Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: 91dZHXzCGXukzsh3srb/x+wwlbkgpwTHGo9nPqXY++0=
Subject key identifier: DF:45:1A:86:EA:8E:53:93:C5:0D:84:BE:36:EA:E0:4C:31:FA:17:4F
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019E1ED9981BDD019305AFAC268B87F0AD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0DA4
Signing time: Wed 13 May 2026 01:00:37 +0000
Manifest this update: Wed 13 May 2026 01:00:37 +0000
Manifest next update: Thu 14 May 2026 01:00:37 +0000
Files and hashes: 1: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
2: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
3: NjHKuubvlyQaDe6G06rOD1BcaRY.roa (hash: PZZctgeIeCE44qT9n7ZGgk3AP9NOWa0WxX8jRLoy034=)
4: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
5: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
6: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
7: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: 2txNtp2h/5B7gkZ6QmZP5iHRpN13rl8TRcUZfrsqmJY=)
8: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:98:1b:dd:01:93:05:af:ac:26:8b:87:f0:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: May 13 01:00:37 2026 GMT
Not After : May 14 01:00:37 2026 GMT
Subject: CN=df451a86ea8e5393c50d84be36eae04c31fa174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:58:1b:a8:06:09:66:12:44:ad:b2:36:99:
fc:a1:dc:24:6e:44:4f:80:55:d8:5d:8c:97:0a:c5:
92:fc:d7:ac:02:21:43:7e:4b:f3:3e:85:e4:8f:b9:
d8:79:0e:14:fd:1f:cc:cc:c0:d1:50:20:63:ea:08:
bb:3b:cc:5e:cf:90:9e:fa:ba:d8:68:38:d9:8c:ed:
0e:94:26:4e:6e:5e:0e:2d:d9:0a:3a:f4:65:f9:b4:
bb:46:1d:ac:77:6e:bd:e1:eb:1b:45:53:6c:27:5c:
3f:4f:f9:a5:61:47:71:6e:40:17:bc:d9:87:58:e7:
c8:f9:a0:e5:33:53:04:49:3f:a5:49:c8:e1:da:1d:
54:aa:ac:63:71:ea:9b:d8:3c:32:03:33:c6:17:e9:
42:eb:66:17:d4:ff:e3:d0:52:b4:d8:2d:68:e3:c0:
c4:26:cb:9e:8c:c8:72:d9:ef:c1:c9:28:fb:ea:a9:
a6:46:69:61:bc:51:80:86:cb:47:1d:e7:06:ba:93:
e8:ce:82:14:13:0d:c3:e5:3e:71:7f:da:ee:78:d0:
52:e7:a1:e0:c9:e9:2f:c2:73:b9:a7:a3:9f:f3:86:
95:17:04:b5:f4:53:cd:c8:cf:2b:92:b7:88:38:68:
67:f3:7e:e7:b7:9d:02:e1:68:3a:12:7a:88:7b:ef:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:1A:86:EA:8E:53:93:C5:0D:84:BE:36:EA:E0:4C:31:FA:17:4F
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:12:d0:26:41:90:a0:6c:43:59:0f:6f:c0:ef:66:b2:ae:5e:
65:30:29:e2:63:35:f8:2b:96:11:11:35:3b:ed:6b:5d:e4:6f:
e5:8b:fb:85:e4:0f:16:8d:34:40:5b:62:f7:a2:93:6e:da:b6:
d4:f1:f7:5b:cd:bb:e7:b0:a6:58:41:21:28:19:74:a9:93:33:
79:df:67:0a:14:46:64:84:77:97:ec:38:d9:99:31:ed:bd:88:
a7:69:0d:5b:0a:d7:51:21:d5:28:fb:0f:c3:b1:b4:99:0d:d9:
e6:f6:fe:49:71:c5:c6:93:ea:e5:aa:b4:54:f1:f7:33:b2:62:
09:4c:c8:46:68:e4:f7:48:18:af:ad:a1:f6:fa:26:01:21:56:
67:aa:d6:51:3b:e7:ec:a7:4b:53:0b:25:8f:a0:79:eb:57:1f:
a0:63:42:9e:27:fb:e7:00:3b:e9:2c:2a:f7:05:75:70:0d:cf:
f3:d1:bb:0b:9f:34:6f:14:da:0c:e7:79:93:70:79:35:69:c8:
c9:eb:35:6b:c7:f8:23:91:07:71:73:b4:ec:f4:31:28:3e:fe:
fe:ed:90:c3:43:1b:37:ab:be:b8:65:6e:25:36:8b:82:be:26:
09:57:74:ed:c9:37:9b:76:98:92:fc:4c:21:b6:c2:18:ae:a8:
45:f6:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:21 2026 by rpki-client