Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: EomnksDRQVij8hyItcQs67zE9bssMPSD8D+tctx+bwA=
Subject key identifier: 4B:5F:3E:9C:72:04:A2:B8:7F:16:D5:CE:48:CC:49:30:BD:33:50:37
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019E3117A9A3BA667F77BB7DDA09ED9F544A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 14:01:34 +0000
Manifest this update: Sat 16 May 2026 14:01:34 +0000
Manifest next update: Sun 17 May 2026 14:01:34 +0000
Files and hashes: 1: Be5RoMw-ds5u2XTKB0fRW06anJM.roa (hash: /kKlE5noyKkxWgeKwC5k06c0zlzs+Aq9eYc5li0SiaA=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: T1bO6OGpcGHBUd+nVGimzLBfhuURoewFS7fJxfqK10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a9:a3:ba:66:7f:77:bb:7d:da:09:ed:9f:54:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: May 16 14:01:34 2026 GMT
Not After : May 17 14:01:34 2026 GMT
Subject: CN=4b5f3e9c7204a2b87f16d5ce48cc4930bd335037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:f3:05:3b:05:71:51:18:f7:33:07:0c:78:
df:a8:7e:1e:87:69:50:11:11:86:4d:68:7a:5b:7f:
af:e0:7b:85:a9:67:8e:04:53:d6:db:fd:83:fe:1e:
3e:5d:6c:9a:c7:ca:4d:fc:20:a8:88:d0:58:08:2b:
79:1b:36:90:33:6e:b5:ee:bb:47:cf:d9:c4:9b:ab:
d9:7d:e2:d6:fe:b8:99:bb:76:c4:56:8d:f0:bc:12:
85:d5:67:95:a6:e1:b2:07:7e:ff:e3:05:a6:7e:ce:
ea:95:0a:15:ec:0b:27:7e:b9:40:9e:71:c0:e0:05:
9b:fe:3b:71:d9:d8:06:38:d6:ac:fa:ea:0e:de:01:
10:4f:b1:da:f1:63:dc:bd:34:86:eb:a1:05:87:ce:
b8:9b:d3:eb:69:c4:35:14:a7:be:47:35:60:e2:db:
6f:ab:a5:35:d5:f1:4b:bc:0a:ba:f6:b7:f3:4e:9f:
03:95:32:0c:65:97:c4:d9:96:38:07:2e:aa:6f:a4:
01:95:5c:91:af:ed:fd:26:92:89:42:b1:ff:e2:01:
15:8c:a5:2a:41:d6:b0:78:0f:49:78:38:7e:7c:a8:
e8:b6:f3:0f:ad:d0:72:0c:45:56:a7:79:24:1c:be:
34:eb:c2:fc:04:14:63:14:ac:31:b3:a1:a4:f2:b8:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:3E:9C:72:04:A2:B8:7F:16:D5:CE:48:CC:49:30:BD:33:50:37
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:07:fa:da:80:1d:76:38:10:6f:89:67:f4:06:e7:4e:03:
c3:cf:00:fa:a3:5b:00:f5:f8:be:6d:aa:97:c2:32:3d:d8:c7:
86:d0:76:60:04:42:13:ae:b8:4a:bf:01:71:57:9e:60:82:b4:
3d:d9:be:a6:c7:e1:7c:04:20:9f:6a:45:e3:ef:c1:94:05:3f:
48:39:95:77:07:67:8a:01:66:bf:07:8f:93:f7:8f:45:36:47:
d9:5f:65:7c:1f:98:8a:a5:04:5d:55:4d:aa:e5:58:0b:25:40:
eb:85:57:8f:6c:b3:f2:76:c0:8c:84:c9:56:8d:24:43:75:a2:
b8:20:22:78:c8:f1:84:98:3a:e4:1a:cf:6a:34:cd:b9:af:7a:
c6:09:ee:0e:dc:be:98:02:6d:f3:37:61:1b:d8:d5:f5:4c:6c:
4d:54:fe:21:26:fb:ac:69:67:4d:4d:3b:bc:46:3e:8d:57:ee:
ae:48:d3:f5:bc:63:6a:2e:89:bd:b1:d5:96:78:3b:c7:41:ba:
02:e3:ff:db:46:43:07:a5:61:03:b8:5c:94:21:d0:82:12:a4:
7c:38:9f:c3:c1:ad:31:4f:f7:54:11:81:0c:dc:03:d6:d2:22:
3d:17:f2:71:f3:b8:78:b4:21:b7:91:d1:0b:d4:d4:9f:10:b0:
51:de:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:22 2026 by rpki-client