Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: yoCkZQ7s+Kl53yCUsXc+3/LoPoyA1WzkXvFnC+Daok8=
Subject key identifier: DF:9E:C9:34:61:93:43:DB:2E:BE:B9:79:52:39:2E:AC:1D:BB:2C:41
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 019D9B19E26CDD0A78FDC046F256A7E605F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 0B8E
Signing time: Fri 17 Apr 2026 11:00:57 +0000
Manifest this update: Fri 17 Apr 2026 11:00:57 +0000
Manifest next update: Sat 18 Apr 2026 11:00:57 +0000
Files and hashes: 1: eObhnSgoClkZSg4OphnzH9Kih4s.roa (hash: suuBBjjjYm5X0ydrhy9hau3hPxlzgCy0q7n74RUKwk4=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: pPbvzRGG+BBlXvMPVkWbHcuf7bDbyNFheWDljr9FbC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e2:6c:dd:0a:78:fd:c0:46:f2:56:a7:e6:05:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Apr 17 11:00:57 2026 GMT
Not After : Apr 18 11:00:57 2026 GMT
Subject: CN=df9ec934619343db2ebeb97952392eac1dbb2c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:9f:a6:7d:b7:49:86:d4:30:e6:fd:1d:a0:
14:75:b3:7d:0a:95:24:c5:1e:39:38:0f:94:1a:ac:
f5:79:9c:27:79:ee:55:b4:be:24:e3:8e:d4:f2:b7:
c2:72:33:a3:44:d8:c3:97:d5:ab:80:a6:c8:e4:e5:
52:08:9b:63:66:5d:a0:5a:57:16:e8:f1:51:d7:29:
6e:a5:2a:3b:a9:ba:c5:d8:f7:29:58:df:09:9b:f5:
9f:17:41:99:5c:39:5e:92:7f:a4:04:43:76:88:90:
5a:a8:e6:b7:39:95:ff:2c:47:f0:ff:03:ce:f6:fa:
f1:cf:20:8a:38:9c:9a:4b:f1:5e:94:59:f1:5c:af:
ca:66:86:98:ab:ab:c5:6e:e8:bb:a9:6d:39:5a:36:
31:d8:f1:96:6a:4a:b4:39:ae:97:26:b0:b8:f0:fe:
e6:92:14:61:69:f5:f5:63:b5:35:fd:29:cc:5c:3a:
43:61:3d:48:f3:86:80:c7:7b:a8:18:5a:35:35:52:
af:05:ff:16:5a:fd:a0:c4:9d:15:bb:94:79:3b:d9:
d5:24:b4:e9:74:4f:cb:7f:2a:7a:22:57:0e:6c:fe:
a3:ee:b3:4f:03:17:3a:88:b8:8a:c8:3a:0e:a4:dd:
89:be:f8:57:28:ca:2d:05:37:e5:e4:9e:27:c9:a0:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:C9:34:61:93:43:DB:2E:BE:B9:79:52:39:2E:AC:1D:BB:2C:41
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:80:5e:2f:4d:1e:ae:a6:c8:cb:a1:40:15:0d:9f:ff:15:14:
eb:a7:ae:55:b4:19:ef:90:16:54:21:c7:b8:c5:7f:f3:6b:1e:
65:11:f7:48:f9:5a:6c:09:35:6e:b5:8d:1a:1d:3a:c0:18:4f:
ca:05:14:e9:58:e5:17:bd:32:35:98:2b:54:30:9c:3a:2d:cd:
fc:64:7e:8f:4e:b9:9f:1f:ba:d5:f3:75:81:ae:50:38:52:56:
6f:2c:46:26:08:b8:6b:38:ff:ed:d3:03:96:73:23:a4:bf:99:
4c:89:15:97:53:5f:8f:00:98:16:a2:d2:a9:2a:e7:a5:1b:46:
a9:dd:40:53:f0:d7:2b:a8:09:6e:42:9b:dd:46:8f:0b:8e:cf:
95:77:45:ae:a2:65:74:64:72:06:01:16:f7:e0:e7:4c:c7:63:
76:bc:67:f7:53:fc:fd:5b:ff:01:7a:42:4f:06:74:11:22:0c:
7c:24:fc:f1:c3:52:9a:d8:d8:ac:3d:de:cd:3f:77:9a:c6:a3:
d5:c7:8c:b8:12:3f:60:da:dd:9c:f1:ef:ed:28:0d:3f:56:34:
ff:75:86:2e:4e:15:3d:9d:35:f7:67:08:1d:89:2c:a3:5b:da:
20:0b:47:d3:4c:ad:56:09:80:61:e3:70:49:f9:61:ea:6a:2a:
e5:b5:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:53 2026 by rpki-client