Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
File: Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json)
Hash identifier: 5GPKs3KOOK75sRCfjbcizRT2kAc1oJ4uRje8aO8bt68=
Subject key identifier: 95:D7:02:FF:8B:A4:C2:18:24:70:4C:8A:71:16:73:8F:E0:7E:FE:C3
Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
Certificate issuer: /CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Certificate serial: 019DCD502256DAC8951DDAF75096D7ED32A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 05:01:13 +0000
Manifest this update: Mon 27 Apr 2026 05:01:13 +0000
Manifest next update: Tue 28 Apr 2026 05:01:13 +0000
Files and hashes: 1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: gjEDghp37pFxE04NywfDQZvYWUkzG4h/kqs+IdiWkPg=)
2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:22:56:da:c8:95:1d:da:f7:50:96:d7:ed:32:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Validity
Not Before: Apr 27 05:01:13 2026 GMT
Not After : Apr 28 05:01:13 2026 GMT
Subject: CN=95d702ff8ba4c21824704c8a7116738fe07efec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:c6:10:62:4c:a2:4c:53:66:c5:6f:d0:93:
6b:34:82:89:de:44:3a:06:8a:bc:60:83:34:4b:07:
d5:36:0c:15:a2:6f:e5:57:c3:c5:ae:f7:5d:8d:cd:
ed:9a:18:fa:3c:93:34:ce:b7:65:ea:9f:5f:af:7d:
d3:3c:ff:e2:d0:a8:94:39:c7:de:d0:44:4a:b8:66:
ee:e4:22:6a:11:c0:ac:a2:8d:3b:e0:d1:1a:da:9b:
94:3d:94:ae:25:04:64:25:1f:70:09:d4:74:e0:1a:
7c:d2:ec:02:1b:06:92:f7:60:d6:b1:cb:73:b0:35:
01:64:a4:c3:70:44:1e:c8:f3:80:30:56:f8:85:06:
83:d5:8a:f3:16:9a:07:8a:6b:2e:00:9f:fe:25:8f:
cb:4c:d5:92:ab:ff:dd:b3:57:51:91:0d:91:48:ef:
88:9e:97:82:cc:8e:09:2b:3d:bb:0d:28:67:aa:06:
c9:a8:85:22:58:9d:4a:b6:8b:e7:14:8a:1b:82:89:
73:90:63:52:15:82:5f:5d:e8:1b:d8:62:8c:2e:49:
b1:c9:1c:4a:13:d5:35:3a:99:27:0a:fa:30:cb:04:
19:a8:c1:1d:a0:5e:39:b4:93:52:eb:d5:54:5e:5d:
40:10:4b:2b:bf:d2:dd:b3:92:a2:03:89:c8:35:99:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:02:FF:8B:A4:C2:18:24:70:4C:8A:71:16:73:8F:E0:7E:FE:C3
X509v3 Authority Key Identifier:
keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fb:59:d6:66:05:cb:2a:12:97:d9:81:df:e5:8f:27:35:6f:
4a:3e:06:db:7a:2a:ca:90:97:b7:69:b6:a4:5a:b2:c2:10:e3:
22:7e:15:d5:13:b6:82:d5:cd:68:60:91:c8:9a:8e:97:e3:c7:
e4:58:9b:7a:24:11:ca:9e:5e:24:da:94:a9:24:aa:d4:35:db:
83:36:39:7c:3d:65:2d:1b:21:1d:1e:3c:1e:4d:e8:ff:d0:17:
ae:76:81:c2:11:f1:bf:e0:69:3e:ea:ff:63:5e:7c:0a:f1:05:
fe:6c:1c:e5:24:dc:b7:0c:ae:3b:69:3a:ff:1e:8b:80:d0:14:
12:c6:5d:be:94:b5:9f:72:9a:30:a5:fb:e8:2b:98:b4:d2:52:
94:e3:ee:41:d2:a3:a0:1b:05:f6:bf:f5:73:28:57:21:45:89:
9a:15:6d:d3:cc:58:ba:8d:30:3d:b1:7f:96:8d:01:cc:14:26:
d3:10:68:47:e5:7d:df:dd:3f:0f:15:b0:9e:44:27:37:0f:5c:
7a:aa:b1:e6:d5:80:ef:e2:17:12:cd:f4:f7:17:86:8c:bf:82:
54:58:ba:f4:fb:0f:a9:f7:86:16:34:a4:c3:4f:b7:9e:d1:f1:
2d:89:91:1d:59:b0:46:95:8c:2f:0f:d1:bc:d7:f5:10:a7:cc:
d4:4b:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:10 2026 by rpki-client