Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: jPr67Uy/tB0tfIwNTCQyupjp+Oe2DYb043+aufcowes=
Subject key identifier: 49:38:52:CA:4E:C8:F4:24:F6:42:4E:AB:0B:4A:18:FE:24:4F:E4:08
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 019DA48A7D0F420CBCA841C9D423CC497449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0F2D
Signing time: Sun 19 Apr 2026 07:00:32 +0000
Manifest this update: Sun 19 Apr 2026 07:00:32 +0000
Manifest next update: Mon 20 Apr 2026 07:00:32 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: ortceV9Wg5u3gx3892j3MZcblD7bVwGEOmF6a1xa/a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:7d:0f:42:0c:bc:a8:41:c9:d4:23:cc:49:74:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Apr 19 07:00:32 2026 GMT
Not After : Apr 20 07:00:32 2026 GMT
Subject: CN=493852ca4ec8f424f6424eab0b4a18fe244fe408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:e4:12:d1:8a:de:88:91:69:8d:6e:26:a2:
1a:c8:8b:83:6a:c7:27:21:9d:ba:b2:e5:ab:dc:23:
71:cd:f3:8c:06:5c:75:99:6c:75:28:c6:52:1d:17:
18:04:fa:57:08:0d:0e:cc:0f:85:0f:99:9e:e3:4b:
08:b6:16:dd:c5:e3:b8:b5:51:e2:37:ca:20:bb:7d:
d2:52:57:a9:58:7d:f4:28:d7:2f:a8:7a:32:43:27:
02:e7:83:9a:b7:98:e2:12:5d:47:b5:9e:9f:bb:9f:
60:1d:51:8e:0d:28:f3:64:c6:e9:f7:48:d6:19:03:
06:e0:fb:98:56:b9:67:6c:e6:61:c4:d6:e6:93:fc:
f0:0c:88:c7:09:2b:25:34:8f:97:f9:f9:54:ac:19:
fb:88:bb:12:d4:8f:50:29:48:14:4b:24:36:e7:cd:
df:e8:6d:62:bf:da:3f:f6:32:86:c7:ff:ff:41:a1:
83:6a:7f:98:aa:bd:e3:e1:19:30:ba:b4:98:10:6b:
a0:2f:b1:c4:a5:b6:80:18:3c:8d:ca:db:bb:b9:ed:
57:15:15:2b:f4:27:98:66:95:74:34:45:4e:70:d4:
dc:63:c5:ac:7e:83:60:57:5a:e6:d1:a3:d9:f4:41:
d6:13:cb:34:bf:ba:42:ba:0c:59:6a:42:69:99:aa:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:38:52:CA:4E:C8:F4:24:F6:42:4E:AB:0B:4A:18:FE:24:4F:E4:08
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a6:97:08:3c:30:61:a7:b4:37:6a:4f:30:18:3e:52:25:aa:
11:30:72:3e:cc:59:d8:06:1b:be:7e:94:8b:53:26:fc:60:8f:
95:71:82:ae:99:c2:bc:73:43:c7:f5:e4:ca:05:43:55:85:38:
d6:1a:ce:11:5f:a2:a0:45:80:51:cd:ae:2d:8a:fd:e0:7f:d6:
22:83:86:6b:18:d6:f2:1f:99:b8:f2:32:f6:62:af:fc:97:fe:
24:99:eb:94:45:7d:55:70:bd:af:6f:e7:60:d8:9f:31:22:bb:
15:2f:8f:98:82:e9:dc:72:11:2d:e7:af:bc:5b:96:12:fd:27:
9b:92:13:2f:ca:d2:16:e0:05:af:05:6b:ca:15:23:63:89:ab:
6d:75:c3:bf:40:49:33:44:b1:bb:47:3d:ed:f1:1c:71:fa:10:
d3:0e:bf:b8:51:a9:6f:ad:ab:08:aa:18:94:9b:c1:1c:b0:00:
86:28:c3:bd:38:27:ed:59:5c:c3:32:32:f8:d0:07:75:88:fc:
97:bc:9d:f1:8f:8f:1d:6d:98:dd:a4:62:95:05:59:9a:53:d3:
e6:b6:ea:95:4b:55:f7:bc:22:e9:df:b4:ea:7c:b4:82:0d:27:
dc:96:a3:8f:70:b0:3c:f8:0d:19:26:ed:7c:52:60:1f:c1:55:
06:93:65:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kin0PQgy8qEHJ1CPMSXRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMmYyZGJmZGQzMDlmMjYwMzI0Y2FhN2UzZWRhNzc5M2Y4
NTQxYTcwHhcNMjYwNDE5MDcwMDMyWhcNMjYwNDIwMDcwMDMyWjAzMTEwLwYDVQQD
Eyg0OTM4NTJjYTRlYzhmNDI0ZjY0MjRlYWIwYjRhMThmZTI0NGZlNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7jkEtGK3oiRaY1uJqIayIuDascn
IZ26suWr3CNxzfOMBlx1mWx1KMZSHRcYBPpXCA0OzA+FD5me40sIthbdxeO4tVHi
N8ogu33SUlepWH30KNcvqHoyQycC54Oat5jiEl1HtZ6fu59gHVGODSjzZMbp90jW
GQMG4PuYVrlnbOZhxNbmk/zwDIjHCSslNI+X+flUrBn7iLsS1I9QKUgUSyQ2583f
6G1iv9o/9jKGx///QaGDan+Yqr3j4RkwurSYEGugL7HEpbaAGDyNytu7ue1XFRUr
9CeYZpV0NEVOcNTcY8WsfoNgV1rm0aPZ9EHWE8s0v7pCugxZakJpmar5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk4UspOyPQk9kJOqwtKGP4kT+QIMB8GA1UdIwQY
MBaAFMEvLb/dMJ8mAyTKp+Ptp3k/hUGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQt
MGZiZWFlY2Q5M2E0LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQtMGZiZWFlY2Q5M2E0
LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKaXCDww
Yae0N2pPMBg+UiWqETByPsxZ2AYbvn6Ui1Mm/GCPlXGCrpnCvHNDx/XkygVDVYU4
1hrOEV+ioEWAUc2uLYr94H/WIoOGaxjW8h+ZuPIy9mKv/Jf+JJnrlEV9VXC9r2/n
YNifMSK7FS+PmILp3HIRLeevvFuWEv0nm5ITL8rSFuAFrwVryhUjY4mrbXXDv0BJ
M0Sxu0c97fEccfoQ0w6/uFGpb62rCKoYlJvBHLAAhijDvTgn7VlcwzIy+NAHdYj8
l7yd8Y+PHW2Y3aRilQVZmlPT5rbqlUtV97wi6d+06ny0gg0n3Jajj3CwPPgNGSbt
fFJgH8FVBpNllA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:01 2026 by rpki-client