:e5:7b:
6f:aa:3a:97:2c:50:05:43:09:95:ff:83:67:3b:d5:
41:b4:af:de:e0:64:af:78:aa:e1:20:e1:a6:6c:65:
7f:64:ee:63:6d:30:6a:45:8f:32:fa:c1:ab:9d:bc:
71:04:d8:07:da:bb:d6:7b:0c:27:d3:b1:2a:ef:81:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:C5:8B:2E:38:CD:25:02:81:2B:CD:E8:91:F2:CF:51:1A:3D:72
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dd:2b:1d:23:c8:f1:e6:af:e4:0f:dc:f9:61:52:f4:f9:32:
77:7a:2f:a7:fb:09:05:32:c6:2f:03:b3:71:48:a5:c5:9e:89:
0e:46:07:33:9b:24:27:04:21:ec:3d:ac:4a:fa:e0:f7:46:dc:
53:cc:56:30:36:d7:9f:4c:db:9d:3f:78:18:d2:7f:e2:8a:25:
bc:c6:e6:af:9b:70:fe:2e:a7:30:7f:eb:90:c9:cf:78:24:30:
14:06:6b:f4:d9:67:c9:83:2e:28:9a:65:0c:d8:34:db:9f:5c:
d8:3d:ef:2c:28:72:c3:bd:4b:b0:8e:5c:b3:b8:7d:c8:95:46:
aa:f1:b4:60:7f:63:00:d2:98:d1:fd:de:fd:28:48:2d:ec:33:
6b:59:4c:c6:74:2f:c5:37:7f:78:65:20:03:d9:05:1c:e0:0c:
ec:89:81:f5:a2:21:31:bf:0d:d8:27:06:59:2b:b0:af:63:08:
7b:79:df:42:f7:09:20:81:68:61:3a:b7:7a:08:42:5b:bc:70:
70:ab:b5:b1:49:34:60:52:c8:21:a0:f1:76:71:af:4f:35:2d:
ab:02:ca:3e:c7:16:59:fb:93:39:b2:38:66:40:ac:06:b9:6a:
8c:cb:fd:35:cf:ef:72:42:48:38:3d:97:4b:5a:7f:1e:58:06:
2f:96:2f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:25 2026 by rpki-client