Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: JtmP633zPpG6hERHaCGlHAFYxVBesT8pu1I14G3YJ/E=
Subject key identifier: 21:28:B0:6C:E5:42:19:67:63:A0:4F:BF:DB:AD:F5:48:05:AC:66:8C
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019DA3AEE3C7F584CCD8AEAB671BA5A0A8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 16E1
Signing time: Sun 19 Apr 2026 03:00:40 +0000
Manifest this update: Sun 19 Apr 2026 03:00:40 +0000
Manifest next update: Mon 20 Apr 2026 03:00:40 +0000
Files and hashes: 1: 2fDUlbNk_TjJfNmL8k7Qpaq_A4k.roa (hash: AoEFyUvMFK7WBCJaTliv+GG29q2nziZw8E359o15zN8=)
2: gMvc_sE40m271NPynEOBrQzKYWQ.roa (hash: OeLSYnjbKMmBS4VGXJ744NmGmYrVy7bxB46xBnCaSmA=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: jN/K8sAz0MBpTvkALKLjz6QofDmSlMm6vB35NbCgHA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e3:c7:f5:84:cc:d8:ae:ab:67:1b:a5:a0:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Apr 19 03:00:40 2026 GMT
Not After : Apr 20 03:00:40 2026 GMT
Subject: CN=2128b06ce542196763a04fbfdbadf54805ac668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:d0:34:82:33:92:84:32:70:42:56:f8:af:
67:2b:e4:82:b4:f4:d4:5a:ea:4e:58:25:a9:84:85:
d8:c1:c0:cf:80:77:81:55:73:fd:2a:32:77:c9:c7:
cd:ff:d9:3f:03:0e:b2:7e:bf:43:6d:a9:f3:b6:df:
b8:21:6b:30:c7:c0:9e:6f:35:91:a5:fd:e7:cd:1b:
27:99:15:25:55:30:00:00:36:cf:bd:79:3a:7a:d2:
7f:72:4c:3e:53:6b:e1:0d:48:46:77:0c:36:80:be:
0b:c7:16:77:84:4f:cd:0c:46:dc:13:2f:75:27:70:
7c:b3:f6:63:c6:cb:06:97:ca:f9:e5:0d:1d:6c:0c:
db:fb:92:6c:c9:83:57:86:e2:aa:3e:67:21:ba:43:
bc:4b:cf:4e:70:c2:49:db:ca:ab:76:20:59:26:4a:
16:2b:57:f9:6f:be:ca:6c:3d:53:13:d5:5b:d9:2a:
d0:4b:87:bf:0e:d0:9f:c2:b1:69:75:d5:34:44:3b:
85:12:72:cd:1b:48:81:5f:a1:a0:39:a5:e9:23:9b:
81:d4:cc:a2:d4:23:b9:8a:73:59:99:f1:af:9b:be:
08:31:87:c8:87:c8:a0:a8:90:03:fe:b1:8b:9c:5c:
7c:a8:ab:1f:d4:20:92:1f:73:9b:bd:5b:c1:25:f1:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:B0:6C:E5:42:19:67:63:A0:4F:BF:DB:AD:F5:48:05:AC:66:8C
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:a6:d9:4a:fd:fe:a0:ff:e8:db:b4:3e:e6:da:fe:b4:d6:
45:0a:0d:59:e0:19:69:da:76:f8:59:1e:aa:89:ff:ce:c7:f0:
23:18:e8:83:65:19:ca:f0:b0:1e:b9:2f:eb:fe:29:95:5c:9c:
f8:b2:8c:7f:5d:bf:54:12:d9:07:64:dd:cf:05:1f:d8:d0:1d:
71:08:68:3d:d8:44:9a:b2:13:b8:b3:59:15:eb:05:ec:d5:74:
3d:1f:4e:5e:49:ef:16:fd:31:90:a3:fe:93:82:52:a7:72:16:
aa:fd:b1:44:69:ca:6e:cc:19:48:cf:3b:d9:75:55:d8:f5:96:
84:fe:5f:ec:8e:a0:59:6a:ff:33:ea:c5:f4:00:8c:b8:4e:ec:
24:03:be:b1:d2:d4:e6:6f:5e:89:41:04:df:29:b5:a4:12:fd:
14:85:e0:82:71:d6:7e:c9:96:bc:ac:d6:6b:6e:e5:b7:b3:07:
6f:d6:cf:2b:ad:ca:ff:05:d8:5f:de:40:ab:c7:de:a6:00:e6:
9b:55:fd:fe:73:9a:a6:0b:89:0c:96:00:f9:1a:22:f2:f5:c7:
e2:15:c5:16:97:ce:b5:47:11:00:62:8c:3b:80:23:c5:1c:5f:
8b:e9:75:aa:62:58:56:c5:2e:fa:93:49:24:42:6c:31:75:1f:
af:8b:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:32 2026 by rpki-client