Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier: Hk0+oRoSTF/3YUq0+fQIhBTuUyxxM73EJ3B9TeaGrv8=
Subject key identifier: A0:43:8D:DD:54:6C:BF:26:E2:F6:91:5F:25:8A:0C:07:C1:8B:92:5B
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial: 019D9AABD16DA6D170CFBB03F25E3A4F4981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:44 +0000
Manifest this update: Fri 17 Apr 2026 09:00:44 +0000
Manifest next update: Sat 18 Apr 2026 09:00:44 +0000
Files and hashes: 1: 1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa (hash: fRzTkPN8a27bua2wzuTpxH2x1y519ujmqn10IN10rFw=)
2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: xNHLECR+GrXn5ZSD6odaf5oDTQsN5vLCJuObKzmON+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d1:6d:a6:d1:70:cf:bb:03:f2:5e:3a:4f:49:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Validity
Not Before: Apr 17 09:00:44 2026 GMT
Not After : Apr 18 09:00:44 2026 GMT
Subject: CN=a0438ddd546cbf26e2f6915f258a0c07c18b925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:57:e2:22:9d:62:92:41:a4:68:0c:6e:ac:
a2:15:56:ed:f3:01:3f:b7:7e:74:3c:55:c6:b7:77:
00:a6:08:d5:03:33:c1:83:33:1e:89:39:b2:56:28:
3c:24:9a:01:2f:4e:be:10:01:18:41:84:be:39:1a:
43:aa:4c:db:fb:10:a3:91:4a:cd:ad:fd:d5:c6:fe:
97:4c:28:6c:4d:27:52:6b:c5:b6:b0:2f:e1:c4:ad:
41:cb:18:59:e5:3f:b0:f5:3a:6d:9b:7f:b8:eb:fe:
dc:a0:6f:28:2c:cb:26:1d:b8:50:5a:b0:a3:c2:4e:
51:99:37:58:22:56:20:67:ab:b9:16:bb:0c:23:d8:
bf:5a:7b:5e:f6:96:42:71:b2:19:32:ae:b9:6a:55:
3b:e2:cb:ba:2f:29:6e:c8:84:b4:4e:42:35:3c:5d:
28:46:b4:31:3d:f4:08:63:d5:e2:2b:ad:e0:d8:30:
cf:3b:65:0a:1a:d5:0e:ae:44:ea:d4:17:84:cd:e0:
27:b2:08:e7:a6:a0:70:65:b1:ce:b9:a7:5f:2a:b9:
c9:8a:e1:42:c3:f0:f3:ab:eb:c4:e7:69:a5:70:54:
89:1e:c1:d3:46:b7:db:dc:15:64:83:70:27:eb:49:
49:66:29:80:1c:c6:fb:c5:d1:96:73:d5:80:78:3d:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:8D:DD:54:6C:BF:26:E2:F6:91:5F:25:8A:0C:07:C1:8B:92:5B
X509v3 Authority Key Identifier:
keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:70:c8:1d:eb:4e:a2:c6:0f:30:c6:32:89:61:28:74:2f:
03:00:a8:35:c5:ee:17:ce:bb:17:b3:53:d1:93:68:76:0e:d4:
7c:13:74:ce:4c:db:20:97:4e:00:d4:4a:7e:9a:22:33:1a:e8:
d8:f8:0c:d0:32:2b:d0:66:76:3a:6b:4d:64:79:57:cc:22:58:
c7:8a:3a:ac:34:4f:33:39:6f:a9:32:27:c9:ce:d2:e8:03:47:
ae:e3:4c:20:aa:0c:3a:59:6f:7f:78:43:01:10:e1:e3:00:77:
95:bd:ff:d9:7c:8d:19:06:08:ce:4d:72:27:9a:0b:f9:80:60:
3e:13:ce:7a:1e:21:ea:de:67:4c:9e:89:c6:a1:ea:bf:43:76:
0f:4a:21:31:c2:8f:dc:b3:3b:1e:37:89:f4:63:ec:4b:8c:ad:
88:a5:21:83:7e:9b:70:d8:98:15:1d:dc:9d:04:30:0c:a9:14:
af:be:5b:d2:23:15:3e:9e:54:34:2d:fc:87:0c:87:48:aa:5b:
5d:f4:9a:f8:a5:54:1d:96:68:04:c0:0c:88:34:00:5a:d4:90:
2f:e6:dd:68:b7:ac:2c:23:b7:69:5f:29:64:5a:89:5d:95:be:
9d:a8:5b:b4:8a:44:18:d1:1e:25:4c:b9:71:e6:ef:69:81:ea:
62:c2:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:11 2026 by rpki-client