
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: o65lfzW90wV2cgHzLytakxkfhACDCumBQ2p7R2TqZ9s=
Subject key identifier: 16:C4:30:E8:0F:C4:25:EA:11:3E:7F:B5:61:A6:19:9D:ED:3D:AF:5A
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 019D9961F83DC18FF8F49C8C43D3D557045B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:27 +0000
Manifest this update: Fri 17 Apr 2026 03:00:27 +0000
Manifest next update: Sat 18 Apr 2026 03:00:27 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: phTjtU9ZvrYbhRF/M7WhXwoWFoR2kqFWxkU3vcbUM+0=)
2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f8:3d:c1:8f:f8:f4:9c:8c:43:d3:d5:57:04:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Apr 17 03:00:27 2026 GMT
Not After : Apr 18 03:00:27 2026 GMT
Subject: CN=16c430e80fc425ea113e7fb561a6199ded3daf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:45:2c:b1:fd:be:fa:09:29:61:cc:e4:7d:
58:e3:b9:8a:00:e0:cc:97:be:53:e8:2c:c5:3f:79:
52:0e:b6:1a:fe:65:10:d6:f0:1a:9d:67:ca:29:9b:
40:e3:97:fc:2b:16:38:ce:a6:10:98:bf:c9:62:79:
4b:d8:84:a4:c6:70:bb:e9:e4:83:73:d6:b4:a3:88:
75:97:45:7a:d7:ab:84:ee:14:43:43:89:0b:a8:c8:
a8:5b:29:ca:a6:69:b0:66:bd:9b:22:78:da:e7:a1:
68:00:8a:ac:3b:db:25:da:91:f0:f3:76:cc:51:73:
ee:0c:cb:d8:25:ea:b6:6c:3e:6e:f2:d6:af:1c:e1:
ad:eb:1e:8e:a3:3f:36:16:0c:97:a1:7a:8e:0f:62:
e0:5e:18:09:26:67:22:3a:c9:46:cb:2d:36:b5:2e:
f7:78:37:cb:a7:3f:b0:51:8d:db:08:a1:b2:78:62:
68:46:d7:7d:33:47:42:eb:fe:84:be:cd:e8:85:e3:
29:51:52:ee:8f:ac:00:14:28:65:2a:18:3d:69:90:
17:99:49:75:38:49:e3:b9:03:66:85:2b:69:ab:90:
fc:5f:72:2c:b1:df:ed:3f:86:e4:c9:70:92:bf:20:
5a:f9:3d:37:95:38:09:bd:b1:e1:80:c6:aa:97:7f:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:30:E8:0F:C4:25:EA:11:3E:7F:B5:61:A6:19:9D:ED:3D:AF:5A
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5b:16:b9:af:e4:99:bc:c5:42:df:e7:f2:cc:61:c5:d1:a1:
2e:27:ec:f2:47:7f:9d:1a:31:39:11:49:f3:a4:b0:72:f6:96:
2b:70:0b:78:e0:75:67:37:ed:0e:6f:0c:92:e7:54:02:1f:e8:
76:c3:23:8a:c1:1c:41:f2:2a:9d:9d:54:c9:32:05:fc:ef:d6:
06:b1:0b:09:46:05:e5:71:00:74:ca:a5:0c:99:6c:13:1f:6d:
06:bc:8a:a0:03:59:1b:e2:4b:1d:c0:b5:15:e1:10:e3:ea:f6:
e0:9d:fb:90:43:f3:21:3c:53:db:69:af:d1:0d:3b:f5:6c:41:
6f:22:fd:8a:71:27:99:28:b7:83:a0:f6:47:5e:2b:d0:88:c4:
dd:5c:16:a2:cd:c2:d3:3b:01:90:84:a3:cc:c6:17:36:7c:25:
f1:fe:71:f8:ff:d4:f7:6a:5a:8a:3c:3f:9c:97:7a:bd:07:aa:
08:ed:9f:df:87:d6:2b:dc:00:cf:e6:67:45:96:92:85:62:b8:
b6:4a:40:9a:45:cf:61:ec:30:c3:7b:50:56:05:52:99:21:cd:
7d:f6:c2:cb:6b:6e:fd:84:fe:ea:c1:87:a6:ca:d6:4a:ab:74:
70:41:f5:df:32:34:ae:4d:98:bb:2f:a0:3c:3f:ac:af:a6:98:
f6:5c:1a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfg9wY/49JyMQ9PVVwRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDRhYmViMGVkNGZmODY2YzA2NWZlMzZjMmM2Mjg0ZTI1
MjBiNDIwHhcNMjYwNDE3MDMwMDI3WhcNMjYwNDE4MDMwMDI3WjAzMTEwLwYDVQQD
EygxNmM0MzBlODBmYzQyNWVhMTEzZTdmYjU2MWE2MTk5ZGVkM2RhZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27lFLLH9vvoJKWHM5H1Y47mKAODM
l75T6CzFP3lSDrYa/mUQ1vAanWfKKZtA45f8KxY4zqYQmL/JYnlL2ISkxnC76eSD
c9a0o4h1l0V616uE7hRDQ4kLqMioWynKpmmwZr2bInja56FoAIqsO9sl2pHw83bM
UXPuDMvYJeq2bD5u8tavHOGt6x6Ooz82FgyXoXqOD2LgXhgJJmciOslGyy02tS73
eDfLpz+wUY3bCKGyeGJoRtd9M0dC6/6Evs3oheMpUVLuj6wAFChlKhg9aZAXmUl1
OEnjuQNmhStpq5D8X3Issd/tP4bkyXCSvyBa+T03lTgJvbHhgMaql3+9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbEMOgPxCXqET5/tWGmGZ3tPa9aMB8GA1UdIwQY
MBaAFFkEq+sO1P+GbAZf42wsYoTiUgtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYt
NzdkNjVlZjMwNWIwLzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYtNzdkNjVlZjMwNWIw
LzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlsWua/k
mbzFQt/n8sxhxdGhLifs8kd/nRoxORFJ86SwcvaWK3ALeOB1ZzftDm8MkudUAh/o
dsMjisEcQfIqnZ1UyTIF/O/WBrELCUYF5XEAdMqlDJlsEx9tBryKoANZG+JLHcC1
FeEQ4+r24J37kEPzITxT22mv0Q079WxBbyL9inEnmSi3g6D2R14r0IjE3VwWos3C
0zsBkISjzMYXNnwl8f5x+P/U92paijw/nJd6vQeqCO2f34fWK9wAz+ZnRZaShWK4
tkpAmkXPYewww3tQVgVSmSHNffbCy2tu/YT+6sGHpsrWSqt0cEH13zI0rk2Yuy+g
PD+sr6aY9lwa2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:00 2026 by rpki-client