Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: d+8/UgXuxrKopt6UKJI4IxBGshW1KEUr+1DkX7q/7/s=
Subject key identifier: C1:8E:24:10:D6:07:45:41:02:E3:7C:D5:05:91:02:4D:79:CC:22:74
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 019DD05134F5F2C91A1E52E401DED4E65BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 121C
Signing time: Mon 27 Apr 2026 19:01:16 +0000
Manifest this update: Mon 27 Apr 2026 19:01:16 +0000
Manifest next update: Tue 28 Apr 2026 19:01:16 +0000
Files and hashes: 1: 3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa (hash: gAnkb8zd3PHjDZTfC8dT4Ka5LoLCtOrff/CEiB269iI=)
2: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (hash: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A=)
3: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (hash: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: 8ISZKvNRzxqdY7hgq1BTmtQE6+u9wt1tN2F4ZEbv+Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:34:f5:f2:c9:1a:1e:52:e4:01:de:d4:e6:5b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Apr 27 19:01:16 2026 GMT
Not After : Apr 28 19:01:16 2026 GMT
Subject: CN=c18e2410d607454102e37cd50591024d79cc2274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:3d:61:bf:06:49:9a:08:75:09:5f:91:ff:
d3:fa:78:0a:38:64:37:9b:08:6f:74:b1:f7:18:f1:
ed:d2:41:f8:6c:fc:c9:59:bf:1b:83:76:d0:50:b2:
93:c2:03:76:6b:a7:3f:cc:e1:fe:64:19:b7:9d:75:
27:eb:1e:dc:51:5f:8a:96:24:1c:6a:c7:cf:ed:19:
a9:6c:6c:03:4c:a8:50:ad:cd:25:01:73:f1:52:e2:
65:c1:59:20:3c:a7:22:e0:4b:2e:7b:bf:45:7f:cc:
1b:31:7c:f4:7a:d9:8e:c2:19:36:e1:23:f7:dc:2d:
ac:74:5a:46:fb:73:de:bd:d3:87:96:97:68:49:8e:
3c:66:87:9a:87:b7:47:5f:4c:fb:cf:59:ba:d1:54:
da:d2:3b:a7:f9:e7:5c:48:4f:4f:2c:e3:97:e7:79:
36:31:d2:5d:6e:c4:08:3d:c5:71:68:0f:5f:3b:c3:
2c:b0:f8:45:5d:e9:bc:d4:fd:f8:72:d1:7e:99:d6:
a1:d5:40:d6:60:53:de:02:d2:25:1a:2b:3f:9f:7e:
59:4c:3e:0a:9d:de:46:dc:2b:3d:f2:a5:8e:00:9a:
d9:ba:8f:ec:d6:08:85:8a:e8:6f:17:59:c5:05:b9:
89:6a:45:98:c3:e7:01:15:c5:8b:ea:05:ac:cb:ed:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:24:10:D6:07:45:41:02:E3:7C:D5:05:91:02:4D:79:CC:22:74
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:da:4b:85:6c:84:84:8e:19:ab:12:16:80:3f:8f:b0:fb:00:
bf:1e:36:e9:10:86:a8:7f:52:96:9d:cd:3e:09:cd:3e:32:89:
6a:dd:28:7c:62:2e:f9:f4:01:55:47:12:33:bf:5c:bd:a0:cd:
a3:82:4b:39:e4:14:0b:31:81:d6:a3:42:6f:04:b8:08:6e:10:
5d:87:b4:ee:bf:c5:0c:2e:f1:30:e6:26:03:00:33:bd:c0:a2:
f9:0b:3b:cc:14:8c:64:08:ee:90:2d:0f:46:bf:d5:bc:2c:d5:
d1:b6:5b:18:b5:da:4c:12:cb:b7:5a:6d:01:45:7b:cf:05:4e:
16:7a:c8:cb:34:7a:ba:13:2f:03:aa:de:bc:3c:8b:1b:8b:94:
2a:24:7f:dc:39:73:4e:c1:37:e6:51:6c:4a:76:0a:27:64:67:
91:1c:02:3d:d1:1b:60:db:a0:bf:32:4a:8a:9f:f4:6e:b5:49:
6a:9b:6b:b7:12:75:b9:cb:9f:18:43:b7:d9:e7:72:68:81:a9:
80:16:75:c1:66:69:95:e3:c1:9d:36:1d:8b:54:46:18:b1:4c:
d2:69:df:5a:37:c1:c6:03:f7:14:98:b9:2e:0f:52:82:64:75:
67:eb:ab:2c:a4:05:7d:37:3f:e2:56:9e:3a:63:5f:93:7d:ad:
d2:13:fe:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:40 2026 by rpki-client