Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: oBaHLMCo3iC7tpsuTxbhMr5bsFwV5shWBZtGxWU6UhA=
Subject key identifier: 7D:E6:20:BB:BA:2C:EA:85:2D:7F:34:37:5C:B7:38:5F:03:BA:D5:E2
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019D992BA0A581ED0E9C45DF5EC7891741F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 18DC
Signing time: Fri 17 Apr 2026 02:01:06 +0000
Manifest this update: Fri 17 Apr 2026 02:01:06 +0000
Manifest next update: Sat 18 Apr 2026 02:01:06 +0000
Files and hashes: 1: PHg3Ww569zMDLEj_XkzXkt_l28U.roa (hash: 5pJ4hX6iwllF4hbtS1Bn9jqzOhPSmXxQOqAVEn4F03k=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: +HJIU/J220p2XShEoCnvvMlpIV8xmseiaqSno2/XUcw=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a0:a5:81:ed:0e:9c:45:df:5e:c7:89:17:41:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Apr 17 02:01:06 2026 GMT
Not After : Apr 18 02:01:06 2026 GMT
Subject: CN=7de620bbba2cea852d7f34375cb7385f03bad5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:9c:0b:ab:dc:bd:9a:cf:08:d3:01:f8:f0:
67:ed:76:30:68:f1:7d:3e:7b:7d:95:b3:a4:f7:72:
03:71:c6:ad:f3:95:bd:73:da:7f:e9:d5:5d:ad:74:
80:2a:0f:e9:94:40:24:f5:4f:d5:43:14:54:8e:60:
05:0f:fb:d6:bc:07:15:6b:f4:55:40:f5:6d:9e:6c:
5c:56:84:8c:0d:7c:ff:18:57:bc:d7:57:51:d8:00:
b7:d9:54:de:fc:91:cf:71:7d:4c:e4:5f:7c:25:96:
80:53:e9:48:bc:b9:cb:80:52:d6:a9:7a:52:36:78:
0c:51:0b:6f:d0:52:90:85:1a:54:c1:cf:43:fe:b0:
d3:d0:d7:b4:66:c2:53:93:e3:ec:f3:31:9c:17:7a:
46:96:67:62:f1:c9:af:21:ef:a0:97:71:3c:48:67:
f9:a2:0e:be:3b:dd:55:14:88:57:2c:46:1a:cc:b0:
6b:7b:4b:a0:9e:5f:e6:5d:3c:45:c8:18:58:44:6d:
53:11:e8:f5:7b:e7:a4:80:c2:fd:18:ff:4b:d2:68:
0a:22:90:91:5b:43:de:b2:9f:d6:e2:e0:b4:01:fc:
fb:cd:c6:88:a4:f7:b8:d0:15:8d:70:d0:75:e0:61:
54:b3:fb:7a:45:cc:8b:10:81:26:14:cb:d0:de:8c:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:20:BB:BA:2C:EA:85:2D:7F:34:37:5C:B7:38:5F:03:BA:D5:E2
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:76:e8:bd:e8:d2:32:4f:3a:2a:79:86:25:a8:2b:e6:b3:b5:
90:58:a6:30:06:7f:31:cc:63:07:be:9b:80:d8:88:7c:3a:e8:
c5:47:18:56:6d:76:76:cd:7c:15:23:34:b5:da:39:a7:0a:d7:
d6:3d:76:79:86:b7:fe:a7:de:52:5e:f1:c2:1e:37:e2:70:7f:
3d:9d:49:9b:55:eb:66:1c:42:a9:2e:e1:41:ed:22:45:e5:a6:
1b:90:34:bf:71:23:e0:15:20:00:9f:10:ad:48:3e:e6:0f:43:
9a:27:af:12:79:0d:7b:be:c0:bd:3e:cb:fd:5b:fc:af:d1:1a:
fa:36:4a:b3:8c:10:6e:18:75:b5:27:55:a3:79:fb:40:78:27:
93:1f:9f:cd:b3:da:b4:78:84:29:b8:8e:59:29:ca:34:81:dd:
5f:15:3b:5e:c1:92:f6:a1:7d:9d:2c:75:68:c0:6e:40:a8:d6:
80:92:37:a5:ec:33:27:93:14:44:b2:95:63:b9:5a:78:70:5e:
64:bc:27:f6:8d:84:92:c8:85:1e:32:d6:10:05:2d:92:a5:c3:
b7:5c:e8:72:e4:0c:c9:4d:66:ca:81:33:3e:93:4f:45:5c:24:
d6:bb:bc:93:6c:99:ee:65:d4:6e:61:55:56:e7:b7:7c:61:7f:
f9:ec:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:36 2026 by rpki-client