Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: qRLHtHXsmWkWfwFh0IihYLJlZGNWvRDKFTLHKHhTKZ0=
Subject key identifier: 03:45:1C:0E:33:90:DA:04:D7:7A:64:DC:FA:B7:9E:76:1E:78:D5:4E
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 019DD01A115F3E2C6EDDDA097F9611325AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0FB7
Signing time: Mon 27 Apr 2026 18:01:02 +0000
Manifest this update: Mon 27 Apr 2026 18:01:02 +0000
Manifest next update: Tue 28 Apr 2026 18:01:02 +0000
Files and hashes: 1: 5WdAfePuazyKOqDBol6a24O3XpY.roa (hash: mhrHbQmeUkZKLJUs5FqRvkUEbMJKmKPn0IXdQCttlDY=)
2: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=)
3: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=)
4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: MG01jot9tt8yfCT38QRCBdhtAJqF0NEGge7tslTU9kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:11:5f:3e:2c:6e:dd:da:09:7f:96:11:32:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Apr 27 18:01:02 2026 GMT
Not After : Apr 28 18:01:02 2026 GMT
Subject: CN=03451c0e3390da04d77a64dcfab79e761e78d54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:b6:50:cd:9b:bf:69:3e:00:c5:ac:1d:af:
6c:0a:ca:91:ac:87:86:b7:99:db:8d:77:8a:bc:57:
b8:8a:de:71:2d:bc:dc:7b:3f:a6:16:f8:ac:05:8f:
73:6c:4a:92:e4:67:d2:06:96:cf:81:da:f8:af:90:
d6:f2:6b:a9:61:e0:9d:5e:fa:19:01:e8:21:a0:dd:
95:a9:08:f4:88:59:fd:9d:e2:67:4a:94:3a:d9:0a:
2f:0e:be:e7:84:77:81:a7:31:05:68:6e:e8:d1:ff:
58:b1:ab:b3:17:f8:ac:1b:c7:e2:7c:c6:5c:8f:31:
74:7f:79:e5:3d:9a:e6:46:1b:d5:fa:e6:53:b2:53:
e0:b4:54:74:2d:1d:d7:36:0a:dc:c6:06:52:6c:f8:
43:8d:03:aa:c1:1a:ce:2d:52:2a:39:3b:a5:21:e1:
2a:6e:f4:bc:76:0c:68:38:e1:cb:e9:df:a9:74:44:
9f:da:9b:00:57:de:b7:4f:da:15:19:ba:c4:af:89:
e5:e4:da:53:de:af:cf:be:89:2a:a7:d9:09:92:90:
cc:55:34:32:13:c5:76:91:9a:89:e0:c0:a5:c1:64:
06:a5:80:23:7d:bf:5c:c5:92:71:1b:53:6d:6f:4c:
8a:7c:eb:11:fb:42:cf:e0:b0:bc:29:53:58:1d:04:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:1C:0E:33:90:DA:04:D7:7A:64:DC:FA:B7:9E:76:1E:78:D5:4E
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:05:c5:51:07:35:ce:0a:05:47:6c:25:2e:32:83:6c:cc:6b:
b4:cb:7b:92:59:59:cf:40:88:bb:b8:2f:62:6e:b4:ff:56:96:
bb:d3:e3:c3:31:22:d4:52:4e:38:71:ba:1d:1e:c3:1e:99:66:
26:1c:d5:c5:a3:c8:cb:bb:cd:0a:4f:dc:3f:d5:59:f1:31:3d:
3c:80:f5:43:78:a1:f5:3e:53:96:98:35:d9:a7:6c:7d:cf:9a:
fb:4c:cc:31:10:94:d2:45:52:ab:8b:bf:f0:af:d3:69:63:72:
98:22:77:3d:19:25:ca:37:4a:6b:0d:70:6f:6f:ec:d3:ff:40:
88:db:cd:97:d1:7f:43:c1:13:b4:55:00:ff:61:ba:c0:8b:51:
3e:30:ba:e4:73:4f:38:fc:71:a3:b2:0b:ae:e2:fe:60:04:96:
83:07:42:cd:ed:44:1a:1e:0c:ad:e9:99:9e:bb:bd:d5:50:94:
b2:cd:75:87:7f:83:61:b2:c5:a8:22:00:b2:54:ba:d3:21:bf:
88:ec:3c:72:e0:4d:30:ff:ae:ea:37:c9:42:78:ba:0c:dd:39:
f9:a6:71:17:10:49:0b:fb:0b:b2:84:5f:64:e4:e6:9b:c7:43:
c3:ab:09:81:be:b2:ba:30:d2:0d:e7:48:ea:d4:68:76:62:ba:
b9:6e:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:55:17 2026 by rpki-client