Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: Cbj+djymDgmVyp0d7Kc2Nx4377dTJDbh0Qe3ABFadIM=
Subject key identifier: FC:55:30:0F:46:79:A0:AB:89:BF:FE:AC:D7:42:2F:48:82:A9:88:17
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019DA30A15AD207B2756519891DE194B982B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 00:00:40 +0000
Manifest this update: Sun 19 Apr 2026 00:00:40 +0000
Manifest next update: Mon 20 Apr 2026 00:00:40 +0000
Files and hashes: 1: KryCaxT64_DbJj9jN-VGjBxwrAo.roa (hash: Tm0gGiIBbT70VOlPTXJPfE+loxLa156dIkZIGPLoeOg=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: umtrzS3u243ce3/FyYjGTbbzaMVSYSJ0ZBeYz7hauyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:15:ad:20:7b:27:56:51:98:91:de:19:4b:98:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Apr 19 00:00:40 2026 GMT
Not After : Apr 20 00:00:40 2026 GMT
Subject: CN=fc55300f4679a0ab89bffeacd7422f4882a98817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:59:aa:3d:f3:63:0d:1b:08:bb:37:4e:0f:
f5:27:7d:ea:b5:c7:40:d7:13:30:22:6e:25:3d:1c:
89:31:3a:3d:11:22:ed:b2:cb:08:ea:18:b0:f2:41:
74:02:cf:35:a4:9c:48:4b:cc:75:06:58:db:e8:3f:
ad:bc:8c:de:9f:ce:05:2a:4b:82:f7:8c:cd:fe:3e:
55:53:17:17:44:26:25:79:cf:2f:d6:56:ed:a5:66:
80:98:3b:79:7b:8d:a3:e1:b6:2a:02:cd:2e:c9:39:
21:d2:f1:e5:ad:bd:b1:5c:ee:46:3e:cc:41:1b:d9:
9f:07:a2:47:b2:5b:10:52:fc:8d:9e:5d:d0:0c:99:
39:02:25:be:c3:21:4f:83:7f:1c:f3:71:9f:18:7a:
9c:f0:27:cc:33:29:7e:b2:7c:b9:a8:52:84:0a:df:
ab:7b:ea:f7:6f:5e:45:9c:ed:d3:b7:be:c5:5e:7d:
0a:11:fb:df:4c:1a:7d:5e:ab:25:1f:ac:9c:41:0f:
0d:cf:d1:78:ec:02:6b:52:42:87:59:c6:2a:20:5e:
4c:68:29:84:cf:7f:05:8c:11:98:32:89:ec:e9:f7:
f9:e1:19:30:97:f1:35:e4:97:58:d8:2d:37:34:f5:
35:b2:84:bc:e5:00:42:67:20:b6:33:46:78:1a:b2:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:30:0F:46:79:A0:AB:89:BF:FE:AC:D7:42:2F:48:82:A9:88:17
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ce:84:f2:58:16:21:66:f4:25:f1:bc:29:6e:25:16:8a:6f:
ac:b6:b2:57:90:4e:a9:e4:a9:42:b1:b3:a0:cd:d2:97:2b:a9:
fa:d0:49:16:36:35:d2:f5:9c:26:c7:3e:9a:f3:86:e1:18:f9:
f6:4f:dd:f1:93:c5:e9:e8:29:b0:66:f3:1d:c6:51:37:f2:26:
fc:ee:4c:10:07:2e:f4:3d:06:0a:2d:88:99:8d:5a:88:fd:9f:
4f:a5:3a:b1:57:d7:0d:56:16:43:ad:68:92:5b:63:4d:53:f8:
84:04:72:af:c3:66:39:6f:f8:68:68:bd:66:3c:03:f4:29:d5:
00:fa:5d:e9:38:d3:dc:6c:f3:8b:9f:ab:92:15:ae:4b:c5:d2:
63:61:25:cc:3a:a6:51:d0:12:44:d0:3b:3e:78:d1:3a:ca:8c:
d3:57:37:e7:1a:af:50:a4:d7:e9:29:4c:e4:85:42:3b:e3:ab:
19:0c:7e:22:f0:a3:18:c8:03:a2:30:68:cf:8f:16:21:d8:09:
03:be:b9:d3:81:99:59:2f:2f:4c:83:1b:b0:b3:72:cc:10:54:
08:4f:c0:f9:a9:5d:0c:93:72:39:e8:44:1c:4a:17:ea:c8:5d:
6d:8f:0f:bb:24:f7:98:42:82:be:9e:1d:6b:14:8d:33:0a:50:
d2:6b:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:00 2026 by rpki-client