Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: EBTpbySb4fYP2wsmv82vsdBC3/+A4S03Zl1kls8XMTY=
Subject key identifier: B8:9C:F3:E4:54:A0:4D:08:3D:2C:99:5B:0D:97:9B:A7:45:B8:83:86
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 019DA4540D4BB13DCEB1DDD1BA18B8D8B8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 05AB
Signing time: Sun 19 Apr 2026 06:01:04 +0000
Manifest this update: Sun 19 Apr 2026 06:01:04 +0000
Manifest next update: Mon 20 Apr 2026 06:01:04 +0000
Files and hashes: 1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: DJxPPhG+I4eWh+Uz3eyiTTp8qPQEcE5qN47GkAXFZfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0d:4b:b1:3d:ce:b1:dd:d1:ba:18:b8:d8:b8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Apr 19 06:01:04 2026 GMT
Not After : Apr 20 06:01:04 2026 GMT
Subject: CN=b89cf3e454a04d083d2c995b0d979ba745b88386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:9f:a1:1c:99:0b:7f:6a:f8:79:d1:69:76:
68:d8:c8:13:01:ce:56:46:02:b3:68:c7:a2:c5:76:
27:ed:44:a7:b0:a9:e3:ec:4e:0e:a8:2a:f8:b3:75:
24:97:d7:a0:63:ce:f4:92:7b:38:8f:d5:11:26:64:
82:6b:4a:cf:27:6a:46:f0:c6:11:e0:e2:03:20:c8:
7c:d4:f9:5d:bf:5e:67:f5:bd:59:95:f4:0e:b0:c4:
1a:de:0a:ed:d0:d8:97:3d:a2:17:13:cb:c7:88:d6:
ab:4f:5c:72:16:b2:db:3f:4e:93:b0:2c:34:7c:d4:
8d:88:d7:c6:90:20:51:ad:27:d7:66:28:0b:4c:94:
66:20:87:41:2a:10:15:22:8f:50:a7:48:c9:7f:77:
85:b3:54:11:0a:38:49:f6:89:00:b4:5f:3d:80:18:
72:2f:b1:45:76:6e:02:10:7f:6f:d9:b1:39:28:95:
45:8e:cf:21:66:74:0a:e9:b2:4e:a5:f4:6e:72:53:
e6:18:41:79:9c:2c:82:73:6d:90:62:e2:7f:c2:de:
0e:3d:27:09:ef:94:d0:76:e8:c8:6d:c8:ac:93:6e:
9e:1b:c5:39:47:df:4c:e0:40:7f:d7:49:fa:28:bd:
4d:50:ca:e6:14:79:0d:88:1a:9b:65:55:93:2f:3a:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:F3:E4:54:A0:4D:08:3D:2C:99:5B:0D:97:9B:A7:45:B8:83:86
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:94:79:aa:ca:02:28:54:4d:8d:f9:41:0f:0d:fc:e2:9e:02:
26:e0:90:b1:bd:d0:b8:0c:2e:f1:ad:f9:1e:1e:d3:b3:ff:c0:
63:cb:d4:7a:63:27:d8:b7:00:ec:b2:f0:1b:37:02:6e:69:38:
f6:27:31:e2:bd:ae:1d:0e:73:25:97:4f:d2:20:2d:0e:19:c8:
df:8d:a1:6c:eb:33:b4:b6:cd:09:a8:1b:04:5e:b4:b6:54:b6:
5a:94:8e:41:0e:85:cf:ed:1f:8f:7e:7b:45:cf:da:5c:9b:a1:
12:a5:ee:8e:64:09:4f:39:1b:2c:57:04:47:15:65:f2:17:3d:
1b:33:78:2e:73:66:52:f2:b1:f4:e3:b4:af:fa:ac:20:e0:e2:
97:70:d8:ea:42:bf:35:4c:0e:bd:48:a2:51:1d:90:a1:32:e7:
af:3a:20:20:2c:2f:71:15:3d:93:eb:b8:dc:89:44:e4:ee:78:
e3:c4:05:41:ab:a3:d5:0f:8b:23:64:5a:0a:82:5f:78:b2:18:
50:e0:73:04:f5:7f:98:47:d5:3c:36:03:51:30:8c:8c:5f:cc:
cf:d4:fc:20:a7:7f:16:f8:75:47:ec:ae:21:c0:4c:94:28:ec:
dc:78:18:ff:14:c5:e5:42:6a:73:d3:c1:b7:0c:c2:f3:f2:79:
37:a7:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:39 2026 by rpki-client