Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: H4EbDxPqfBwKZAnBdK+uOdNPKSS5VifWswT5zrwdtnQ=
Subject key identifier: 02:27:89:98:6F:F3:88:CA:99:42:E6:B3:7C:69:5B:D6:FA:C9:1B:AE
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019E4EEA8833875E082E6F18B1E387EA1801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: 9A
Signing time: Fri 22 May 2026 09:00:53 +0000
Manifest this update: Fri 22 May 2026 09:00:53 +0000
Manifest next update: Sat 23 May 2026 09:00:53 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: OwrBAsJ6btiyLhoE0Toh2hotyMDy21uRDVcB+0owvCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:88:33:87:5e:08:2e:6f:18:b1:e3:87:ea:18:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: May 22 09:00:53 2026 GMT
Not After : May 23 09:00:53 2026 GMT
Subject: CN=022789986ff388ca9942e6b37c695bd6fac91bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:05:6f:97:c1:5a:de:30:b3:46:6c:45:ae:
b6:40:92:c1:d5:3a:94:fe:3f:63:96:52:32:fa:24:
00:b0:a6:39:2f:5f:03:06:74:68:17:f6:8a:ab:6c:
f0:6e:f5:4b:ca:a0:f7:e5:0a:64:19:bf:3a:25:5d:
ab:4a:19:de:21:3d:e0:90:83:78:5f:07:0c:5e:9d:
f7:b5:3e:09:1f:58:27:d4:9e:f8:76:c4:4b:29:70:
6a:55:4e:7c:93:b2:8e:7f:fa:81:95:71:fa:f7:57:
b0:84:eb:72:27:7f:72:d8:fe:11:08:96:3d:c9:b8:
6c:4e:7f:73:32:6b:6c:c1:70:6a:46:d9:df:7b:30:
1b:ab:6f:f9:3a:fd:94:05:2e:18:f9:c4:3a:3b:5d:
92:11:be:d9:2a:7b:88:7e:bd:fb:94:c4:8b:8e:02:
78:13:ae:27:28:63:06:33:37:34:6f:80:04:45:4e:
6f:06:8a:b4:26:6a:75:6c:ad:53:42:b1:f9:2f:fe:
ab:e7:11:f5:c4:93:ca:99:cc:16:ac:34:29:bc:cd:
ab:99:a6:1d:a3:7f:a9:60:d7:ca:b6:a4:46:3e:56:
c0:a8:cb:d3:28:72:4b:5f:bc:64:95:0d:4d:05:53:
fe:e3:7a:7e:b8:c0:1e:36:0a:c8:81:ef:ca:aa:c1:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:89:98:6F:F3:88:CA:99:42:E6:B3:7C:69:5B:D6:FA:C9:1B:AE
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d2:f5:aa:cb:90:47:02:53:6d:fc:a5:2a:67:6d:20:79:fe:
cd:f3:8b:35:73:f0:8c:c5:39:a1:43:6d:c5:84:6e:70:54:14:
e4:95:40:07:3a:f0:99:d6:dd:06:f7:d6:fd:de:a3:c3:33:b3:
b4:cd:93:43:75:e2:2f:a7:35:b5:53:e3:1a:d3:66:71:44:ec:
77:2f:87:f0:42:61:13:02:d9:87:80:f6:be:84:1c:0f:ee:54:
72:c7:e5:be:1e:13:43:cd:bd:a2:80:34:de:81:1e:cb:fc:31:
61:6c:41:a4:1f:d5:96:f0:3e:f1:32:7b:ff:3b:6b:2d:99:11:
32:85:e8:05:da:7d:c0:3f:3b:c9:6e:78:4f:d4:00:31:aa:46:
f3:89:86:dd:e4:7a:2b:0e:52:14:a3:02:6e:c9:93:ea:bc:68:
3d:98:2e:80:d7:f1:4f:0d:2f:99:a0:12:78:67:08:c1:db:b3:
08:34:d7:11:19:81:0c:66:ac:a9:e4:d8:fd:f6:04:e4:b7:43:
81:33:34:d4:0d:ad:b4:ef:b1:7a:66:ad:61:3c:6a:f4:3f:92:
15:ea:9f:57:37:0f:b9:5f:01:e3:aa:6a:93:96:5f:83:2b:00:
49:fe:d6:89:d8:bb:5f:cd:aa:ec:63:b8:58:be:ce:76:2b:e4:
0a:d3:c8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:51 2026 by rpki-client