Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: EtEFDyKjjB/gJ2IuU/LJsTw+bm9zh+ntNlsh4Gk4jnI=
Subject key identifier: 21:D7:9C:E8:8A:A1:6C:4D:CD:7D:62:01:6A:2A:12:9C:91:C5:22:1B
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019E1F7F8D447C56362B7633E60A92B4B929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 04:01:53 +0000
Manifest this update: Wed 13 May 2026 04:01:53 +0000
Manifest next update: Thu 14 May 2026 04:01:53 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 3BvC347Q7sy4NH+P6trtZMksSTv9LmmEnXiLPKKHWXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:8d:44:7c:56:36:2b:76:33:e6:0a:92:b4:b9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: May 13 04:01:53 2026 GMT
Not After : May 14 04:01:53 2026 GMT
Subject: CN=21d79ce88aa16c4dcd7d62016a2a129c91c5221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:48:eb:e2:fc:92:5d:b7:f3:4a:e5:56:f4:
39:f1:38:49:80:13:f9:7b:c4:10:76:26:d1:07:42:
b8:39:b1:0d:bf:14:55:57:5f:e6:ad:bc:83:7c:ea:
e2:d3:2a:46:2a:b3:22:c5:b2:be:c3:7c:92:6d:dc:
d3:c0:ad:92:7f:a9:80:be:57:f9:b9:56:18:a8:23:
28:2c:95:a5:a2:0e:b6:1d:15:3f:34:0e:c0:42:4f:
2f:e7:86:78:f8:cd:ee:58:11:b0:b6:98:c2:0d:4d:
69:9d:ba:41:8d:12:23:d7:14:62:86:c5:9d:50:e9:
13:46:e2:73:20:b1:d0:bf:fa:99:46:6f:2a:58:53:
c0:f1:55:20:9e:5e:59:f2:41:0d:f0:8a:2d:65:48:
84:a3:a0:99:99:72:76:43:48:d8:9f:a6:47:0f:20:
8f:d0:34:3d:68:d2:c8:a6:93:49:57:cd:c3:0c:79:
17:f9:59:e4:26:65:00:16:ad:5d:35:f8:7e:b5:00:
10:01:d5:72:5f:f7:71:f0:33:41:b5:7d:c9:6b:de:
1d:00:65:cc:03:bb:6b:8f:45:ef:43:1e:cf:c6:9a:
98:ad:d4:fe:ec:35:68:44:6f:f7:e3:63:0a:24:92:
8f:d2:9e:22:4a:7a:2f:4d:7a:59:b9:7e:9e:21:5a:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:9C:E8:8A:A1:6C:4D:CD:7D:62:01:6A:2A:12:9C:91:C5:22:1B
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:7a:ce:d2:c0:71:6b:1b:04:19:8e:49:ad:a5:8d:33:80:
7f:52:e8:32:39:27:24:d1:f8:79:3a:e2:a1:39:a4:b6:a1:49:
e6:7a:a6:14:53:08:90:1f:2f:24:13:5a:93:83:20:40:72:66:
73:ef:dc:a5:4a:ea:f1:e7:36:22:d7:ee:2a:a5:6f:64:86:77:
f0:80:58:7a:fe:f5:19:85:36:ba:fe:8a:d7:c6:9f:96:e5:01:
3e:d6:d4:cf:a1:49:d1:5b:fd:ef:52:7b:3f:1a:08:89:75:84:
20:26:c8:88:23:8b:5f:c2:bc:f3:2d:f7:e1:d8:24:c2:9b:c2:
98:73:93:03:6b:4d:40:4c:fa:54:03:7f:4d:40:ce:5e:16:dd:
84:30:9b:e6:b5:6e:c8:93:77:a9:fa:cd:8f:a9:7e:b7:45:36:
92:53:70:f3:04:cb:3b:1a:14:14:75:fe:a2:68:27:e0:26:8f:
a6:a5:ae:a3:6d:09:3e:da:e9:c1:f8:18:99:9f:d3:be:3a:49:
f2:7c:cb:26:71:58:40:6d:6f:99:a1:7b:18:3d:a2:e1:f7:56:
f7:47:b1:98:15:5f:c8:83:c8:a9:fb:d0:5c:4a:f9:ac:5e:bb:
73:b5:30:51:90:f4:80:4a:ce:83:6e:6d:7d:e3:60:5a:fe:1d:
57:44:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:15 2026 by rpki-client