Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: SEvI1eKa/kxZIWhzUG1/WZ7hOjS65+I7B8f8LHgnKzI=
Subject key identifier: CD:AB:6E:02:AB:53:AA:2A:D4:DA:29:99:B4:95:C1:CE:5A:11:9C:ED
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 019DA944129C5CCA5556DD41EB0535DE4491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 0D42
Signing time: Mon 20 Apr 2026 05:01:43 +0000
Manifest this update: Mon 20 Apr 2026 05:01:43 +0000
Manifest next update: Tue 21 Apr 2026 05:01:43 +0000
Files and hashes: 1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: yusB4d6dTtMgjtRFpPR0NbqdRvhk5t7YuED3Dkmou78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:44:12:9c:5c:ca:55:56:dd:41:eb:05:35:de:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Apr 20 05:01:43 2026 GMT
Not After : Apr 21 05:01:43 2026 GMT
Subject: CN=cdab6e02ab53aa2ad4da2999b495c1ce5a119ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:bd:4c:82:bc:7b:9a:d5:8d:7d:a9:b4:e0:
81:b4:cd:19:96:f9:56:06:bc:8d:03:11:43:db:17:
bc:6d:87:8d:53:f0:3d:bd:09:1a:4a:8b:17:06:f4:
4c:c5:2e:68:78:ca:65:fc:5d:3d:a0:49:e9:b9:3f:
b1:37:10:84:ac:89:32:6b:ed:49:8f:b3:4f:56:a4:
08:df:71:fd:f6:63:3e:ae:50:b0:22:07:c3:1e:2b:
17:85:eb:d6:66:73:b5:5a:88:44:4c:47:0d:56:a3:
4c:d5:d9:6a:c5:60:e8:2f:4d:2b:f1:86:a7:09:54:
7f:65:e1:f0:74:62:87:15:ce:03:2b:b0:39:53:26:
59:cc:e6:2c:b6:fa:64:b5:e3:39:0f:90:74:e2:a2:
ed:22:ab:67:0b:d8:bf:d0:c5:44:be:59:dc:6a:84:
4c:ba:41:67:9d:dc:77:9c:92:14:26:36:78:0e:26:
6a:e3:3d:d0:84:0b:ba:e1:04:83:fb:0e:20:21:7d:
a7:09:b1:87:b4:35:46:2a:34:a1:22:6f:29:fd:7c:
23:b9:dc:a3:b7:a1:7d:b5:23:1d:4f:ef:43:c9:a2:
27:80:39:6f:2e:7c:73:fd:ce:61:1e:61:5d:ee:48:
1b:bb:c4:b8:ca:fc:8d:da:37:ea:a0:eb:39:f6:44:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:6E:02:AB:53:AA:2A:D4:DA:29:99:B4:95:C1:CE:5A:11:9C:ED
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:8b:d6:af:ce:9b:16:50:9c:3a:bb:03:09:ee:07:b1:0b:
31:f7:2c:41:c6:9c:86:87:32:18:52:c8:d1:77:db:fc:15:d3:
5e:65:c6:c7:77:cb:5f:4a:76:d6:9b:85:35:2f:81:2d:33:7b:
37:cc:51:30:4b:6b:c8:92:51:7e:18:87:06:81:90:01:1a:39:
5d:ce:bc:64:59:f0:7f:92:11:fa:a4:7d:07:0b:86:95:4a:bc:
d0:6f:22:d8:cc:d9:f0:19:07:cb:87:4a:3e:20:98:f0:0f:6e:
1e:4c:23:5a:84:92:be:fd:5c:4d:c7:0f:35:e9:5f:6a:e7:d0:
b9:99:c2:6b:f2:e4:6f:af:ad:e2:d9:3f:ca:b1:6a:9d:59:ca:
a9:b1:6e:bd:cd:e5:a7:49:c3:87:be:22:5c:20:0b:26:14:7b:
c1:83:79:80:ca:ce:47:f7:4c:a0:7a:ca:da:d0:7e:21:c2:60:
33:4a:0f:7b:c4:a6:b8:f0:3e:d3:78:a6:60:09:b7:5c:0b:fa:
39:d1:a6:df:be:cf:34:b9:b4:3d:d0:cc:e0:2a:b4:1b:d0:88:
24:41:1b:c1:77:73:fb:dc:64:1d:90:b8:ec:77:5c:54:ca:6f:
e2:45:45:04:c9:e2:36:f9:91:8f:c6:01:d6:77:d4:44:d5:67:
f3:f5:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:34:02 2026 by rpki-client