Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: phbhghw27xs9miZCCZUzgxcWi0osfmyzVPV/WLi4Eis=
Subject key identifier: A9:E5:A3:38:5F:EF:B8:A9:DD:AB:7C:28:34:04:A9:C6:E1:68:D2:51
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019D9AABBBD53C2203596639AE8536B98678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:39 +0000
Manifest this update: Fri 17 Apr 2026 09:00:39 +0000
Manifest next update: Sat 18 Apr 2026 09:00:39 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: zbcMqyUbFPJ3q9RExy7Yh62e6jt2t1BhtAbWjkPy42A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:bb:d5:3c:22:03:59:66:39:ae:85:36:b9:86:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Apr 17 09:00:39 2026 GMT
Not After : Apr 18 09:00:39 2026 GMT
Subject: CN=a9e5a3385fefb8a9ddab7c283404a9c6e168d251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:79:0e:32:51:c9:2f:54:63:4d:f8:ee:b7:
33:26:ec:1a:60:22:7f:19:53:bb:e8:b2:50:90:fa:
6a:be:ef:a3:c5:b9:32:ee:f5:2c:a9:93:5d:b9:41:
9b:19:39:d4:0a:b0:84:7b:8c:da:0a:4c:dc:94:0c:
55:3f:fa:d0:48:f6:81:ad:8f:b6:e0:0d:1f:af:03:
c0:fe:82:57:a5:01:e0:58:b4:18:27:b1:cc:24:69:
02:ce:8c:b0:7f:d0:fd:4a:2a:1b:12:6b:f0:d3:74:
64:1a:f1:d9:9f:ae:0e:12:61:df:6e:c4:56:1b:97:
0d:7c:8f:40:d2:71:19:96:85:ce:7c:79:0a:2a:c7:
46:bc:3f:69:99:9a:91:cb:9a:68:4e:14:6c:12:42:
ac:f4:84:7f:12:8a:5d:90:d2:89:96:97:d7:87:09:
55:31:f8:72:d3:a7:72:27:d0:e8:c9:4b:65:b0:23:
09:0a:51:60:5d:43:d2:46:8c:12:a2:2f:49:9b:4b:
85:5e:66:09:b0:4e:f5:72:0f:2d:7d:a8:20:e6:78:
ec:7a:10:50:31:09:18:3a:95:da:5c:9f:67:80:8c:
75:1a:78:07:73:ed:ac:84:3f:67:b8:52:f8:c1:e8:
e0:8d:27:72:b7:a7:aa:4d:70:1c:cf:54:c1:50:09:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:A3:38:5F:EF:B8:A9:DD:AB:7C:28:34:04:A9:C6:E1:68:D2:51
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:42:ed:de:c6:f4:c8:9b:0c:cd:2b:d8:45:9f:6b:2e:8a:af:
72:9a:e6:9c:35:e5:72:94:a6:b0:4d:fb:f4:4f:28:a3:30:cc:
ea:71:aa:d4:9e:bc:3f:c1:f3:4c:4d:49:dc:79:f4:98:e4:f3:
b7:80:9b:00:ba:aa:20:4a:0c:3c:c2:a4:7e:35:67:64:05:82:
eb:e9:a2:6f:93:fa:a9:1d:60:92:a1:b1:3c:32:17:b8:e9:c2:
ae:a5:3e:ce:86:e4:b2:25:22:66:f5:86:9b:43:06:8c:64:7f:
6b:aa:6a:67:0b:35:67:1a:b9:7d:28:f8:51:f2:ec:20:f6:b9:
e1:90:68:76:c2:9b:06:6f:2d:5d:c8:41:a1:20:07:b9:36:80:
9e:43:f5:5d:6e:eb:c4:5e:cd:47:9d:db:65:15:9a:bd:13:e1:
30:ba:ee:9b:cd:72:b6:7b:94:8f:7b:27:1c:e5:9b:03:b5:14:
78:7f:4a:5b:97:17:ca:0f:44:6d:51:e7:85:5f:fc:ed:8b:c1:
71:e9:f2:10:07:74:f9:d3:9c:b4:a8:f0:05:e4:f7:e1:97:d0:
85:50:b0:89:c3:39:c7:00:5a:81:a6:dd:4e:2a:2c:f1:50:5f:
09:01:c5:7d:28:94:a2:ff:76:c5:78:c7:35:14:05:7e:8d:87:
31:fb:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:27 2026 by rpki-client