Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: KDXAiO0suLl9hTur5E1+4GcFI7ko92xF4OCaHsPHSMQ=
Subject key identifier: 1A:17:44:7B:AA:63:36:E3:50:CD:DA:05:F1:D2:9D:1C:57:94:23:9D
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 019DB3FDB6F0C5DD614CECBD66C82E741142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 0834
Signing time: Wed 22 Apr 2026 07:00:41 +0000
Manifest this update: Wed 22 Apr 2026 07:00:41 +0000
Manifest next update: Thu 23 Apr 2026 07:00:41 +0000
Files and hashes: 1: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: UZk4SGCtFmaPJu6lov3jGu1mfPFKt47qmJbN+aWAbpk=)
2: pCg_IO1cPrzNc2xa1m7otiwxh4Y.roa (hash: xhDhbtSEarX85N5AGFHu5oduKKvgeHiQNe7PQ5nfYFQ=)
3: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (hash: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:fd:b6:f0:c5:dd:61:4c:ec:bd:66:c8:2e:74:11:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Apr 22 07:00:41 2026 GMT
Not After : Apr 23 07:00:41 2026 GMT
Subject: CN=1a17447baa6336e350cdda05f1d29d1c5794239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:f3:0a:d4:69:95:52:ac:48:b8:5f:be:43:
da:ad:8f:f6:14:58:ff:80:35:4c:93:31:8a:89:da:
fe:b4:8a:58:42:31:19:99:28:a0:5d:2f:78:00:1d:
05:f3:cd:14:fe:34:d7:fa:b2:77:e4:e5:a5:bb:cc:
b8:26:9b:dd:4e:8d:5a:23:c1:71:62:38:bc:fc:9a:
d4:bf:d9:ee:39:a4:ce:ee:cd:ac:53:8f:a0:e0:3e:
c3:19:30:94:90:9c:7d:7a:9e:39:14:bd:3d:fe:f4:
b7:98:a2:8d:80:77:fb:0a:aa:0b:0c:06:ac:94:56:
79:03:a0:9c:14:ce:64:4a:47:6a:92:f7:4c:15:07:
05:dd:f1:51:15:b3:e4:b5:2f:79:b5:d7:24:b6:c1:
ee:c8:d5:c0:2a:51:d4:f5:88:64:95:bd:86:a7:10:
e2:33:66:b9:b8:fa:1a:17:b5:ed:78:3c:01:35:ba:
b6:46:0c:72:f5:9d:16:72:62:cc:7c:f6:3a:2c:e1:
72:c8:fa:0d:fa:04:33:aa:ea:58:39:97:93:a5:d3:
d4:1d:71:05:b3:07:71:58:06:9b:ab:20:c5:9f:85:
01:f1:45:55:99:7f:60:42:d4:68:f4:45:b5:be:1d:
13:c6:a9:48:09:14:10:5b:65:fb:39:31:f6:05:6e:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:44:7B:AA:63:36:E3:50:CD:DA:05:F1:D2:9D:1C:57:94:23:9D
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:76:66:32:fc:78:eb:be:f2:7e:6e:45:86:69:1f:15:5b:
e0:8d:11:2d:f1:41:7d:73:46:4a:70:c4:0c:05:32:b5:68:9b:
be:45:05:8d:7b:45:f3:02:f9:03:1e:07:69:98:cb:a0:1a:a0:
d6:37:ac:1b:3b:04:4f:d8:1d:8f:f7:a9:e4:66:b5:eb:0d:3f:
da:8a:fb:76:07:b8:35:6d:c2:15:c5:1c:4b:0b:4e:33:ce:c8:
bc:d4:a0:50:ef:c3:41:11:4b:0f:03:e2:58:c2:0e:4f:99:0a:
0b:cd:7b:c7:e2:9a:ea:a0:f5:3d:05:b8:23:bf:95:ad:bb:30:
0a:5c:9b:79:5a:73:e3:12:59:47:6c:1e:8f:78:54:a3:f5:f8:
98:f3:56:9a:50:0a:6b:54:6e:a1:d0:72:cf:73:49:08:b1:e4:
cd:fd:3f:f1:be:72:0e:ab:75:1f:e2:9a:41:f2:6c:91:b4:45:
31:33:e9:19:f3:03:97:8a:1c:8d:aa:96:1e:c6:bb:86:94:1d:
86:a7:e3:ff:18:ae:e8:0a:25:a7:5d:c3:80:07:57:3b:aa:de:
96:04:7f:7c:a5:07:6e:35:21:ba:4a:db:55:07:bf:bf:16:d3:
f3:32:09:bf:30:ab:66:8a:c0:33:22:64:b7:b9:16:6c:d9:a9:
31:17:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:55 2026 by rpki-client