Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: f7tquRe0QzZywYrX4F7dR/Re1rvNrp3szZ6AZXEbMDo=
Subject key identifier: 91:DA:9B:38:31:E2:AC:DA:75:18:F7:EF:AF:0E:FA:CA:1E:E0:33:7F
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019D25BAC0A01C15C5F5DAE2C85384D476CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 1830
Signing time: Wed 25 Mar 2026 16:01:29 +0000
Manifest this update: Wed 25 Mar 2026 16:01:29 +0000
Manifest next update: Thu 26 Mar 2026 16:01:29 +0000
Files and hashes: 1: MQ6sWToCB3mumMKgqU-7hS8fOpI.roa (hash: xhgcVHl7BJsW6MydRWNrXzoXNfS0GYn0WspMbhtJ6Ns=)
2: UGUSM9hVA7KNGP7ZI953Rb9GwC4.roa (hash: fiNb23qzbYBvgPKusu1s3CPZalyy1OSv2RbVYQYIa5Y=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: n2FbzjJl/0ejjlwdG48Vr+Iulb2vm5ZQl0soWMAyghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c0:a0:1c:15:c5:f5:da:e2:c8:53:84:d4:76:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Mar 25 16:01:29 2026 GMT
Not After : Mar 26 16:01:29 2026 GMT
Subject: CN=91da9b3831e2acda7518f7efaf0efaca1ee0337f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:45:a4:91:db:51:ba:b8:fc:5d:e3:b0:cf:
16:fe:54:78:e0:43:74:57:5a:91:45:c3:2f:ab:6b:
c9:45:fc:78:f5:77:4c:bd:41:be:0d:b5:fb:e4:74:
6b:d4:6a:0f:9d:4d:fe:4f:bb:12:30:96:13:20:0a:
e0:a0:1e:d5:de:eb:61:9b:a7:56:fd:66:ab:55:6c:
e3:f2:a4:a3:74:4e:36:28:7e:d6:82:a7:f7:53:e9:
4d:11:46:af:c4:dd:a8:c9:23:83:ac:43:b4:6b:c1:
3c:15:e8:e1:0c:ba:f8:a0:cc:95:30:f2:18:c3:34:
b2:b6:56:72:b8:d7:91:27:7d:e5:81:ec:48:7f:f2:
b6:60:08:87:18:24:60:7b:15:d1:8c:51:29:0f:99:
13:88:80:2e:fc:eb:50:92:d5:51:27:fd:88:27:e9:
d5:03:1d:d6:1a:ce:5a:83:b3:f3:ec:49:d2:45:e9:
23:d8:db:d2:26:03:7e:26:d2:22:55:38:19:fd:92:
68:9c:4d:f0:c6:8c:fe:33:c1:d0:cd:ad:f2:3b:79:
d4:64:32:f9:3b:bb:92:2d:46:b3:1e:a9:3a:aa:2b:
92:03:98:d2:5a:6e:fa:db:f8:b3:2a:2a:2a:ee:c0:
b0:dd:c6:df:5e:53:e0:87:f4:2c:74:55:7c:c2:22:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DA:9B:38:31:E2:AC:DA:75:18:F7:EF:AF:0E:FA:CA:1E:E0:33:7F
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2d:45:c9:9d:21:ee:06:9c:15:80:f2:e4:d7:67:2c:a4:c8:
a7:d3:f2:1b:9a:94:cd:37:3f:02:cd:28:20:a4:76:dd:b8:72:
99:c9:7c:f6:1d:1c:e7:f1:f1:57:7c:c9:56:61:a9:03:ca:b6:
ec:f0:22:40:6b:a8:4b:0e:31:03:fd:6b:10:bd:f1:c6:20:0c:
e4:bd:dc:28:67:e5:29:4b:81:1a:9d:fc:d7:87:8b:5e:c1:7c:
c5:4b:13:41:f5:0c:ed:a3:7b:78:77:2b:9c:e5:69:fc:66:82:
0c:39:01:1e:72:a5:a9:06:d9:7b:b2:b5:68:da:b9:e1:bf:8f:
68:ad:9a:f3:c4:e0:20:89:6e:73:b2:ad:03:2e:a4:29:26:04:
3b:78:29:da:1b:f8:8c:a4:74:39:45:43:80:b7:1d:95:49:ef:
63:9f:2d:71:fb:93:eb:e9:f8:24:44:c8:09:92:ed:b7:94:d4:
4b:98:30:fb:78:9a:e9:83:ec:f0:5f:17:a1:ac:ab:a7:d3:fe:
63:68:87:3a:a5:d1:84:13:ff:df:d8:da:a4:f1:92:df:dc:c2:
9a:d5:df:c4:71:dc:bb:6b:b9:92:9f:07:e0:8f:ca:30:aa:d7:
90:b9:eb:74:cc:1d:85:de:7e:ce:81:1d:58:24:95:69:04:cd:
f3:8f:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:54 2026 by rpki-client