Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: cZz+WJUhZlxWVfU1Tq9y0/LLW217JXMVLnFgW9qf2NI=
Subject key identifier: 67:DB:1B:F0:DE:96:4A:74:8A:EE:50:DF:B5:22:15:AB:25:57:65:45
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019DCE62F1F4B1875001D2A59DD77D71FA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 10:01:24 +0000
Manifest this update: Mon 27 Apr 2026 10:01:24 +0000
Manifest next update: Tue 28 Apr 2026 10:01:24 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 9DFfv+/mURvNvFl1otBpVrjXo/NCK0WAsfia6lRHrWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:f1:f4:b1:87:50:01:d2:a5:9d:d7:7d:71:fa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Apr 27 10:01:24 2026 GMT
Not After : Apr 28 10:01:24 2026 GMT
Subject: CN=67db1bf0de964a748aee50dfb52215ab25576545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:df:2f:10:36:f6:82:0f:27:ba:35:be:15:
97:92:9a:0f:cb:74:99:53:d2:c2:e9:90:e1:be:10:
de:9b:79:30:77:31:c0:f0:3e:df:8b:54:67:28:bd:
4d:c8:7d:eb:77:9e:91:ba:85:9f:ac:3a:73:59:99:
de:20:db:01:44:80:8c:61:f1:10:52:3b:e0:4a:02:
d6:94:18:3a:a6:ad:b9:4e:cc:b3:56:ba:9e:ed:90:
ca:8b:33:04:87:61:e5:08:4c:22:dd:fe:35:3e:e9:
27:a1:65:d3:c9:54:1b:69:fb:e2:26:ad:e7:d3:1c:
5a:bf:58:f8:b4:04:fc:a9:26:2f:1b:72:2c:56:e0:
7a:d0:01:29:62:7c:54:02:0e:a0:52:ed:0e:34:c3:
8d:6d:d9:79:b0:c0:1f:9a:56:0d:26:7c:42:13:3c:
fa:e2:56:e5:6f:f0:3a:14:cd:75:67:a4:f3:a4:ad:
3c:8f:cb:e2:aa:d7:73:ad:4f:64:a0:64:2f:8f:e2:
c7:f3:bd:21:be:b4:d9:a1:40:ab:13:2f:b3:3c:de:
bd:7f:62:7a:32:0f:68:e4:7e:b4:b7:ca:be:eb:c7:
6f:e5:1e:73:fd:63:4b:4a:82:6d:3d:28:ca:95:11:
e4:b2:04:3d:b6:6d:61:ab:c3:5c:a6:3a:d3:63:33:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DB:1B:F0:DE:96:4A:74:8A:EE:50:DF:B5:22:15:AB:25:57:65:45
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:99:dd:a7:ce:d7:d4:aa:b8:56:ad:be:c2:a0:2c:03:c2:6d:
2c:4a:d0:8d:c3:7a:3f:6a:ea:63:79:27:b8:01:ca:9d:1c:30:
05:22:6e:c4:e6:74:51:fe:92:2d:5f:95:7c:2f:4e:dd:0e:36:
76:97:fc:dc:eb:0b:cc:84:0f:ac:28:04:88:9f:e3:0c:a1:1e:
7c:55:37:23:a1:06:4f:a9:d8:3b:62:d3:12:f6:62:c3:41:e1:
dd:2c:b0:c1:94:94:20:e8:03:d3:3a:1e:ba:7e:de:4c:e1:16:
97:10:65:14:e3:8d:25:35:fe:3b:3c:28:1d:c4:dc:de:13:3c:
fd:ee:b1:ec:87:d3:c4:e9:2b:58:c5:4b:54:4a:81:e4:af:6a:
91:af:2b:6d:67:88:99:93:e5:e9:ac:88:af:87:8a:09:77:e9:
cc:5b:b1:ff:cb:d3:0e:01:8e:01:fc:f1:5c:3f:4a:59:83:68:
3b:18:b1:3c:14:d3:c3:49:bf:ba:89:ee:9d:dc:62:8f:d1:99:
35:d5:ef:d8:26:68:a6:25:05:d8:78:7f:d3:e2:6b:6a:b0:f9:
69:a3:f3:33:71:f7:c8:4b:f6:92:fc:9c:6e:07:bb:7f:22:7d:
07:8c:bb:da:01:b5:1c:ba:00:25:6b:6c:76:dd:b7:6d:70:96:
a3:be:2d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYvH0sYdQAdKlndd9cfqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjYwNDI3MTAwMTI0WhcNMjYwNDI4MTAwMTI0WjAzMTEwLwYDVQQD
Eyg2N2RiMWJmMGRlOTY0YTc0OGFlZTUwZGZiNTIyMTVhYjI1NTc2NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDXfLxA29oIPJ7o1vhWXkpoPy3SZ
U9LC6ZDhvhDem3kwdzHA8D7fi1RnKL1NyH3rd56RuoWfrDpzWZneINsBRICMYfEQ
UjvgSgLWlBg6pq25TsyzVrqe7ZDKizMEh2HlCEwi3f41PuknoWXTyVQbafviJq3n
0xxav1j4tAT8qSYvG3IsVuB60AEpYnxUAg6gUu0ONMONbdl5sMAfmlYNJnxCEzz6
4lblb/A6FM11Z6TzpK08j8viqtdzrU9koGQvj+LH870hvrTZoUCrEy+zPN69f2J6
Mg9o5H60t8q+68dv5R5z/WNLSoJtPSjKlRHksgQ9tm1hq8NcpjrTYzMbFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfbG/Delkp0iu5Q37UiFaslV2VFMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZndp87X
1Kq4Vq2+wqAsA8JtLErQjcN6P2rqY3knuAHKnRwwBSJuxOZ0Uf6SLV+VfC9O3Q42
dpf83OsLzIQPrCgEiJ/jDKEefFU3I6EGT6nYO2LTEvZiw0Hh3SywwZSUIOgD0zoe
un7eTOEWlxBlFOONJTX+OzwoHcTc3hM8/e6x7IfTxOkrWMVLVEqB5K9qka8rbWeI
mZPl6ayIr4eKCXfpzFux/8vTDgGOAfzxXD9KWYNoOxixPBTTw0m/uonundxij9GZ
NdXv2CZopiUF2Hh/0+JrarD5aaPzM3H3yEv2kvycbge7fyJ9B4y72gG1HLoAJWts
dt23bXCWo74t3A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:14 2026 by rpki-client