Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: 3EMDYlGhVdW1OpYn9Rpjr3mEZzifYkmhtoF83cslRYw=
Subject key identifier: A7:99:C3:E1:3B:1A:7C:94:18:D7:22:03:FA:F4:19:24:D1:FA:BA:9D
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019D9C9A231F6CEE1B401C787B3338E1D935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 18:00:40 +0000
Manifest this update: Fri 17 Apr 2026 18:00:40 +0000
Manifest next update: Sat 18 Apr 2026 18:00:40 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: ErzXrAhENhPNja6cvOpAyp5y2EZ3yDg1m+3pPQqJqXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:23:1f:6c:ee:1b:40:1c:78:7b:33:38:e1:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Apr 17 18:00:40 2026 GMT
Not After : Apr 18 18:00:40 2026 GMT
Subject: CN=a799c3e13b1a7c9418d72203faf41924d1faba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:3a:58:8f:42:46:f2:4c:fa:b5:65:e0:16:
9f:19:7e:84:dd:05:b5:d4:65:56:42:31:51:50:4c:
a5:95:46:b7:12:d3:e3:f2:b9:b9:c6:a0:67:52:34:
3e:34:44:0a:b2:17:11:92:b7:9b:08:0b:32:30:96:
e4:1c:7c:cc:ea:ac:1a:39:23:5b:61:66:6e:64:93:
46:88:fa:4d:6f:ec:26:35:58:33:fb:ec:dd:fb:a6:
3d:9d:7a:a3:03:80:98:ed:23:9c:78:cc:1d:fc:50:
d8:84:9e:d3:d5:51:21:1b:b7:79:76:01:4b:e3:19:
ab:b6:cf:b7:90:c0:2e:ee:c6:aa:5e:ae:cb:14:56:
75:0f:67:fa:49:2e:95:86:29:d2:4a:48:7c:a7:da:
ee:f5:e9:a6:da:88:94:8f:6d:7c:0d:86:ea:4a:38:
b1:25:6a:cb:d1:f0:f2:ef:36:7d:7e:b9:94:f7:34:
c0:7a:e6:85:5e:e7:77:90:f2:37:be:cf:8c:56:83:
4d:91:cf:e1:55:3f:21:f3:9a:e0:22:78:9c:f8:df:
fe:ab:a6:03:d1:9d:3f:e4:b4:53:3b:14:74:d2:35:
e5:ad:90:5e:07:32:c1:7b:35:7f:4d:78:31:59:4f:
d9:1f:9a:20:9b:1a:c4:f4:c9:2f:25:b9:46:79:8e:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:C3:E1:3B:1A:7C:94:18:D7:22:03:FA:F4:19:24:D1:FA:BA:9D
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:eb:33:8f:37:af:ed:7e:63:2c:65:2c:1c:4b:19:71:0d:7d:
04:7c:33:89:54:61:cd:79:0b:b4:2b:4f:0b:16:63:23:b6:01:
a3:6b:dd:6c:90:f7:a7:f1:8d:a7:cc:52:ea:82:2c:82:5d:95:
6d:ed:2c:ca:ff:35:71:35:25:ff:57:6e:74:6e:3d:2b:a3:6c:
57:45:81:13:ea:86:28:94:62:9c:74:d0:7a:87:d9:d1:44:df:
f7:4c:c1:d2:99:c4:8f:a6:dc:ac:0f:a5:46:af:28:45:fa:d0:
e2:45:ae:99:80:54:95:58:b0:d8:dc:57:46:48:c2:19:57:e2:
7a:d0:59:e3:63:99:63:8c:50:92:37:d3:41:46:fb:ed:ac:07:
b3:ff:05:e6:90:30:0a:88:82:e8:d6:d2:97:c0:74:eb:ed:d7:
02:05:e9:cf:d9:d3:fe:71:75:04:d3:98:3a:16:7f:fa:6c:8f:
6c:b0:c7:bf:00:84:b8:ef:40:2b:f1:f7:4a:f0:d3:83:a9:b4:
f1:16:a8:a4:dd:c3:4c:eb:54:e3:44:ed:46:e7:7a:17:12:2d:
ee:20:3e:74:a6:68:03:d3:9b:50:1b:91:33:95:0a:fb:5d:fd:
2a:23:73:35:38:1b:99:ea:15:56:8c:b0:11:4f:1d:fa:65:6f:
48:e8:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:20 2026 by rpki-client