Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: vbeNYx5iHjJjvuTySpHcCgYn5rDpPJgEKrGeWOeRqxo=
Subject key identifier: 0D:1C:D9:F5:B3:46:B3:78:11:E3:F3:84:D2:55:51:FD:42:DA:95:C8
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 019DCC3D4C7EED530DFD652FBD079AE5BD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 1698
Signing time: Mon 27 Apr 2026 00:01:02 +0000
Manifest this update: Mon 27 Apr 2026 00:01:02 +0000
Manifest next update: Tue 28 Apr 2026 00:01:02 +0000
Files and hashes: 1: 1upib3w4dNwpLOBhgbemzuWJEnk.roa (hash: GhXcTauSsjZxaizJzGN0VZhjaJZ3SZLeg6vkoxXN+YY=)
2: 5dCmEdDrjOnlZMp81Q2uR_wbzFI.roa (hash: lxe58PQH7VpXxHz7k/J8LJcmNsZLy0kcv52Otk3eQ+U=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: r+g3KuBHRQoKZJ3qTue09gmKc+PCUeCSw+0Ard7rJ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:4c:7e:ed:53:0d:fd:65:2f:bd:07:9a:e5:bd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Apr 27 00:01:02 2026 GMT
Not After : Apr 28 00:01:02 2026 GMT
Subject: CN=0d1cd9f5b346b37811e3f384d25551fd42da95c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:74:53:57:1f:9c:2e:35:12:6b:84:26:c6:
cf:18:ee:de:96:59:55:86:23:da:1d:25:89:01:11:
77:96:c1:d7:c7:2b:b3:0a:4f:7a:2b:72:50:15:c9:
00:29:af:e4:10:fb:e1:7f:1c:ca:d9:a3:72:8e:20:
ca:c2:75:70:da:d5:92:84:2b:e4:03:bb:2e:4a:e8:
a7:c1:f2:6a:95:ea:4f:e3:42:72:a7:fa:71:4a:52:
db:dd:7c:82:20:8c:4c:52:6e:1a:77:c6:2c:d6:7b:
47:90:43:11:ca:12:9b:34:04:0b:e3:c3:ce:e9:76:
6c:71:14:bf:7f:dc:67:18:1a:f6:f9:5b:3b:7e:ae:
3d:08:18:35:35:08:85:83:35:c3:60:5c:78:2a:87:
24:3f:3e:33:f8:35:7d:a2:43:8d:c4:b2:c2:3c:24:
44:d4:2b:0a:c2:27:58:7e:26:4f:99:08:3f:0b:77:
83:95:06:eb:66:7c:c8:78:be:f3:61:8f:6a:60:f1:
56:e8:ba:2d:d8:cc:34:3d:9a:e6:b8:c3:f6:36:8d:
be:49:32:df:df:08:e3:ed:60:a2:db:da:cd:fd:3a:
be:4c:e3:8f:9e:ff:8b:4e:9e:2d:9d:6f:71:03:44:
1e:91:c2:52:8b:9f:d3:f6:66:27:43:9f:41:fb:93:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:D9:F5:B3:46:B3:78:11:E3:F3:84:D2:55:51:FD:42:DA:95:C8
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8e:9b:45:73:f8:71:7b:ed:e4:59:ee:f7:7b:82:b3:90:f8:
32:4c:54:b1:9e:62:6d:e9:3f:cd:e6:c1:1e:1b:70:82:84:fd:
a3:cd:e8:71:81:97:8d:2b:00:be:f3:5d:27:59:f6:dc:6c:35:
95:19:7e:4e:e2:a9:e0:30:c1:26:c9:92:15:1c:7a:69:c7:a1:
8b:77:d1:2c:7e:31:71:a6:77:2f:6f:57:d2:d6:d6:06:86:0e:
02:ab:c9:22:fa:b4:db:b3:71:13:77:ad:82:c6:ff:4d:14:50:
9b:99:bd:92:c1:5e:43:93:ea:40:7b:29:1a:06:5e:5b:1f:70:
30:88:a5:e8:96:86:fa:9f:dc:ec:a0:50:31:7e:bf:11:af:e5:
0e:d2:a9:a3:87:85:be:45:6e:9b:6b:a8:4c:2a:5f:9a:e7:2a:
84:bf:dc:51:0e:68:26:5b:a8:a1:e5:80:06:bc:77:21:e6:ff:
8f:d3:99:fe:3b:96:df:76:1f:07:f4:8a:38:65:a3:1f:76:dc:
e6:3a:da:dc:50:ec:93:01:68:e5:7b:e1:09:5c:ca:7b:b3:08:
3a:bc:a5:1e:7f:fd:3f:84:f4:b8:6f:9c:ac:6d:98:11:bd:02:
33:1c:45:25:c1:c0:f9:63:65:b4:f6:ca:7c:6d:90:39:9c:75:
be:b8:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:36 2026 by rpki-client