Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: DebsHoWmeMP6Ycee6KNQ4PDb0Qcj9beZHy5WGudR3AA=
Subject key identifier: 58:9C:C9:62:46:C3:F5:C8:45:80:AA:40:63:EF:51:99:83:08:57:FE
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019DD163BDB36BC757DBE5056E52488DCA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 18DE
Signing time: Tue 28 Apr 2026 00:01:07 +0000
Manifest this update: Tue 28 Apr 2026 00:01:07 +0000
Manifest next update: Wed 29 Apr 2026 00:01:07 +0000
Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: ObwPrdAL1NV4XIyWArHY4cLgA712xPkeUNbEbeuPIVo=)
2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:bd:b3:6b:c7:57:db:e5:05:6e:52:48:8d:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Apr 28 00:01:07 2026 GMT
Not After : Apr 29 00:01:07 2026 GMT
Subject: CN=589cc96246c3f5c84580aa4063ef5199830857fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:c0:93:b4:5c:59:5b:21:a3:f5:b2:aa:3d:
15:1f:e6:2e:3e:ad:a6:26:49:99:7f:2d:12:03:12:
26:44:f4:57:8f:52:7e:08:0d:f3:0e:1e:05:74:82:
c6:f0:6f:56:bc:c4:bf:34:0c:83:2c:63:55:5c:ee:
54:c1:ac:38:81:47:c2:b4:64:d8:16:7b:ac:e7:6d:
66:43:18:6b:c6:4e:1f:66:8f:40:88:84:96:49:b7:
76:1e:f6:dd:c5:f2:23:77:01:a7:c1:cd:36:9e:ab:
a2:65:d6:26:e2:7b:eb:ec:09:2d:19:ee:12:1a:18:
aa:e3:44:4e:12:8b:c8:4d:88:d4:66:3d:29:12:ae:
8c:db:50:88:8f:b6:1c:77:ac:23:26:c8:39:4c:71:
5f:e5:20:f0:37:47:90:7f:44:84:54:fd:ca:5e:4d:
e8:a0:56:50:0a:a9:11:4d:47:e8:16:f5:53:26:84:
3e:41:eb:b6:2d:f1:2c:78:a8:0e:f2:8e:6b:84:81:
3e:6b:c5:3e:f5:9e:e6:5c:fd:91:56:55:2c:1e:f7:
c1:e9:eb:c1:18:4c:10:dd:e3:e7:f7:c7:1b:ff:21:
cb:3c:f4:a5:d3:0d:c8:d0:92:02:28:c7:1a:94:4f:
bc:6c:04:3d:0a:46:20:8d:9a:4e:fd:04:be:5d:75:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:C9:62:46:C3:F5:C8:45:80:AA:40:63:EF:51:99:83:08:57:FE
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:42:8a:22:17:54:10:cc:fb:26:71:c3:95:71:7d:43:77:13:
e7:55:18:88:43:ad:58:4c:71:20:b2:e7:6a:95:1a:65:5c:13:
21:5f:9a:d7:5a:1c:1f:e4:c4:30:74:e3:92:4f:bc:af:73:68:
a0:50:76:e6:a0:9d:1f:d9:5b:18:61:6a:3d:41:a9:9b:a7:01:
55:59:44:2a:19:6c:36:13:df:8a:d2:67:a4:10:a1:86:94:95:
9b:b1:92:85:23:40:aa:63:07:77:6a:d1:e1:12:7e:a1:10:73:
e1:c4:07:8a:7c:52:84:aa:2f:8b:2e:1c:83:47:81:43:c0:b1:
a8:9e:c0:4f:44:4f:b7:dd:05:5a:70:15:38:5c:c6:41:04:ee:
fa:b4:f8:d5:f0:d1:8e:3a:f1:79:a9:76:45:9f:8b:af:d0:51:
6e:50:28:c5:09:6c:34:f7:d9:59:40:0b:ed:40:38:fe:69:cd:
83:a9:4a:5e:83:32:e8:63:95:1a:96:70:64:81:1d:6a:12:5d:
19:9d:58:63:5b:14:a0:1f:d9:71:19:73:28:1d:11:77:6e:42:
10:c9:87:e2:38:f8:09:a5:da:ac:33:0d:1f:12:d5:4a:13:77:
b1:2c:11:6f:e4:3b:10:ab:d5:dc:5a:3b:a2:76:20:39:fd:32:
f4:98:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:21:29 2026 by rpki-client