Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: 603uUEw5G2T3cI3/f1oXPjQ1OVv8LtH7QpBATp+gNuo=
Subject key identifier: 8B:11:B4:54:F1:95:94:87:1B:78:3C:4A:40:1A:BD:81:E4:AE:0D:7D
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 019DB20FDE33275970FD7CC23E6F76402D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 1561
Signing time: Tue 21 Apr 2026 22:01:17 +0000
Manifest this update: Tue 21 Apr 2026 22:01:17 +0000
Manifest next update: Wed 22 Apr 2026 22:01:17 +0000
Files and hashes: 1: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (hash: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI=)
2: adEMxHyupcifqh018PDSo4aZYRU.roa (hash: 2ejGSNPMnDgazqPRclsg72M/nQyRhAE01Ub1Oiox0Y0=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: KetX78YsUKKJOyWey0RCiAkr2Srm2N9jfmtXkTKmI24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:de:33:27:59:70:fd:7c:c2:3e:6f:76:40:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Apr 21 22:01:17 2026 GMT
Not After : Apr 22 22:01:17 2026 GMT
Subject: CN=8b11b454f19594871b783c4a401abd81e4ae0d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:f2:aa:5b:35:b1:6f:50:73:3c:73:a9:e6:
b9:9d:33:42:4e:3a:e7:d1:4e:92:cd:29:f1:33:59:
c7:35:b6:55:81:51:ac:32:55:28:2b:14:31:c7:4a:
9a:2e:8b:9d:f0:71:6a:13:e0:33:fb:be:bd:55:ec:
80:5b:4c:13:cb:25:64:91:49:32:0a:38:ae:d2:d5:
97:c4:48:6a:f9:7a:c5:b4:42:07:83:f2:59:86:2a:
90:8c:00:69:cd:2e:51:58:82:ab:4c:55:94:24:6e:
6f:50:14:ed:e3:a4:5e:09:49:7e:7a:a1:2b:97:84:
24:b9:4c:ba:5d:76:01:0c:c8:c6:bc:c3:a6:c1:97:
11:94:27:65:49:f3:bb:cc:91:a7:a8:98:fd:12:fb:
99:92:46:dc:0f:09:37:97:bc:db:9f:4f:b6:a1:b2:
3f:9c:b9:90:15:f2:b5:66:50:56:40:80:89:28:aa:
a6:c6:a2:0a:37:84:ae:eb:82:dc:7d:48:d6:e3:10:
ad:92:17:0a:cb:22:51:54:13:82:b5:4e:10:16:5e:
f3:ad:70:74:15:ce:e2:c3:b3:63:60:fd:19:7f:34:
7c:1a:ab:c8:51:df:24:ae:17:b2:35:41:19:e6:03:
39:5f:17:dc:de:68:b8:35:eb:f8:85:96:ac:41:4b:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:11:B4:54:F1:95:94:87:1B:78:3C:4A:40:1A:BD:81:E4:AE:0D:7D
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:78:31:07:56:39:e6:fc:68:d1:b3:a9:5c:3d:9e:19:e0:
3d:ae:cd:2f:0e:89:97:b0:2f:89:92:33:6f:ec:82:83:89:e2:
53:bc:69:43:7b:63:76:21:cd:54:b2:b1:e5:72:33:22:7d:2c:
7a:91:9e:2d:86:ee:cc:59:ed:af:0f:fa:7d:2b:aa:3a:67:22:
8c:3c:a1:a1:d8:07:20:3d:b6:95:9b:cb:ec:4b:19:eb:1c:78:
fc:48:c9:b7:28:6d:38:29:0f:9e:9f:bf:3c:2b:b5:19:16:dc:
9f:5a:d6:22:44:a6:be:b8:e9:5f:17:3d:5c:1c:80:66:df:65:
d1:aa:5e:9c:3f:b4:f0:ca:62:56:07:cb:9f:7f:fe:c7:ab:f0:
95:3b:b5:63:ca:27:c8:cc:88:17:ec:69:18:3d:37:cc:04:ef:
d2:d3:91:78:8d:09:65:e6:0f:ba:bf:14:eb:b7:74:3c:40:11:
a3:2b:dc:40:45:f6:ae:0f:ae:35:7b:f3:3a:f9:f3:22:cc:8a:
25:5e:64:e1:bf:09:86:61:da:16:6d:c6:73:d3:51:0d:90:5d:
6a:17:3a:05:c9:bb:29:08:ea:a4:c3:1d:ba:f6:27:7c:68:ea:
67:6a:0f:5e:b4:5b:d6:0f:3e:37:9a:50:bf:24:28:e5:24:56:
f1:5e:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:10:38 2026 by rpki-client