Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: 5PVCTkb5UwYPBN0BvyaUIbo+1lFbnbsQ1XID5vMUKmE=
Subject key identifier: 39:B4:98:64:79:52:90:2B:B6:0B:6F:4C:FA:87:C9:A2:6B:59:37:F3
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019D98BD56D05549C46F7D212E1D5AFFD74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0EC1
Signing time: Fri 17 Apr 2026 00:00:38 +0000
Manifest this update: Fri 17 Apr 2026 00:00:38 +0000
Manifest next update: Sat 18 Apr 2026 00:00:38 +0000
Files and hashes: 1: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: RtC63VC8CrVnVnDBMhcpc4X5Dml4OxGn/K4d0ISsSp4=)
2: h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa (hash: lIFIr7IW4fJHhWCQmREyv0ZLQpwRC/atkqoeOTTCLNA=)
3: oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa (hash: thUeFABDpIEkTpbKZW+FpdsviA9MqeC7/Ij0qsHenC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:56:d0:55:49:c4:6f:7d:21:2e:1d:5a:ff:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Apr 17 00:00:38 2026 GMT
Not After : Apr 18 00:00:38 2026 GMT
Subject: CN=39b498647952902bb60b6f4cfa87c9a26b5937f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:31:0b:e5:b5:9c:a5:19:a8:b4:a0:5c:f2:
18:eb:0e:61:d7:67:2b:05:76:fc:b2:99:db:d2:fa:
c6:87:70:6f:94:34:e6:42:5f:c8:7d:d4:cd:2f:6e:
d6:3b:41:1f:ee:00:9f:d9:00:9b:84:ea:9a:24:bc:
01:8b:e4:bb:3d:f3:b5:99:cb:4c:61:84:9f:56:4a:
dd:82:3b:1d:d0:8b:e4:ee:81:3d:b1:2c:e7:06:ae:
cf:c9:62:ed:cb:a2:88:58:2e:0a:d6:b6:98:05:e6:
4d:33:9a:9c:3e:5d:e7:a2:2e:a7:fc:06:5c:02:0c:
a5:6d:2a:61:d4:23:6e:16:d8:db:4b:42:c2:9c:6e:
e0:f6:95:4f:09:d6:ec:4a:c9:76:d8:7b:73:18:1b:
d1:b6:93:21:75:4e:27:af:74:51:0a:7b:bc:dd:4d:
8a:0a:d0:3f:2d:5f:6b:22:05:a8:b7:43:89:0b:fc:
bc:bc:17:3d:d6:48:e7:19:19:10:e8:4d:18:39:ed:
a9:60:e7:ff:8b:36:d8:f8:d3:fa:22:ff:bb:9a:96:
9f:28:be:77:4c:35:71:b7:1b:fd:d2:b7:8e:8d:15:
49:8b:d8:69:04:da:36:ee:f1:d2:e1:07:eb:4d:ef:
ed:fa:ea:f2:e0:08:0e:3c:b7:6a:ff:61:d0:3c:89:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:98:64:79:52:90:2B:B6:0B:6F:4C:FA:87:C9:A2:6B:59:37:F3
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3e:ca:03:92:4c:7d:e3:78:fb:56:3e:c5:ae:30:28:3b:53:
62:ca:18:98:f1:33:c6:43:00:58:a7:56:80:e6:6f:dd:25:12:
92:3d:4b:7c:ab:42:c2:44:75:d0:54:f1:e8:2a:2f:ff:70:2a:
d7:35:ab:8b:03:d7:88:eb:f2:56:b1:9e:ec:37:cb:4d:54:ce:
65:2e:98:9b:77:43:db:2c:15:f9:4d:7f:d9:59:92:7e:cc:cf:
e2:f5:df:ca:90:24:a0:7b:66:90:74:87:82:dc:98:64:57:71:
02:d1:9f:83:a2:16:cc:26:05:07:d7:be:b9:bc:cc:40:96:e9:
17:4a:d6:46:26:0f:39:fc:91:77:b9:d9:6f:d7:86:99:a3:17:
21:ba:18:f1:4e:70:ae:b2:f3:54:20:b2:cd:1e:46:62:27:42:
18:13:0d:4b:b8:02:da:6a:e8:ee:80:c8:56:74:b8:fc:1c:cb:
4b:4f:90:ae:a8:5b:12:d7:a2:0b:b1:96:df:d4:a5:43:45:8c:
6b:b0:30:b8:4e:43:06:a9:0e:85:0b:ac:d8:a8:38:de:21:db:
50:4d:2f:ea:22:e4:24:81:85:19:b3:4e:b7:4d:7e:75:21:aa:
44:f4:16:65:ed:60:87:4e:c0:fc:6a:c9:85:56:12:12:6b:b7:
cd:7f:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:41 2026 by rpki-client