Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: deMLzabmlo4KxTwJdelTEVBa1wpSmss4dNGLdSuiGNU=
Subject key identifier: 09:CA:9D:6B:CD:0B:90:11:E3:69:FE:41:0A:84:9B:1F:50:5C:CF:C4
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 019D98185E0D315E18BE733A26E1A7CB1FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 167D
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: 1upib3w4dNwpLOBhgbemzuWJEnk.roa (hash: GhXcTauSsjZxaizJzGN0VZhjaJZ3SZLeg6vkoxXN+YY=)
2: 5dCmEdDrjOnlZMp81Q2uR_wbzFI.roa (hash: lxe58PQH7VpXxHz7k/J8LJcmNsZLy0kcv52Otk3eQ+U=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: 5e/WlbCmBEfIv0KQdqyRA80xcoU35QUBIaVCKbTf+VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5e:0d:31:5e:18:be:73:3a:26:e1:a7:cb:1f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=09ca9d6bcd0b9011e369fe410a849b1f505ccfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:cc:cc:62:44:0b:ba:f4:15:0b:6b:1c:8e:
f7:95:c1:03:c0:13:29:d4:30:a2:36:24:a4:96:36:
23:7e:83:95:c9:b4:af:f5:37:7f:21:b0:96:69:94:
aa:5f:36:52:ef:fc:bc:8b:50:a9:e0:26:5c:52:f3:
51:cf:a0:d1:50:4f:5b:0a:1f:05:f3:cd:b1:9a:db:
4a:b7:47:33:67:45:5f:c9:18:20:c8:75:0e:b3:ec:
47:b0:99:a2:26:fa:05:ba:81:03:4d:66:e1:5e:63:
25:c1:65:75:08:58:c6:a7:58:5c:89:db:f7:9f:2d:
f7:07:e4:6e:ef:56:56:15:ad:42:7e:55:72:35:89:
d5:17:fd:b0:39:ab:d8:a3:db:d1:dd:6d:4e:91:b4:
48:41:53:36:53:e2:3a:d7:f1:41:c8:a2:42:6f:62:
64:60:09:cf:03:51:df:c2:93:d4:47:0e:89:c6:bb:
80:fb:9f:39:96:16:6d:8e:0a:46:07:35:9d:65:c1:
18:c1:90:02:ab:eb:f8:e5:b7:73:96:85:36:22:b0:
d1:91:cc:3a:dc:00:40:bd:35:a5:fc:87:ab:39:1a:
9e:29:38:59:70:a4:c5:ed:39:44:dc:af:5f:33:e3:
a3:d4:d1:77:7d:6d:ff:d5:2a:a2:64:3b:4c:f8:2a:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CA:9D:6B:CD:0B:90:11:E3:69:FE:41:0A:84:9B:1F:50:5C:CF:C4
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:91:13:b5:4f:5d:e1:ec:f0:c8:60:63:ac:1e:cc:9b:83:
d1:b9:0f:39:ce:04:9f:e4:1f:c0:77:59:f9:ec:b6:8d:1e:b3:
7a:c9:bd:11:85:e2:d0:72:cf:70:8f:14:23:05:4d:9e:18:7f:
21:1b:2b:b1:0a:93:8b:75:51:84:58:9a:a7:12:1d:3a:d6:3a:
da:0c:15:58:9a:4d:8c:a3:53:45:64:ad:99:b7:65:cf:50:ad:
8e:97:ec:af:ca:8e:a5:ba:74:df:d5:0f:03:54:f0:3c:51:06:
ba:78:46:c4:6e:27:63:de:1d:2b:dc:2e:3c:24:41:74:bc:e9:
b4:74:dc:a1:b0:ca:30:37:49:b6:dd:ae:4e:b0:f8:df:d9:68:
be:9b:a8:75:bf:5c:e4:52:b7:86:78:90:5b:f2:08:34:10:ff:
43:eb:63:79:c9:2c:86:96:44:b2:8d:a3:e4:6d:dd:ca:09:1d:
18:8f:07:66:42:a3:15:c2:30:a9:16:11:72:f5:af:54:c6:04:
3a:58:a4:20:49:51:d8:d5:a0:2a:eb:ce:c6:23:fa:3d:77:6a:
97:da:e7:d2:d7:af:28:2c:30:c7:33:b2:5e:fe:81:e5:c2:b8:
24:7e:46:5c:b6:6d:c5:c1:27:fe:1a:1a:47:dd:51:d0:88:65:
4a:3d:ce:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGF4NMV4YvnM6JuGnyx++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTViMzI3ZTg0NzYxNjg1MDIyZjQ3MzI4ZDZmNGNiZDZk
MzA0MWUwHhcNMjYwNDE2MjEwMDI2WhcNMjYwNDE3MjEwMDI2WjAzMTEwLwYDVQQD
EygwOWNhOWQ2YmNkMGI5MDExZTM2OWZlNDEwYTg0OWIxZjUwNWNjZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJzMzGJEC7r0FQtrHI73lcEDwBMp
1DCiNiSkljYjfoOVybSv9Td/IbCWaZSqXzZS7/y8i1Cp4CZcUvNRz6DRUE9bCh8F
882xmttKt0czZ0VfyRggyHUOs+xHsJmiJvoFuoEDTWbhXmMlwWV1CFjGp1hcidv3
ny33B+Ru71ZWFa1CflVyNYnVF/2wOavYo9vR3W1OkbRIQVM2U+I61/FByKJCb2Jk
YAnPA1HfwpPURw6JxruA+585lhZtjgpGBzWdZcEYwZACq+v45bdzloU2IrDRkcw6
3ABAvTWl/IerORqeKThZcKTF7TlE3K9fM+Oj1NF3fW3/1SqiZDtM+CqoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnKnWvNC5AR42n+QQqEmx9QXM/EMB8GA1UdIwQY
MBaAFMEVsyfoR2FoUCL0cyjW9MvW0wQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMt
MjI0ZmQ3OGVmODI3LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMtMjI0ZmQ3OGVmODI3
LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde2RE7VP
XeHs8MhgY6wezJuD0bkPOc4En+QfwHdZ+ey2jR6zesm9EYXi0HLPcI8UIwVNnhh/
IRsrsQqTi3VRhFiapxIdOtY62gwVWJpNjKNTRWStmbdlz1Ctjpfsr8qOpbp039UP
A1TwPFEGunhGxG4nY94dK9wuPCRBdLzptHTcobDKMDdJtt2uTrD439lovpuodb9c
5FK3hniQW/IINBD/Q+tjeckshpZEso2j5G3dygkdGI8HZkKjFcIwqRYRcvWvVMYE
OlikIElR2NWgKuvOxiP6PXdql9rn0tevKCwwxzOyXv6B5cK4JH5GXLZtxcEn/hoa
R91R0IhlSj3OUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:15 2026 by rpki-client