Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier: 1/GcM1D586zsan7Z40KytbSNTFobVU4yRal4o6VU7pM=
Subject key identifier: F5:6C:0B:84:BB:4B:AD:21:C9:DF:9C:F8:68:C4:71:B6:8B:EB:D6:C8
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial: 019D9A3F11FB509CF798D8AF1292CCB3DEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:57 +0000
Manifest this update: Fri 17 Apr 2026 07:01:57 +0000
Manifest next update: Sat 18 Apr 2026 07:01:57 +0000
Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: HDrYLM6sYn7v4p43/wyPl3UaIjaKrG7Oqcsyy0/RKU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:11:fb:50:9c:f7:98:d8:af:12:92:cc:b3:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Validity
Not Before: Apr 17 07:01:57 2026 GMT
Not After : Apr 18 07:01:57 2026 GMT
Subject: CN=f56c0b84bb4bad21c9df9cf868c471b68bebd6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:d0:d0:a3:16:09:a4:6d:0f:43:17:78:0a:
a3:2c:c5:85:ac:a5:b1:b2:5a:c3:9c:8e:75:9e:74:
fa:ce:d2:80:4a:4d:11:18:23:e7:84:2e:8b:1b:f3:
db:ca:7b:cd:93:08:4d:35:1d:61:5b:80:17:78:7b:
ff:42:a9:8b:b6:c2:a0:9e:1c:92:bf:90:b6:0b:9f:
46:f3:86:ca:7a:f3:3c:0d:86:c3:27:f1:99:2f:af:
ba:fb:bc:0a:57:04:eb:ec:af:b7:a6:da:e0:08:14:
78:a6:d8:8f:9b:5f:4d:84:6f:03:6f:07:b1:93:e0:
14:8c:69:e2:27:1f:9c:82:a0:8b:74:d4:6a:0a:c2:
82:ce:35:cf:2d:f2:60:98:b2:0a:2a:84:a2:83:71:
e0:cf:5b:30:37:84:a9:ec:7b:a3:b8:e1:14:a2:6a:
b2:c2:64:f4:8a:d1:e9:22:08:2b:79:83:82:a2:9f:
6a:c0:df:f6:23:1f:57:7b:e0:6e:01:a5:e8:9b:92:
9d:77:c7:1d:01:59:75:d0:d3:b7:73:5a:a3:b2:62:
bc:97:9b:6c:53:7c:64:02:29:21:29:c5:fd:86:07:
47:28:d0:21:52:48:37:4c:cc:3b:84:37:5d:6f:c8:
f0:46:45:88:ad:8a:e2:58:b5:68:a1:48:09:3d:4d:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:0B:84:BB:4B:AD:21:C9:DF:9C:F8:68:C4:71:B6:8B:EB:D6:C8
X509v3 Authority Key Identifier:
keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:d7:b9:1b:cb:8d:c4:62:64:47:e4:39:ae:7b:72:23:04:
47:3a:54:33:e9:f5:4f:43:cb:7c:e5:8d:25:ca:a9:1b:9b:b6:
cc:8c:94:a8:a5:85:2d:80:f8:d2:0a:fb:f7:44:7e:6f:32:38:
1e:c2:2c:de:4d:46:e7:80:c3:d3:a0:fb:42:8b:64:4c:c9:d0:
37:00:70:89:e3:64:b5:96:ad:04:e8:c2:18:95:05:a4:43:d9:
44:36:9b:53:e8:7e:c5:6b:7e:e7:b4:f3:7a:5a:39:b5:fd:84:
46:91:cd:c4:e0:59:c7:76:e3:df:88:2c:d6:91:2a:c2:1a:88:
d9:1b:97:08:52:7e:fd:52:4e:ce:4c:f6:67:b4:bc:e5:6d:76:
af:2c:8f:a6:a6:af:b7:8c:f0:ae:ac:a4:a1:7f:61:2f:35:2b:
82:18:8b:67:a1:73:99:c6:c4:99:f4:f0:ba:52:b7:5f:c0:5b:
c8:90:20:a2:34:80:76:9b:ba:aa:27:c3:15:75:d0:64:9b:19:
91:06:c2:de:f5:45:0f:01:6e:c7:fa:04:ba:72:ce:29:64:37:
3e:dd:f0:7d:3e:fd:15:72:ea:ad:91:70:30:38:2c:d7:bf:28:
27:02:df:9d:0d:d4:ae:9a:46:16:60:e6:eb:35:d5:5e:7b:4b:
d5:a8:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:58 2026 by rpki-client