
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: k3V+0y41IjXCl/YTExXXptz5Nv2Bd9sHAuBbbp9lBzc=
Subject key identifier: A3:25:04:1C:F0:10:55:B6:AA:B5:79:4B:37:27:EC:C2:32:BE:EE:57
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 019D99999CF4F816B4BD5AE0EA285432F475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0F07
Signing time: Fri 17 Apr 2026 04:01:14 +0000
Manifest this update: Fri 17 Apr 2026 04:01:14 +0000
Manifest next update: Sat 18 Apr 2026 04:01:14 +0000
Files and hashes: 1: JuDeFJbO_wXZjBIE6eYSc7boKCs.roa (hash: MAfICq2fQmDbk85foSo683rw0p189TufeECHZ/PelUo=)
2: nPEounEr9Dlrb0BmzADGVTeSqtg.roa (hash: WNJB2u1ILoanF+nGeSCzXfM+9cLuf8G8/18OGH9ztZ8=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: +IacIn/yWBVSWbCPwiZL+7evVQX7kglqNrCMBzE/+YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9c:f4:f8:16:b4:bd:5a:e0:ea:28:54:32:f4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Apr 17 04:01:14 2026 GMT
Not After : Apr 18 04:01:14 2026 GMT
Subject: CN=a325041cf01055b6aab5794b3727ecc232beee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:78:b9:05:61:cf:d5:8f:76:57:73:2e:cd:
07:1e:e9:3b:87:9a:67:14:e2:12:de:ca:a5:8f:16:
58:5d:1d:0f:57:8f:bf:24:7d:7c:9b:53:d9:1e:89:
ea:97:21:b6:77:7e:5a:5d:7c:6d:97:43:a6:67:95:
f7:bd:8d:77:ae:81:eb:4d:d9:7a:7b:9f:4a:de:26:
e6:69:e6:ed:d0:6e:39:ac:48:ba:ed:ce:b7:45:3f:
04:d2:fa:0e:0d:8d:46:b6:2c:82:d4:9a:0e:5d:a8:
0f:90:a4:97:c9:8b:25:e8:19:d3:97:03:05:25:b6:
b8:62:1d:08:89:b7:12:23:59:21:a6:a9:6e:62:ed:
fb:b0:d5:3d:21:42:4c:12:6d:1e:e8:90:f0:57:c7:
67:f5:08:69:35:bc:10:27:97:91:b9:26:67:99:72:
06:0b:1d:79:0c:12:6f:3a:b7:79:7b:b7:b3:51:59:
2f:0b:51:1f:57:88:c2:05:e3:cb:51:3c:25:5c:5e:
2c:3b:d3:fe:e4:8a:c3:3a:14:c3:6d:fa:a5:3a:df:
98:d2:5c:de:68:c5:d9:a4:d8:41:f0:10:c5:ab:67:
2c:eb:0f:0a:fa:84:ac:6a:36:10:87:6c:e1:36:c9:
8e:f2:3d:c5:c0:69:d4:bd:f9:c3:5f:72:05:89:fc:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:04:1C:F0:10:55:B6:AA:B5:79:4B:37:27:EC:C2:32:BE:EE:57
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6c:8d:a3:6e:7b:07:e6:70:46:4b:a7:b4:13:76:94:66:4b:
08:1a:5d:e6:66:3c:c6:1d:d7:fe:83:27:70:2b:c4:2c:ca:f5:
2d:65:d1:11:31:d0:cd:6e:66:8f:80:7f:67:9f:41:3e:51:0a:
ec:a7:0e:70:77:24:43:5c:dd:e7:8e:07:4d:a9:81:f4:d0:9f:
f9:0f:7b:b5:09:2c:09:2d:41:47:07:8d:6c:a2:14:f3:08:8f:
c2:f0:72:5a:be:7e:f9:9d:52:18:2a:8e:81:b0:67:ea:84:66:
59:44:eb:91:54:53:38:2e:3f:7d:69:74:c4:bb:a1:7f:5f:f3:
33:08:01:59:ee:8a:54:10:76:f3:9e:aa:c7:de:8d:eb:9c:0f:
3f:df:ea:03:e0:32:fd:2e:9f:a8:10:ff:1f:84:eb:73:f7:2c:
a9:9b:f5:fa:55:0d:5a:91:ea:b9:aa:a9:58:7f:cd:cc:f4:4f:
f0:a7:e7:a8:04:26:c9:01:6b:ae:fb:6a:01:64:ad:d0:f6:e6:
2b:c2:48:21:6e:58:40:8d:86:43:a6:eb:3a:b3:e2:c7:6d:29:
ae:56:64:e9:cf:43:d0:d9:dd:c5:20:90:5f:17:e2:06:c6:f9:
3c:26:05:d7:39:0d:51:66:bb:41:43:65:0f:a2:65:cf:f6:c4:
f4:45:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:32 2026 by rpki-client