Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier: iPnnVEDpqHM0ZYjatCVrHA8lIZwd/SX2xhokSn6QcOg=
Subject key identifier: 9F:E2:FF:67:2F:8D:3C:2A:79:22:1E:34:24:1C:A2:6E:1A:54:2F:10
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial: 019DD01A24BEEF147B944F5596C61D0B8D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 18:01:07 +0000
Manifest this update: Mon 27 Apr 2026 18:01:07 +0000
Manifest next update: Tue 28 Apr 2026 18:01:07 +0000
Files and hashes: 1: Pygss5f1ruujkq8WTW7laONkQ2o.roa (hash: 7WHTQ4+Rj6UfUnW2B2kYVMQPC72bm+std85TSgIO/SI=)
2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: 7hv4g5308mnQptRJCckm6SdKoVDbNDwfbC7At7ckVsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:24:be:ef:14:7b:94:4f:55:96:c6:1d:0b:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
Validity
Not Before: Apr 27 18:01:07 2026 GMT
Not After : Apr 28 18:01:07 2026 GMT
Subject: CN=9fe2ff672f8d3c2a79221e34241ca26e1a542f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:f4:92:6f:f2:02:a1:f5:93:03:cb:17:0d:
75:c4:bd:9b:1c:3f:85:29:0c:68:d8:7d:c1:8a:4b:
28:85:73:a7:57:bd:7d:0d:b3:96:5a:a7:70:9c:bd:
8e:99:b1:31:83:fc:46:df:d2:a8:11:04:23:a1:b6:
36:cf:dd:b7:88:00:5d:b9:a4:f6:60:b1:75:6d:3a:
cb:e2:8c:c7:ce:56:94:b5:60:51:da:d1:10:27:27:
a1:56:71:54:9e:36:a7:ab:d3:56:90:ec:90:c7:f3:
57:71:00:a5:13:3b:f6:bd:b3:30:b0:db:b0:d1:88:
d8:11:b6:c6:71:32:ee:4c:c2:fd:6f:3f:51:a7:67:
c3:91:92:f1:e2:6a:6e:28:8e:02:d9:8c:f0:33:3a:
d6:95:a6:84:34:76:54:3d:e2:4d:46:4c:7e:1b:99:
e1:55:6e:be:9b:0d:ab:3a:9a:d2:fa:16:ce:23:bd:
6f:c6:90:b5:b6:aa:d3:3d:a0:a2:6a:0e:f9:99:9a:
6f:42:c0:a9:d5:d8:cb:21:a0:33:1e:1d:da:e9:c6:
aa:4d:19:bf:f0:06:44:9e:3c:d2:99:9d:ad:21:55:
0d:08:a9:09:24:cc:67:b2:2a:71:e5:bc:3b:26:e5:
c2:38:53:a2:7e:5a:e8:fb:89:a5:f1:6f:ae:5e:1f:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:FF:67:2F:8D:3C:2A:79:22:1E:34:24:1C:A2:6E:1A:54:2F:10
X509v3 Authority Key Identifier:
keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:ae:bf:bf:39:09:a3:9d:f1:d9:ff:f0:88:6c:25:e6:a6:
33:71:c5:22:2d:fb:c6:98:ac:a1:c8:fc:66:cb:49:cd:56:d0:
4e:74:a3:7d:4c:a1:f0:d0:95:17:14:b0:2e:a4:4a:b2:c0:8f:
69:88:97:0a:ff:20:0a:b5:2c:69:01:88:11:41:71:95:89:e4:
2e:41:47:3e:e7:96:59:da:51:90:15:bc:90:ea:08:13:0e:8e:
01:7a:a7:17:f9:f6:64:05:6d:48:ef:50:1a:0e:91:7a:1e:84:
02:ca:93:41:b6:06:80:2f:8e:9e:ca:8a:88:ef:76:29:ca:49:
8d:b5:c3:38:a5:8c:fc:e7:fc:0d:b6:5d:40:ff:3b:34:dc:8e:
46:54:4a:5f:bc:bc:10:93:8c:7a:b2:4f:18:77:ea:e2:0b:b5:
70:58:5e:dc:c3:0a:2b:0e:10:6f:8d:d9:85:e2:80:6a:f2:97:
f4:ed:5d:5b:22:6c:49:66:7c:bb:39:31:d1:82:58:32:52:00:
9e:42:e7:3c:aa:b4:dd:e9:b0:6b:f7:7b:5d:3c:10:b3:1b:74:
e0:b9:79:08:eb:9e:a9:7f:30:8f:58:11:3b:7a:fe:fb:bc:b6:
9b:97:75:37:e2:43:22:ee:98:a2:22:dc:b6:b6:df:1f:e3:aa:
e7:7a:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:44:45 2026 by rpki-client