Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: eda+dproDNcDX6i65iBo0WhzLUXFsUhNf5i7TanB5+w=
Subject key identifier: 28:01:9E:85:A0:02:37:FC:5B:47:28:3F:7A:D9:86:3E:3F:6E:0E:BA
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 019D63F4A3D358457BB5B3D9A747E24FDD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 09EA
Signing time: Mon 06 Apr 2026 18:01:10 +0000
Manifest this update: Mon 06 Apr 2026 18:01:10 +0000
Manifest next update: Tue 07 Apr 2026 18:01:10 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: uyxmq1KijTGstn1Ky9RyUvYdE7PxfeycWcXAvXvHBS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:f4:a3:d3:58:45:7b:b5:b3:d9:a7:47:e2:4f:dd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Apr 6 18:01:10 2026 GMT
Not After : Apr 7 18:01:10 2026 GMT
Subject: CN=28019e85a00237fc5b47283f7ad9863e3f6e0eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:2f:f7:47:79:d2:06:98:bf:a1:c2:d4:be:
c0:f2:0e:d4:e0:47:34:d2:04:2b:1a:69:84:28:52:
d3:5c:c4:62:1e:dc:0f:0e:4e:7a:53:09:15:3c:f4:
4b:55:df:81:39:20:06:3b:b4:aa:a7:a3:e6:88:6f:
01:fb:73:76:58:72:88:57:1a:db:fa:8a:79:59:8e:
2c:f5:7f:52:0c:56:c5:e2:51:19:60:37:30:68:77:
80:2d:7f:ca:f9:60:69:ef:f2:61:14:f6:51:2b:b5:
bf:de:2f:18:ff:3d:10:b3:c4:e0:5e:28:b9:c8:e0:
78:1a:21:86:f1:f4:ad:fb:bc:7e:d0:89:44:1e:5c:
c6:81:72:6a:28:fe:ec:a3:1e:bd:aa:54:96:ba:53:
9d:62:10:ee:39:31:69:1b:8f:fe:38:2a:d5:0f:ea:
27:e2:07:74:42:ac:89:4c:bd:bc:6f:4d:0b:97:5f:
d8:d6:8e:d6:5d:88:12:d7:99:64:5c:36:98:7e:85:
b3:e5:ad:4d:84:5f:5a:b6:7c:c7:86:d5:4f:86:34:
29:81:0a:8b:4d:af:86:f0:5c:bf:db:62:bd:67:74:
10:db:fd:a7:f2:97:e8:51:ae:34:f9:db:04:bc:aa:
2b:fa:be:ed:21:94:81:04:93:e3:6d:e0:ef:0d:10:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:9E:85:A0:02:37:FC:5B:47:28:3F:7A:D9:86:3E:3F:6E:0E:BA
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:35:0e:b9:0d:df:08:6b:dc:70:7d:2e:67:39:95:7f:a3:4a:
07:4a:52:65:14:24:16:44:a6:16:69:ea:15:ef:d2:e0:a8:2f:
91:10:e3:ca:eb:b0:ba:e9:03:6a:0f:64:fb:86:60:f6:69:e0:
03:64:9a:f2:3c:24:d2:a2:f7:04:4d:40:40:65:d4:13:6f:40:
15:ab:45:bf:b1:c0:a6:27:f1:b5:0c:bf:f6:8d:85:c4:3f:09:
3c:94:1e:0c:f0:fa:50:a5:13:67:89:7a:96:e2:2a:3f:63:85:
8a:58:6e:00:25:c2:be:75:54:1e:c9:24:45:fb:61:3d:ea:3b:
2f:46:6d:27:af:ad:2e:58:5b:97:95:f4:36:76:ef:7e:1a:63:
88:71:20:09:3c:e4:ea:37:62:40:04:d1:89:7b:c3:db:01:2f:
bb:fc:9d:1a:e2:64:4d:26:ce:a3:30:0e:ad:66:50:68:ad:7c:
6d:0d:ed:f8:6f:c5:1b:2c:06:3f:58:b7:c9:16:a1:73:1f:04:
87:75:c2:0b:f0:e0:e8:a5:22:7a:5a:73:36:03:79:d5:60:0b:
24:a5:58:07:d5:62:f9:d8:e2:9c:b8:62:25:21:c5:9d:18:15:
35:b0:68:fa:47:2f:3d:a9:73:ea:64:fe:86:51:7b:77:d2:44:
e7:ca:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 21:51:58 2026 by rpki-client