Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: JCn3pCDACfJZHfEkBcI27kT5s8QVBBCEnBZ9XgHhEkU=
Subject key identifier: F0:A4:D1:D4:49:65:56:14:6B:08:A4:08:DB:79:B1:29:EB:27:92:FD
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 019DCF74BC9FBC7C395DF83E842976CEAF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 15:00:27 +0000
Manifest this update: Mon 27 Apr 2026 15:00:27 +0000
Manifest next update: Tue 28 Apr 2026 15:00:27 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: WXt+7kmznqPB+e/WFHkIDAP0a2Dv5l2uQs28m1j7I/A=)
2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:bc:9f:bc:7c:39:5d:f8:3e:84:29:76:ce:af:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Apr 27 15:00:27 2026 GMT
Not After : Apr 28 15:00:27 2026 GMT
Subject: CN=f0a4d1d4496556146b08a408db79b129eb2792fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:1d:d4:5a:dc:93:27:02:47:e5:51:d2:0d:
57:69:9e:6a:a5:dc:8e:6c:7e:23:a1:47:5e:41:83:
36:71:3a:6e:53:7b:30:91:cd:a5:c8:85:68:f9:50:
f2:74:67:4f:71:9a:02:bb:f7:ee:e7:c2:d3:29:25:
ab:b9:d2:d8:e1:44:c5:3a:e1:06:10:94:17:12:f5:
e8:e1:9f:8a:a4:ba:07:e3:a5:c4:7a:7f:9e:57:cc:
cf:df:a3:b9:92:cb:aa:14:85:ba:18:a3:19:45:0d:
48:0e:37:60:74:70:a5:fb:39:27:31:e5:82:25:c8:
4d:e7:94:9d:2c:9c:42:60:ff:02:35:ad:d0:69:1d:
1a:c0:e0:21:bb:bc:f9:a9:52:b7:c1:e3:66:71:64:
39:c6:bf:c6:2c:68:fe:a4:9e:4e:07:c5:a7:4b:6e:
a6:e0:19:cb:38:57:91:9c:d8:00:66:60:9e:90:08:
43:a8:22:7f:df:22:e1:f4:36:ed:72:d7:80:72:46:
f4:cc:56:e8:2d:ce:98:75:c5:e7:d6:53:c0:d7:d2:
02:6d:63:cc:63:6e:fb:10:b2:cf:57:e9:9a:36:31:
ee:9f:a0:92:e4:44:3f:f3:89:69:70:b0:76:7c:7d:
71:7a:8f:b0:c7:26:ec:6a:66:48:b3:8b:a7:ca:68:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:D1:D4:49:65:56:14:6B:08:A4:08:DB:79:B1:29:EB:27:92:FD
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:b1:3d:9d:72:ca:89:48:95:26:60:36:ce:4c:b1:5a:de:
13:51:c7:0b:2f:d9:81:fa:39:ac:53:16:ff:66:27:ea:30:b5:
35:f4:9b:73:e7:56:ba:35:b5:5e:ef:f1:68:bc:d1:36:61:97:
ac:ad:68:da:a2:c5:60:0f:bf:bb:92:e3:45:2d:3a:f5:62:d6:
43:d2:fd:53:ce:ed:90:05:ee:b0:56:3f:52:cc:fb:4c:fe:7e:
ad:e0:84:df:0a:39:b4:8d:c2:30:7a:02:8e:ca:14:de:b4:ea:
eb:89:eb:5c:f3:59:01:1f:b4:99:4b:e9:74:86:02:b0:bb:9c:
d6:45:9c:7f:40:7b:6b:18:08:6b:db:46:42:c7:74:41:f7:a9:
b8:93:2b:0c:85:42:b3:17:c5:31:72:3a:d3:79:79:bd:c8:73:
b1:af:81:b3:f4:d0:08:cc:a3:8f:3c:9d:b3:c9:01:90:24:35:
ec:20:69:8f:c5:06:23:2c:52:17:2e:fb:2b:c6:5e:e1:5e:cf:
53:f7:d9:e2:e6:61:e6:94:e0:e0:ba:df:a7:dd:90:89:f0:10:
82:79:ec:e3:fe:2b:db:4d:1e:a4:fd:17:7f:91:96:a4:70:f8:
ff:c5:b6:fc:32:55:4a:4b:6d:3e:94:b7:34:26:8e:39:69:98:
4c:77:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:09:11 2026 by rpki-client