Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: oWLDhEJlsRXYbtS9Z3WdQGjv6VP/KB3hQOh8bf1sjhs=
Subject key identifier: 67:0D:0E:F8:A4:F7:05:1E:99:A1:19:CB:57:BB:7D:2E:6B:C8:AA:A4
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 019E4F21CE92F0FD65A0E122A0F1E89F0C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0F65
Signing time: Fri 22 May 2026 10:01:16 +0000
Manifest this update: Fri 22 May 2026 10:01:16 +0000
Manifest next update: Sat 23 May 2026 10:01:16 +0000
Files and hashes: 1: JuDeFJbO_wXZjBIE6eYSc7boKCs.roa (hash: MAfICq2fQmDbk85foSo683rw0p189TufeECHZ/PelUo=)
2: nPEounEr9Dlrb0BmzADGVTeSqtg.roa (hash: WNJB2u1ILoanF+nGeSCzXfM+9cLuf8G8/18OGH9ztZ8=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: JtgZrvL70b+UfLfADessLj6CYz7Lqd/V6G/E9KaDq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:21:ce:92:f0:fd:65:a0:e1:22:a0:f1:e8:9f:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: May 22 10:01:16 2026 GMT
Not After : May 23 10:01:16 2026 GMT
Subject: CN=670d0ef8a4f7051e99a119cb57bb7d2e6bc8aaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:89:8c:76:96:40:5d:39:97:28:8e:4d:43:
42:a4:d6:63:54:d8:66:90:b2:49:35:2d:02:67:2b:
22:03:65:14:b5:2f:82:63:a8:af:1a:2d:eb:8c:3f:
0b:57:f9:e1:e9:18:53:b3:10:95:42:cf:09:93:40:
48:b9:00:61:09:b9:ff:94:46:f6:5b:cb:62:21:27:
e9:db:29:ab:45:0c:3d:88:27:d1:f2:37:ab:cd:e4:
bf:28:9e:38:60:c5:38:e5:4a:54:8b:8c:51:12:4e:
34:73:c4:e8:25:5c:40:95:98:98:9b:f8:9e:6e:34:
6c:30:26:94:47:17:96:75:3a:c7:ea:7e:06:7c:94:
d5:8a:ff:d8:3c:4e:2e:d1:b0:f8:ef:b0:2c:07:65:
63:48:32:08:94:77:65:d3:a0:3c:aa:aa:c1:d8:39:
0b:f8:90:1b:9d:f4:d4:84:67:58:46:68:b5:67:d1:
c7:c4:c0:1c:32:54:09:27:39:a3:ad:a6:df:2a:1d:
84:9e:9c:55:15:3f:b2:62:63:50:5c:47:93:b6:02:
3b:f8:ed:d7:00:65:c0:27:e6:f1:c3:88:ee:a6:cc:
d1:f8:d1:2d:f2:50:bd:87:9c:0d:9c:09:86:2a:49:
29:df:30:1e:1c:30:20:bd:98:11:a6:dd:85:4a:25:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:0E:F8:A4:F7:05:1E:99:A1:19:CB:57:BB:7D:2E:6B:C8:AA:A4
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:11:54:a3:71:c1:70:bc:a0:1f:34:31:b6:2d:62:43:ad:
b0:cc:ad:ea:63:7f:ca:9c:a3:05:73:b2:9b:a4:24:28:86:07:
c2:1c:68:34:10:46:00:e8:b0:61:05:e8:06:f7:21:e0:50:81:
28:08:11:cc:cc:e2:a0:b8:9c:35:ff:ea:ad:9f:ff:91:7e:f7:
53:16:d8:59:e3:f9:8f:af:4c:53:c7:cd:eb:a2:dd:71:fc:ad:
09:1b:11:0f:77:31:8d:de:33:2a:09:5f:1b:c1:f5:58:bb:62:
48:ab:9e:ab:5e:16:ee:40:fc:6e:c3:12:87:52:1b:81:fc:94:
05:f2:4c:3b:51:ca:9a:ab:34:cf:e4:ee:fc:4b:47:c9:63:ae:
79:84:ca:92:e1:45:dc:b9:be:78:f1:cf:4a:de:aa:3c:47:49:
46:4b:86:c1:c2:34:b9:88:7a:e9:39:d0:0c:93:9a:35:55:ad:
26:c1:f3:67:87:44:39:6f:0e:c9:2d:8c:34:36:07:47:df:54:
2e:85:c2:8b:8b:ce:cf:19:07:da:9b:90:e2:b9:b5:1a:22:29:
19:87:fb:3e:a7:b7:27:a2:c2:22:1f:36:fd:be:f4:55:88:f1:
4f:0c:b8:d4:3b:8c:ac:e2:29:f2:9b:5c:47:5e:1d:1e:47:19:
f9:62:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:31 2026 by rpki-client