Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: dCGsde7SKCK99j5nSibnVgBpJdFnZMVZgjoVlgAuqr4=
Subject key identifier: CF:4E:55:F1:5B:7A:AC:3E:B1:33:BB:8B:3D:D4:37:54:02:56:77:38
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019D9A06DC55C83E7DE2CFD33A9E90CCAA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 05F3
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: 1UdGf4aYz2Ue4V0Bx4+Eg6+tHdPnv0Wrpl7OmHDKm+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:dc:55:c8:3e:7d:e2:cf:d3:3a:9e:90:cc:aa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=cf4e55f15b7aac3eb133bb8b3dd4375402567738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:e0:8c:59:52:1d:42:3b:53:e1:03:67:d4:
d5:6d:57:6b:21:b0:1c:7f:0e:bf:90:b8:f1:8c:a2:
e8:ae:02:7c:4a:31:f0:02:88:2b:f9:7a:ed:69:78:
a3:8b:b1:3d:d2:93:0f:ea:4a:06:51:6b:de:37:d9:
b8:0c:a7:7f:14:4c:ec:f9:dd:be:51:8b:0b:f9:2b:
60:cc:95:b9:9d:72:d8:32:88:a8:bc:06:a7:1c:91:
18:80:5e:85:1f:c8:f4:c0:d5:71:b7:08:42:9e:03:
bf:e0:ae:2c:ce:87:d9:4a:52:ab:02:46:29:9b:9d:
02:03:5f:de:56:f8:da:8b:0c:e9:0b:cc:af:87:02:
9d:c1:6e:1b:1c:06:24:93:11:d5:7f:83:8c:0d:58:
90:ea:62:e0:28:a2:fa:fb:ba:ef:ee:8f:bd:3a:ef:
0c:f1:bb:50:37:ac:25:db:2a:08:35:b9:ba:9a:50:
93:5a:f2:f7:2b:c6:29:b0:f9:c9:e4:e5:e6:ff:1d:
2c:bd:64:dd:0b:2c:05:08:e8:6d:37:1c:33:7f:33:
95:0e:4d:5e:b0:2b:b9:bd:df:d8:08:2f:ef:64:01:
08:a8:d1:e9:8b:f7:4c:34:64:2b:6d:e5:38:7d:33:
70:ff:2d:8a:74:10:f2:3c:39:d7:18:73:4f:5b:47:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:55:F1:5B:7A:AC:3E:B1:33:BB:8B:3D:D4:37:54:02:56:77:38
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:17:3a:38:11:b9:ef:37:22:31:a7:fd:3c:b0:78:3f:26:
78:96:bc:dd:2f:c5:a9:30:5e:46:b8:ee:e5:88:49:7e:58:d0:
31:d5:2a:a8:6e:f6:46:18:a3:90:bb:ac:5e:5a:ce:2c:c6:45:
d2:db:fc:7d:a2:92:78:5c:4c:46:15:19:2e:cd:1a:96:23:93:
b6:9f:0b:1e:c2:a5:75:8f:04:23:36:ee:3f:76:63:27:eb:0a:
8f:8d:28:42:8b:6e:6a:87:bf:b6:1a:54:e4:7a:5e:c8:f5:d8:
9f:cb:89:94:af:b8:a9:3e:6f:bf:66:6f:47:86:a8:3f:36:7c:
90:80:00:28:0c:2a:90:71:7b:0e:bd:a1:d7:01:b1:f4:e9:55:
e9:0d:8c:7e:2b:26:1a:25:dc:9b:93:b6:ad:ca:3d:e8:d5:b1:
7c:11:31:bc:ae:64:56:d2:6d:65:52:4e:72:d6:2b:78:bb:92:
2b:14:9b:60:a3:b4:35:7f:98:b3:6f:21:d9:0e:38:f3:dd:40:
88:86:58:4d:8a:bf:3d:2a:07:e5:14:48:fd:54:54:78:4b:ac:
dc:65:1f:23:26:bb:dc:59:7b:ea:cd:97:7a:24:1f:a0:1c:84:
25:1e:2c:1c:83:d1:91:3f:53:b7:c0:b3:99:41:f6:cd:15:b2:
a1:ae:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:03 2026 by rpki-client