Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier: Ts/KKoSs0bkATU+7TFgUR3GgX/GVvEo9SeJ1XU0LbNo=
Subject key identifier: B2:DC:18:BF:C0:81:8E:89:55:4D:B3:41:1C:B9:C1:00:8B:D5:41:71
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial: 019D9AAC4226C57EE72E3A25B4F1C1052C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number: 13EC
Signing time: Fri 17 Apr 2026 09:01:13 +0000
Manifest this update: Fri 17 Apr 2026 09:01:13 +0000
Manifest next update: Sat 18 Apr 2026 09:01:13 +0000
Files and hashes: 1: 4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa (hash: foM+Gdb6JStZoN1QON4h/dJiKuqvrGQX7DM2q+rUSl0=)
2: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: yK/5B8w03ger1OjfqGizP26Iikq6qmhJDEOqb9DSM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:42:26:c5:7e:e7:2e:3a:25:b4:f1:c1:05:2c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Validity
Not Before: Apr 17 09:01:13 2026 GMT
Not After : Apr 18 09:01:13 2026 GMT
Subject: CN=b2dc18bfc0818e89554db3411cb9c1008bd54171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:8b:f6:de:30:98:38:03:7a:51:e8:1f:4a:
b6:84:5f:2c:6d:87:e4:26:a2:29:3d:30:8e:03:b0:
6d:89:6a:38:89:37:4f:03:cb:b5:f9:7b:34:a9:f8:
d4:82:60:c3:4a:30:d2:04:a2:06:6d:a7:37:2b:5a:
88:37:11:ae:fd:9e:5b:c4:e4:47:31:15:cb:eb:37:
c3:a1:25:f9:c1:f2:4c:1a:1b:e9:5f:85:6b:e0:98:
e7:73:3f:c5:0b:c6:c2:72:45:71:7b:c9:95:cb:15:
76:26:67:a9:87:4e:90:d2:77:24:ac:ca:d3:c5:71:
cb:07:32:f5:ae:c9:4b:45:e6:b9:d5:76:bf:bc:56:
49:56:c7:d0:32:3a:96:ae:8f:38:4d:42:29:c3:88:
f6:e4:00:f6:50:49:52:ad:90:98:ff:6d:8c:22:2e:
8f:c0:90:57:ce:26:21:43:c3:08:a0:c8:f5:cd:77:
54:de:ab:4e:0f:0d:fc:59:0c:64:d2:38:d9:d0:d5:
d6:86:6a:c3:25:33:af:9e:12:3c:d4:54:17:e6:3d:
59:a9:35:05:02:78:21:87:7e:32:ac:a1:d0:5b:15:
a7:20:28:c1:c6:70:2b:d8:1b:95:d1:af:51:25:3f:
e4:c1:66:74:19:e0:ac:02:49:a5:85:07:89:b1:d5:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DC:18:BF:C0:81:8E:89:55:4D:B3:41:1C:B9:C1:00:8B:D5:41:71
X509v3 Authority Key Identifier:
keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:58:00:2d:e2:0c:8d:a5:b9:ec:81:4a:ab:09:3d:52:3c:34:
c9:a2:23:6e:97:eb:8f:a2:de:68:c7:57:db:fd:8d:22:b4:5a:
0c:92:f3:e6:42:a9:29:3b:c2:6e:7d:68:29:a6:31:d4:2c:fb:
5e:d1:3f:9f:6d:49:88:88:81:ac:39:ec:18:b9:62:99:33:42:
2e:87:d6:a5:0c:26:3a:9b:e4:1e:af:aa:0e:f3:2f:f3:b9:fc:
86:43:6d:d7:51:7c:b5:33:d7:38:9b:76:9d:35:22:5f:6f:c9:
13:fa:47:a3:4b:ea:50:43:f6:dc:25:bb:8e:48:f0:9e:76:ba:
f4:b0:5f:c5:c2:14:32:6a:50:18:8e:50:19:ca:1b:d8:5b:ff:
b9:9e:dc:df:19:eb:10:51:c6:07:38:a2:42:cc:9e:5d:84:64:
3e:5f:47:ca:8b:8e:81:9e:38:05:a5:bf:be:4d:74:8d:8e:1e:
7e:59:fd:b0:15:86:68:09:c0:37:82:24:9b:cc:26:bc:b0:aa:
59:53:56:e4:49:62:b5:95:0c:d1:b3:c8:5c:75:69:c8:ac:57:
8b:dc:4f:21:9b:99:f7:30:ed:92:29:5d:0c:db:9f:2d:0e:31:
6c:66:cf:41:5b:4c:9f:8b:0a:c1:77:11:38:20:1f:ce:48:41:
c8:1d:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:36 2026 by rpki-client