Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: oiTl3x8R0QBLhEr3ZvK6FJrg+5xyS597EuEV8d93XKg=
Subject key identifier: 51:E6:63:10:15:53:BF:57:EC:06:93:B8:07:8F:7D:3E:64:77:AD:B5
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019DA30A718C5568BB49BB680094242787A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: 41
Signing time: Sun 19 Apr 2026 00:01:03 +0000
Manifest this update: Sun 19 Apr 2026 00:01:03 +0000
Manifest next update: Mon 20 Apr 2026 00:01:03 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: Rxu18csEqCSpsjx5NsXbp/1m/3A9+vJMMYeQp313+d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:71:8c:55:68:bb:49:bb:68:00:94:24:27:87:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: Apr 19 00:01:03 2026 GMT
Not After : Apr 20 00:01:03 2026 GMT
Subject: CN=51e663101553bf57ec0693b8078f7d3e6477adb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:5d:5b:ae:8e:43:90:04:45:bf:23:5a:8d:
6a:ae:14:8d:c2:7e:ca:4d:80:38:9b:1a:77:1e:75:
4d:12:3a:c6:c1:1d:fe:14:c4:88:99:d0:f5:88:a5:
15:a6:9c:43:a1:e1:57:a8:68:e2:13:77:3b:df:63:
c1:e4:e5:e9:6c:10:3f:82:7b:34:cf:1c:bf:2d:a5:
a0:f2:d0:47:97:82:e9:89:ee:68:82:76:e2:27:8e:
37:fc:51:3f:6f:9e:7a:33:08:43:fd:01:84:59:3a:
c0:97:aa:a1:bb:eb:b8:e1:75:25:d4:52:61:3c:84:
2a:99:fb:32:19:31:6e:5b:63:48:91:26:9c:86:7a:
5d:7d:47:23:08:09:3d:77:08:e8:46:bb:0f:ff:9d:
67:bc:21:76:92:d7:f5:ea:6c:1e:4b:8a:4c:97:a0:
60:49:53:c2:92:2a:49:aa:8f:fc:bc:70:93:8e:cf:
1c:81:09:ab:16:7d:90:6c:29:df:7d:1f:7e:1e:e9:
98:4b:b5:bb:f7:4a:2c:55:d5:9d:a6:5e:0a:4a:d1:
61:c4:c4:45:07:b8:00:ba:02:6d:ba:2b:da:8c:23:
bf:b7:c9:1f:68:a7:71:e6:0c:83:50:ad:ae:37:c4:
83:cf:26:cb:12:ba:2b:cf:35:eb:ea:b7:47:05:c6:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:63:10:15:53:BF:57:EC:06:93:B8:07:8F:7D:3E:64:77:AD:B5
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:37:c4:79:97:f2:02:46:c0:4a:1e:8f:8f:da:bb:3d:af:ae:
ec:e1:39:9a:31:c6:38:91:aa:36:b2:a9:c1:31:61:05:c5:93:
3f:07:fc:f7:65:6b:e1:c7:82:af:6e:51:2b:1f:62:0c:53:4b:
72:d9:f1:89:be:d3:2d:b4:8f:39:ca:a6:ea:73:5e:bc:f9:e3:
f5:bb:02:c4:d8:6d:a6:43:8a:f7:bb:2d:47:1f:85:94:c9:71:
5f:ba:e2:25:08:3d:46:f3:69:e9:77:44:00:88:2d:b0:44:50:
ba:7f:48:e9:cd:74:51:b1:78:2d:69:49:6d:fe:f8:4c:26:07:
e9:6c:0d:cb:72:ae:a9:81:bd:d0:46:8a:c7:d4:3c:09:1f:a8:
f7:7f:d5:0e:42:88:21:ac:5d:75:d2:37:e6:0a:71:e1:84:ca:
a5:34:79:8c:13:ae:9e:cc:80:6c:0b:cd:20:28:1e:70:a6:b0:
bf:d7:07:8a:24:6b:b3:23:8c:06:d4:4a:8b:16:30:03:97:c6:
ef:8b:47:f9:ea:b2:df:8b:6d:74:e7:e9:74:6b:43:00:47:32:
71:8d:76:32:89:9f:36:f8:fb:d3:63:3f:6a:b3:e1:2b:2c:a9:
df:b8:62:00:53:62:db:5b:74:d1:6f:78:00:61:92:28:a7:79:
54:8a:30:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCnGMVWi7SbtoAJQkJ4eoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWVkNmRlMjNiMzIwZTMwMjg4OGY5NDI3NzIzZjIyMDFm
MjkxOWYwHhcNMjYwNDE5MDAwMTAzWhcNMjYwNDIwMDAwMTAzWjAzMTEwLwYDVQQD
Eyg1MWU2NjMxMDE1NTNiZjU3ZWMwNjkzYjgwNzhmN2QzZTY0NzdhZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaJdW66OQ5AERb8jWo1qrhSNwn7K
TYA4mxp3HnVNEjrGwR3+FMSImdD1iKUVppxDoeFXqGjiE3c732PB5OXpbBA/gns0
zxy/LaWg8tBHl4Lpie5ognbiJ443/FE/b556MwhD/QGEWTrAl6qhu+u44XUl1FJh
PIQqmfsyGTFuW2NIkSachnpdfUcjCAk9dwjoRrsP/51nvCF2ktf16mweS4pMl6Bg
SVPCkipJqo/8vHCTjs8cgQmrFn2QbCnffR9+HumYS7W790osVdWdpl4KStFhxMRF
B7gAugJtuivajCO/t8kfaKdx5gyDUK2uN8SDzybLErorzzXr6rdHBcbvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHmYxAVU79X7AaTuAePfT5kd621MB8GA1UdIwQY
MBaAFMJe1t4jsyDjAoiPlCdyPyIB8pGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2w3VzNpT3pJT01DaUktVUozSV9JZ0h5a1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZDQ0MDEtNzhmMi00NjVhLTlkYzAt
MzNjYWFlMGU0Mzc2LzEvd2w3VzNpT3pJT01DaUktVUozSV9JZ0h5a1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mZDQ0MDEtNzhmMi00NjVhLTlkYzAtMzNjYWFlMGU0Mzc2
LzEvd2w3VzNpT3pJT01DaUktVUozSV9JZ0h5a1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzfEeZfy
AkbASh6Pj9q7Pa+u7OE5mjHGOJGqNrKpwTFhBcWTPwf892Vr4ceCr25RKx9iDFNL
ctnxib7TLbSPOcqm6nNevPnj9bsCxNhtpkOK97stRx+FlMlxX7riJQg9RvNp6XdE
AIgtsERQun9I6c10UbF4LWlJbf74TCYH6WwNy3KuqYG90EaKx9Q8CR+o93/VDkKI
IaxdddI35gpx4YTKpTR5jBOunsyAbAvNICgecKawv9cHiiRrsyOMBtRKixYwA5fG
74tH+eqy34ttdOfpdGtDAEcycY12MomfNvj702M/arPhKyyp37hiAFNi21t00W94
AGGSKKd5VIow4A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:26 2026 by rpki-client