Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
File: wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json)
Hash identifier: e8ztY2wmodHjmeWJlhyIE7+M7dWbSn27SPacb6xiBAI=
Subject key identifier: 98:6B:38:87:75:1E:DF:5D:00:83:B9:80:07:FC:66:74:96:B2:E3:84
Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Certificate issuer: /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Certificate serial: 019DA3418E981C6EB556A2FF00BA0FBACC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
Manifest number: 17D9
Signing time: Sun 19 Apr 2026 01:01:15 +0000
Manifest this update: Sun 19 Apr 2026 01:01:15 +0000
Manifest next update: Mon 20 Apr 2026 01:01:15 +0000
Files and hashes: 1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: bcJzEHH48NFTd8ec/63FtUpU/xvXCe6IJaU1C2udDzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:8e:98:1c:6e:b5:56:a2:ff:00:ba:0f:ba:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Validity
Not Before: Apr 19 01:01:15 2026 GMT
Not After : Apr 20 01:01:15 2026 GMT
Subject: CN=986b3887751edf5d0083b98007fc667496b2e384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:44:97:c5:f6:95:e4:73:8a:b8:bc:61:0e:
a8:13:06:fb:fb:8a:4b:65:8a:ee:5c:db:63:6c:50:
f3:e8:4d:b2:4c:70:ec:97:77:2d:d9:81:55:36:27:
98:22:98:39:a7:c8:3e:c8:dc:26:c1:99:e1:71:a9:
91:31:31:c6:ef:53:72:c4:04:07:91:f4:0c:3f:23:
08:f7:05:17:1b:66:2e:d9:d3:ef:34:ec:2d:2e:13:
79:91:92:57:1b:5d:ee:ff:1e:b1:d4:83:a8:19:83:
de:78:d0:ea:d5:2f:b3:e5:13:d0:97:3d:ab:ca:74:
3a:4a:51:da:64:b9:1a:eb:8b:4a:d3:36:64:a8:e8:
74:f0:65:1a:7a:7b:26:4a:f0:9e:b1:56:8c:03:98:
4e:74:c0:36:88:59:30:e6:80:d2:37:85:89:4a:a6:
8d:da:e5:8a:63:1c:99:18:d8:04:23:66:c9:ee:a7:
95:a1:35:49:ad:99:61:8e:a3:df:3d:4d:4c:2e:c0:
35:59:57:d9:f3:0d:76:72:b8:e3:0e:dd:dc:71:92:
9a:55:d7:2e:fb:a5:16:aa:22:4e:c2:4b:8f:56:0c:
b7:c4:7b:b9:bc:36:51:f1:7c:9c:88:aa:a2:33:0f:
57:32:32:7d:3f:c9:fc:7f:df:8d:f2:9e:2d:7c:b9:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:38:87:75:1E:DF:5D:00:83:B9:80:07:FC:66:74:96:B2:E3:84
X509v3 Authority Key Identifier:
keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:e7:20:4e:17:a2:66:6e:90:7b:cb:86:15:af:88:4a:55:
8a:2a:4a:65:d6:e9:4f:c3:54:87:bb:b4:66:b3:55:f3:b6:eb:
17:ee:be:69:1f:33:70:5d:f4:f2:8f:94:25:05:fd:95:cb:07:
0e:18:07:00:c8:d6:a3:07:8a:52:66:46:12:1d:7a:9a:da:11:
48:46:41:87:1f:e0:f7:53:f1:8e:ef:d9:e7:6a:e5:a8:5f:58:
a6:11:ab:ed:5b:a7:eb:ff:16:72:a5:6b:ed:83:5e:30:ff:06:
e5:ad:05:71:9c:c8:8d:2c:9a:9c:b2:4b:be:0d:ab:e6:f1:dc:
e5:c5:e3:86:cc:85:0d:f9:61:6d:1b:cb:2b:7c:c9:05:25:b1:
1c:5b:53:c0:fd:f1:82:07:29:a4:94:a7:70:51:ca:af:fd:97:
fc:3e:3e:5f:b7:d6:26:fd:ab:6a:aa:00:77:3a:85:37:0f:29:
86:fb:0a:53:2d:ea:f5:ff:1d:d0:24:d6:49:b7:5d:c8:db:73:
e1:f8:5f:91:84:e3:8e:d9:4b:9b:85:11:90:c5:de:43:65:ed:
54:a3:6f:2b:e1:11:6c:b2:f8:22:cd:2d:61:f5:c3:7b:75:66:
f1:85:25:25:0f:a9:5b:d6:14:83:f3:99:d9:82:38:77:64:ed:
76:c6:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:55 2026 by rpki-client