Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: e5hw7NqnjYaiY1mNhjI2x6jiemOOlu11PAGEF+m09+0=
Subject key identifier: F1:C5:CE:06:83:BB:8E:DA:A8:9E:F6:1C:BA:3F:CA:7A:21:BE:AB:FA
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 019E4DA15DB761980D7195F0ACC06116D104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0A63
Signing time: Fri 22 May 2026 03:01:21 +0000
Manifest this update: Fri 22 May 2026 03:01:21 +0000
Manifest next update: Sat 23 May 2026 03:01:21 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: sb7NS4RsKfJtOmtO9jG2xELR6pNx0dkjCn6LSx+EuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4d:a1:5d:b7:61:98:0d:71:95:f0:ac:c0:61:16:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: May 22 03:01:21 2026 GMT
Not After : May 23 03:01:21 2026 GMT
Subject: CN=f1c5ce0683bb8edaa89ef61cba3fca7a21beabfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:df:c9:10:19:e2:9f:57:1a:a0:41:0e:cf:
43:26:58:c6:a5:44:bb:4c:02:1d:38:ac:ee:6b:c6:
06:0a:a8:7f:14:d7:e9:b8:f5:b8:53:36:a4:7f:29:
e5:77:ec:6e:da:90:6f:d2:d1:50:6c:f0:fc:87:e0:
aa:2d:ef:7d:92:dd:fb:ce:5b:8c:85:50:d3:72:ff:
73:dc:02:22:91:42:11:48:4c:a4:ae:4c:09:b2:f7:
d4:80:e0:55:c8:b3:02:0c:8f:e6:1b:9e:0d:e8:93:
24:40:c7:76:8c:b0:89:c9:fa:71:24:f4:60:7b:dc:
d7:07:35:7a:d8:a9:57:ba:17:14:db:cd:89:2f:e8:
fb:ea:f1:f6:2e:ec:e1:9c:d9:9d:ea:b5:de:9a:e4:
af:a6:65:4b:b2:6a:bb:de:20:30:97:06:cf:29:39:
21:8d:b4:b7:1e:e1:a9:74:72:d1:fb:3f:ca:bd:63:
00:1d:dd:64:30:79:1f:33:c6:27:d6:1a:3b:d9:8b:
b2:26:a9:e6:c3:05:d0:10:74:10:4d:d2:86:f8:eb:
97:75:99:62:9c:d2:c1:db:30:33:c0:79:21:c4:56:
8e:d8:92:d4:6f:43:6f:1a:7a:ff:59:b3:da:36:1c:
c4:5e:2b:e1:b6:2d:96:c5:3c:46:0a:a2:c6:bc:bb:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:CE:06:83:BB:8E:DA:A8:9E:F6:1C:BA:3F:CA:7A:21:BE:AB:FA
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e9:0d:49:27:09:2f:03:53:5f:db:67:6d:32:fd:21:a6:33:
0f:6e:ae:e9:92:1f:e3:0c:f6:61:05:d3:b7:3c:f8:bf:b7:15:
36:2d:e7:18:26:d2:86:48:fd:52:86:5d:c2:61:b1:5f:20:e9:
00:20:87:19:d9:25:81:41:45:01:d0:cb:6f:71:6b:e8:b5:cd:
d5:5a:ac:fa:4e:e2:5e:dc:ea:72:7f:08:e8:85:03:d3:14:cd:
46:86:80:f4:2f:38:f1:ba:33:aa:a9:51:11:b4:3f:9a:3c:b8:
93:e1:5d:9d:41:7f:50:e3:63:ee:65:82:e9:49:56:35:65:78:
02:20:76:4a:ce:b3:6b:80:59:6d:8a:55:84:64:e8:39:fb:2d:
4a:eb:ab:a1:b9:51:ea:16:63:9e:5f:37:48:cc:f4:c6:80:c2:
9d:f3:91:af:35:d6:41:2d:d0:a8:44:8b:10:16:27:00:ce:5d:
56:b5:f9:93:10:66:11:ee:91:a1:88:39:03:dc:f6:74:1c:e4:
73:42:37:79:5a:df:5b:a1:57:22:bb:d5:d8:b5:fd:87:4b:d9:
f7:e0:16:53:72:9a:c7:38:da:3f:c4:ae:eb:9d:84:f5:ca:94:
c2:32:42:56:55:a4:af:f2:b9:dc:3b:67:d7:56:1c:65:39:0d:
41:25:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 08:56:43 2026 by rpki-client