Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: oM3il6ENs+/ttjMcGV4lBiM4xPMD+ouT/8Xa0CEOTQg=
Subject key identifier: 3F:63:28:41:40:29:34:B0:73:05:DC:D1:B9:30:C6:C9:F7:79:60:C5
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019D9B5169AC3D8DD7A6739D011912F427BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:01:37 +0000
Manifest this update: Fri 17 Apr 2026 12:01:37 +0000
Manifest next update: Sat 18 Apr 2026 12:01:37 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: rkxseRw+qJfjCJBjmdU24naw2VnpghoTEnOlVSeuy3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:69:ac:3d:8d:d7:a6:73:9d:01:19:12:f4:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Apr 17 12:01:37 2026 GMT
Not After : Apr 18 12:01:37 2026 GMT
Subject: CN=3f632841402934b07305dcd1b930c6c9f77960c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:f8:9b:b8:a8:3e:f3:ff:40:61:c7:37:55:
2b:95:3f:82:d4:10:46:81:b6:3f:0e:99:6a:fa:a4:
94:4a:23:c9:a1:d0:90:e7:26:ed:12:c9:eb:5e:62:
67:17:ac:8b:d7:0a:90:f7:ae:a5:d8:50:35:fd:e3:
b5:99:cd:98:7a:4e:12:61:24:e0:25:ba:4d:31:b8:
fa:8e:e7:77:82:d2:f5:a8:ce:03:96:0b:23:89:f0:
72:6e:e0:25:0d:75:35:23:0a:77:69:73:17:66:37:
c9:a5:c4:1a:93:a6:c1:cf:ca:bd:50:e8:b0:36:da:
e1:f1:4c:f9:7a:c2:8f:43:03:4d:a3:04:c5:da:62:
07:92:75:58:39:ae:be:f2:0c:3e:f6:94:f8:d5:a2:
af:4b:50:5d:7a:00:c4:6b:d1:33:b6:6a:32:9a:25:
47:99:0a:17:c4:5e:cb:e7:6d:3c:a6:4b:1b:7f:b0:
11:21:a4:23:9e:5f:86:42:d2:8d:38:f2:4e:49:f2:
c3:cb:4f:c8:f1:9b:49:a2:13:5d:7e:c7:f4:ec:f9:
4a:e0:b0:54:26:30:d8:1d:93:ae:09:06:5a:0f:36:
27:4d:39:72:5a:27:b9:8b:ee:a4:85:73:89:9a:68:
5e:ed:52:0c:18:e7:f0:8b:2e:56:7a:67:37:0a:be:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:63:28:41:40:29:34:B0:73:05:DC:D1:B9:30:C6:C9:F7:79:60:C5
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:49:37:36:8a:75:22:8e:31:72:45:1a:53:9a:39:6e:7b:
5a:45:87:8b:4a:2d:c4:b2:f7:32:0b:fc:d9:18:03:7e:b8:5e:
2e:87:12:93:fb:e2:4a:7b:6e:68:5c:12:93:a1:3a:71:70:4e:
32:09:2b:11:07:8d:76:53:55:e8:c9:eb:93:f6:2c:4f:1a:53:
0d:a4:9f:c3:56:e9:b0:24:c4:7d:74:6e:46:41:0a:2f:17:c2:
32:fe:b2:93:56:3e:91:75:96:c6:3b:47:8b:7d:1b:80:83:13:
b5:7d:3f:f0:53:bd:20:fb:92:d5:76:ab:0a:49:e5:76:1a:9a:
52:be:89:71:dc:a8:c3:44:5a:af:2a:0c:df:25:b5:de:cb:e7:
50:93:1b:d9:c9:8d:3e:4b:f6:60:3a:9f:70:46:9d:60:1d:ea:
f6:bb:16:19:cc:9e:8a:bc:1e:9d:b1:f8:0d:2f:e1:03:6c:da:
f8:80:99:c5:68:d7:bc:a7:62:32:7d:40:2e:89:ed:a9:f7:32:
d8:da:b3:52:69:84:0a:33:95:a8:dc:2e:8d:bb:2a:99:de:2d:
0b:cf:59:02:ba:7e:91:f5:ef:d5:d1:dc:dd:ed:cf:4e:ae:7d:
2d:31:ba:89:57:86:87:fd:05:9e:a2:bc:00:13:64:15:cb:7b:
23:a1:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:13 2026 by rpki-client