Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File: wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier: 77bwpVBX754DmTU7+UVR9HsSljJ97mACqEeKPUt/Fbg=
Subject key identifier: B4:58:3C:1D:B6:2E:7E:F0:80:0B:65:07:BA:5D:C3:9B:1A:4E:69:11
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer: /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial: 019D98BDF51859C0FDA2D20B2EDD11B9A3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 00:01:19 +0000
Manifest this update: Fri 17 Apr 2026 00:01:19 +0000
Manifest next update: Sat 18 Apr 2026 00:01:19 +0000
Files and hashes: 1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: V9DBKWQ2zM0qyhqp109FGlg1EN9I166KB4khzSe0DO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f5:18:59:c0:fd:a2:d2:0b:2e:dd:11:b9:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Validity
Not Before: Apr 17 00:01:19 2026 GMT
Not After : Apr 18 00:01:19 2026 GMT
Subject: CN=b4583c1db62e7ef0800b6507ba5dc39b1a4e6911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:78:34:b4:52:04:58:d9:a5:b8:c3:17:d4:
1c:a8:f8:e7:e2:95:82:e2:01:da:a1:4f:a9:21:b7:
5e:c9:8d:23:fd:e4:51:45:83:21:4b:94:96:bb:69:
e7:f0:c0:8b:8f:fe:16:22:cd:86:28:24:36:3b:16:
2a:bf:63:72:36:51:20:b6:49:a2:8b:0a:db:f8:2a:
84:2c:4a:85:de:bf:ab:de:12:45:41:7f:70:cb:2e:
5c:9b:f0:53:ce:1a:eb:d4:52:b5:e1:cd:3e:85:f6:
51:ff:3f:89:df:c9:2f:9a:35:ad:71:d2:fb:58:c1:
e0:81:58:cc:1d:7f:3a:c3:9d:40:b6:4e:07:00:d1:
13:32:a6:2e:86:5c:b1:68:92:66:c5:7d:8d:95:02:
9a:14:02:b0:cc:5b:43:bb:22:a7:1a:af:aa:97:81:
4a:f8:1f:3b:75:04:44:a3:af:6d:6a:d3:f3:37:6d:
f8:09:49:5b:78:63:f3:26:ea:eb:3a:b9:95:db:f7:
b1:7e:d8:ae:5c:d9:f0:30:e2:9f:85:5d:1c:1b:ef:
57:f2:da:ed:2a:52:a2:00:3a:b8:53:b7:d6:e9:87:
31:92:91:bc:1f:fc:28:15:19:9e:d0:0f:88:4b:a7:
3d:22:07:7c:0f:7a:30:f6:a1:7b:12:36:08:9c:cf:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:3C:1D:B6:2E:7E:F0:80:0B:65:07:BA:5D:C3:9B:1A:4E:69:11
X509v3 Authority Key Identifier:
keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1a:59:6b:f5:9e:6d:d8:8d:f2:44:e3:c9:d3:2e:a0:eb:cd:
86:1b:3a:a7:3b:00:ff:5c:9b:31:e0:33:da:1d:b4:93:18:9d:
49:c4:87:17:7d:e9:ca:a8:af:2d:ec:b0:a1:56:3b:c4:82:3c:
41:1d:da:05:4a:d6:cd:6d:6a:92:87:58:ab:17:69:f2:1e:39:
0e:c5:46:37:0e:dd:36:2b:bd:d8:d8:0d:bc:ee:8a:d5:8d:27:
f7:06:95:a7:0a:d1:cd:87:20:72:2a:94:27:6a:d1:ee:de:5f:
97:05:fc:04:85:f0:37:f1:49:45:ed:35:11:b1:29:5f:01:12:
2d:e6:bb:e6:6b:59:bb:83:fd:91:a4:04:5f:82:ce:75:6b:54:
67:ff:51:3e:3b:4f:2f:21:52:df:11:46:06:87:c1:00:e6:a4:
37:d7:9a:64:0a:f0:8f:a5:67:95:0e:e0:60:16:9f:c8:71:66:
3e:50:6e:d2:02:5a:c4:9e:86:da:7c:e7:eb:4f:6d:82:f5:03:
6f:e2:82:11:f5:14:30:55:d0:f2:df:b0:2f:02:10:f9:b1:a0:
2f:10:7c:02:dc:d2:c6:fa:f8:6d:d6:80:83:94:05:8b:99:e4:
90:46:68:99:7b:c7:87:a4:87:ee:96:03:b7:9e:2f:c2:3c:45:
04:58:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:59 2026 by rpki-client