Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: GWrYICtMg4NtqAe1i363e/j0vzPcuWP/JqWtuBkC7wE=
Subject key identifier: 42:D5:31:4E:62:E4:30:72:A7:1F:01:9B:41:61:72:D0:64:6D:9E:72
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 019D9AAB85D1D7AB37A3048B1D990F183492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: xPLzDZEoQdE+sARIsHOq75xML8t9iC2LM9ca5XZKTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:85:d1:d7:ab:37:a3:04:8b:1d:99:0f:18:34:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=42d5314e62e43072a71f019b416172d0646d9e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:89:16:bf:09:b9:bd:66:13:0a:0c:f8:f6:
6d:4b:1a:f4:dc:b3:a1:dd:21:c7:07:eb:90:e3:a3:
04:3d:55:42:32:d9:ff:3c:82:10:e8:2e:a9:af:c5:
a8:a4:90:10:12:b0:83:ce:6d:20:d1:f8:5c:15:ed:
15:27:2b:5e:ea:9d:1d:c7:dc:45:8b:75:c1:c2:00:
d2:d7:aa:c9:97:dc:2b:c9:8d:63:33:a7:fd:85:07:
df:65:3c:82:bf:52:f4:03:07:2c:7c:95:1c:4b:86:
af:f8:ad:02:86:84:14:23:1d:fb:b2:e8:d7:14:1a:
0d:cd:43:49:4c:d7:63:9d:83:6b:7a:8e:1a:67:66:
be:8c:3a:7e:ba:3f:3a:d9:d3:2c:de:9e:be:1e:85:
2b:3f:0e:f8:4a:42:3a:62:da:04:51:dc:02:79:77:
82:34:a9:d8:85:ad:e4:12:fc:28:0f:db:0e:f5:d2:
0e:87:26:a9:80:e9:cc:7d:75:b8:d7:7b:07:13:c6:
cd:82:b0:2b:bc:de:ea:02:34:6e:ea:d8:0f:00:0d:
f0:15:d4:c6:a6:e8:0d:83:8b:b6:93:8c:1c:0c:38:
a6:1d:06:c8:d1:a9:7e:af:f9:5d:5d:32:13:0a:38:
27:87:43:fd:da:cb:eb:28:85:dc:21:0d:78:d2:ed:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D5:31:4E:62:E4:30:72:A7:1F:01:9B:41:61:72:D0:64:6D:9E:72
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:81:da:e8:d4:2f:b2:dd:a8:71:bc:9b:f8:8f:0a:4f:9d:9c:
a8:e3:33:95:a8:66:33:5f:da:08:38:40:a5:04:f2:01:f2:8a:
7e:f7:98:f0:4f:8f:d0:2e:6a:bd:45:73:dc:20:f1:d5:4d:7e:
81:fa:19:29:88:92:ca:ab:91:28:77:d5:1e:54:dc:b5:a2:ed:
ac:45:9b:c1:cf:50:7e:fa:b4:dc:67:d3:a1:1c:34:1b:f7:33:
c3:be:5f:55:94:4a:66:f0:60:23:39:3c:c8:2c:12:5a:a3:31:
96:55:76:7c:2b:e9:67:a8:e4:1e:be:f2:af:f3:14:c9:99:cd:
59:27:20:92:c2:46:6a:56:2f:ba:07:81:c5:fa:89:84:1b:2a:
0e:2c:54:cb:72:59:06:86:9d:97:f2:f9:1a:45:10:6b:2d:d1:
37:52:93:c2:8a:ac:16:79:c1:4d:00:93:9b:8c:d9:a4:73:32:
31:14:a0:f4:da:78:55:74:e5:38:8f:67:84:69:31:6a:39:5c:
50:a2:73:71:4e:0b:e0:f5:e4:fb:29:e8:b7:76:2a:36:d6:32:
e6:1d:2b:83:5c:fd:d3:13:e9:03:00:d6:94:72:a7:24:03:11:
de:10:eb:06:67:86:ca:46:8d:f2:52:72:e6:06:e7:96:a0:4f:
7c:37:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:19 2026 by rpki-client