Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: HgFjlD2UAe7t17AU6EgsyUhHMKfOWDXmWA14t5t9bRA=
Subject key identifier: 92:DE:00:8F:91:67:89:6A:68:2B:8C:B7:FF:A2:6A:E4:D8:25:5E:07
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019EBEECE036D58040AFDAB194ADE85A58AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: D4
Signing time: Sat 13 Jun 2026 03:00:55 +0000
Manifest this update: Sat 13 Jun 2026 03:00:55 +0000
Manifest next update: Sun 14 Jun 2026 03:00:55 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: Atu1i0P0xm0qVKO7Jj7TZa/5owt2zyKvT6WeZ/5IV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:e0:36:d5:80:40:af:da:b1:94:ad:e8:5a:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: Jun 13 03:00:55 2026 GMT
Not After : Jun 14 03:00:55 2026 GMT
Subject: CN=92de008f9167896a682b8cb7ffa26ae4d8255e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:2f:5b:95:55:41:0a:5b:77:b8:b5:ad:57:
fb:ec:00:a3:de:33:0e:5f:2d:51:ac:d9:fe:cc:b2:
dd:1f:99:fc:2b:39:fe:84:73:9f:46:3b:ad:7a:d6:
46:4e:82:50:77:02:5b:e2:ce:76:fb:01:29:2d:ec:
73:fa:c4:22:d2:00:d2:c5:10:cb:7a:d6:1a:2e:90:
b9:1a:c4:bb:fc:8c:d1:24:97:6e:61:0a:65:5b:c3:
fe:0b:e9:11:6a:2c:b5:ba:45:5a:c9:46:4d:0c:32:
2c:16:66:f3:e7:6d:ee:bd:a6:b2:06:03:51:e0:f2:
b7:b4:48:4a:71:30:e3:34:84:8d:7c:81:32:48:3f:
c5:32:3f:bc:ed:f6:63:93:a6:f7:c8:d7:a0:0c:6f:
15:b3:88:5a:60:ba:5f:83:28:af:75:84:ce:af:5d:
2f:e0:06:76:f4:d2:ca:a2:2d:f4:65:a3:eb:d7:48:
ff:1a:1d:e3:3e:eb:5b:41:1f:09:de:5b:61:b5:7e:
d1:5e:ed:67:87:38:ab:89:32:51:16:05:e1:5d:3a:
ec:c1:b6:7b:17:1a:65:90:d5:e9:4a:39:96:c8:5a:
08:f2:5d:e8:46:97:08:d4:4e:81:b7:3d:01:7a:ff:
05:09:c6:13:e2:5a:db:7b:27:63:78:0d:60:50:2e:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:00:8F:91:67:89:6A:68:2B:8C:B7:FF:A2:6A:E4:D8:25:5E:07
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:86:8d:5f:c4:3f:01:d1:d9:e8:56:dd:0b:f4:2a:ff:e5:
c1:ea:4e:dd:fa:d4:88:b2:a6:b5:9b:4c:0d:1d:9a:60:c3:43:
4d:cd:5e:38:e0:5d:8f:1e:2b:b9:94:b7:2b:73:12:b8:c4:92:
bb:a0:e9:0c:de:86:54:0b:17:be:cf:b2:f2:8a:0a:c9:d7:a9:
05:54:10:71:2d:35:13:38:a3:59:98:da:3b:8b:34:9c:4e:84:
a2:d1:64:d4:ad:dd:9b:f5:15:74:af:4b:59:c2:69:8f:0e:8b:
88:cd:c8:11:0d:22:d9:df:5b:5c:96:39:26:3b:4d:67:96:92:
a2:b1:9f:a3:02:92:a5:af:a4:15:47:e2:d3:9f:21:03:d5:71:
1b:ed:82:3a:92:ec:f2:e9:46:b6:80:08:0b:3e:88:d4:aa:cd:
99:11:8d:7e:99:3d:e8:a8:d3:b1:37:b4:ca:c5:80:c8:a5:b5:
b5:e8:25:3d:ae:af:a1:f9:80:e5:45:a3:0a:52:8d:e4:fb:48:
fd:cf:3e:c6:71:c7:5a:d0:a6:19:fb:b6:91:62:13:5f:96:10:
59:26:50:74:59:f9:41:37:df:86:81:ae:d8:f0:78:92:fb:5e:
f5:a0:90:8f:96:f1:15:2e:eb:c2:6a:d4:65:31:1d:4b:55:b2:
ea:a5:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:40 2026 by rpki-client