Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: gKbdF0B3SsH04X42HJ+8Kx2XHhjZu2QC6JGHDSH1YCo=
Subject key identifier: D5:1F:05:AB:51:F3:F1:35:DA:6D:A0:BD:A0:68:A4:A0:18:2C:1C:2C
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 019DCF74E71410AC7F0813A8DB7640CCBA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 1834
Signing time: Mon 27 Apr 2026 15:00:38 +0000
Manifest this update: Mon 27 Apr 2026 15:00:38 +0000
Manifest next update: Tue 28 Apr 2026 15:00:38 +0000
Files and hashes: 1: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (hash: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: Et+FguWRXUjyyvSJ32SFNN1YSQusVNncVfuHu+f00Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:e7:14:10:ac:7f:08:13:a8:db:76:40:cc:ba:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Apr 27 15:00:38 2026 GMT
Not After : Apr 28 15:00:38 2026 GMT
Subject: CN=d51f05ab51f3f135da6da0bda068a4a0182c1c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:c8:1b:ed:2b:d5:39:37:95:c4:98:b7:c5:
e1:bc:93:74:69:86:4b:8e:3a:1c:bf:30:8d:b4:f6:
c9:70:88:ce:94:6a:83:d9:fe:3c:7d:6a:24:ff:c7:
79:39:42:14:95:be:3f:72:cc:89:27:44:1f:46:f0:
f9:65:00:47:f0:b3:3c:88:17:6b:cd:71:61:e6:e9:
8e:d9:e1:5a:c7:32:a1:97:bb:d4:3d:90:4d:ef:c2:
ea:c9:be:25:7e:2d:be:55:e1:33:29:0e:b5:47:8d:
62:36:68:ed:3a:9f:b2:91:37:82:65:75:33:7f:62:
16:2e:92:eb:d4:ba:e5:15:f7:cd:eb:fe:0c:03:0b:
e3:21:0e:c0:34:c9:07:38:75:48:7f:1b:4f:0f:7a:
35:eb:25:fe:1b:86:67:4e:a9:02:94:e0:3f:27:fd:
e8:b2:2b:12:70:a1:00:db:6b:1d:98:be:1d:29:22:
40:98:2a:00:e1:f1:9f:fe:f2:b2:92:e7:52:54:9e:
b8:15:51:bc:e0:73:3d:e2:7b:7b:40:e9:14:9e:93:
11:dd:46:ff:9a:5f:13:e4:9f:39:44:99:5a:cc:d3:
2d:46:2a:bb:45:78:22:03:ee:9e:49:f2:1f:55:bd:
10:d5:27:9a:95:46:7e:3b:41:3b:c7:ee:25:5b:f5:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:05:AB:51:F3:F1:35:DA:6D:A0:BD:A0:68:A4:A0:18:2C:1C:2C
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:ef:08:bf:9a:36:56:58:70:f0:f3:7c:f0:15:af:ab:13:
a4:c4:ae:1d:ed:91:39:19:d6:f2:e6:6d:9c:6c:c4:f7:ff:58:
56:eb:dd:7c:05:7a:ab:1c:52:e6:1b:fc:4e:66:a2:e8:37:ec:
82:fd:be:c1:e0:cc:92:a3:e5:f1:12:d4:d1:04:38:4a:62:09:
5f:75:38:77:90:46:41:53:5d:45:98:b2:10:29:31:9e:73:a8:
24:30:01:a9:dc:61:ee:0c:2b:71:32:0f:4a:ff:e7:c7:59:0c:
3b:0f:07:e2:82:0f:a1:8d:e1:a7:7a:3a:56:93:4e:c2:c9:14:
fd:3c:66:63:0e:6d:25:c7:5c:ed:43:09:e5:9d:fc:29:91:76:
0b:a6:ec:97:04:2d:96:f1:0a:60:ca:df:07:49:b5:72:a9:e6:
10:da:e9:d1:6e:34:18:fa:a4:8c:e2:61:e3:f1:2d:46:89:25:
f5:01:b8:75:49:fa:37:de:a6:a8:ec:4d:a8:88:e8:53:49:b4:
00:df:81:c7:9a:65:41:de:27:b7:d2:c4:61:81:97:fc:10:c0:
82:21:0d:31:86:af:da:93:41:b0:22:cb:77:cb:82:0a:33:21:
20:0c:bf:10:e4:39:b3:11:0b:91:90:1f:75:2e:72:05:d3:96:
7a:df:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:08 2026 by rpki-client