Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: sXSfA3VEW5JmIoaUnfEh/YlnYgrTVMG+cjlQJheUQCs=
Subject key identifier: 16:36:27:EB:E2:F0:9B:F5:27:50:C4:04:D8:83:A5:83:B5:7C:2A:0D
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 019E1EA3AE51E7B3A30F57A23427C7DE3F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 185D
Signing time: Wed 13 May 2026 00:01:43 +0000
Manifest this update: Wed 13 May 2026 00:01:43 +0000
Manifest next update: Thu 14 May 2026 00:01:43 +0000
Files and hashes: 1: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (hash: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: A+2FwDuvLXupMZH94hRzGpenNxLUkmjGt4ioAPNYVqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:ae:51:e7:b3:a3:0f:57:a2:34:27:c7:de:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: May 13 00:01:43 2026 GMT
Not After : May 14 00:01:43 2026 GMT
Subject: CN=163627ebe2f09bf52750c404d883a583b57c2a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:cf:67:b3:76:49:8a:bd:83:39:23:db:bc:
12:93:c1:ed:da:27:d0:71:fb:9f:86:f7:2d:2e:35:
08:00:c0:c2:9e:ae:14:e6:90:73:f6:c9:a1:47:f9:
31:c2:86:e8:b0:f2:e5:3d:c9:91:ab:2d:16:58:aa:
48:e0:72:4c:fb:86:ca:e9:5b:43:8b:5f:ce:4f:5f:
c5:95:09:f1:9e:9c:ca:5f:0d:b2:ba:11:93:0c:6f:
1f:d0:16:3c:2c:7b:2e:42:07:c3:c8:77:05:e8:b4:
d5:d2:60:a7:5a:4d:8c:05:63:12:fc:20:0b:cf:9e:
9f:53:18:76:5b:e7:b9:3e:11:1e:f6:4e:85:cf:47:
3c:c7:70:26:c7:95:0d:71:40:05:cb:9e:cf:28:6c:
c8:17:63:c1:b5:f9:27:6c:0d:71:22:4f:4b:9f:39:
ea:f3:dc:32:98:18:1f:0e:43:f5:33:e8:0d:43:df:
f7:d6:e3:20:0e:9e:6f:dd:12:2a:3d:6e:6b:8a:b0:
a0:f0:91:6d:2d:43:34:54:a0:4a:70:49:71:c5:46:
45:59:7c:4e:7b:e5:07:06:ae:06:4e:41:3c:65:5e:
0a:e4:a4:fd:5e:60:cf:e7:58:6c:1f:37:48:00:8b:
04:c7:ec:e8:b9:b3:2c:a5:ae:a1:86:ad:4c:3e:a4:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:27:EB:E2:F0:9B:F5:27:50:C4:04:D8:83:A5:83:B5:7C:2A:0D
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:0d:13:ed:e6:c7:6a:cb:6d:f0:11:66:2b:25:83:39:21:
94:1b:35:d1:95:eb:6f:57:8e:2f:45:df:19:e3:ae:71:15:5a:
8e:7a:aa:15:3f:be:53:6f:1c:3d:44:a0:a7:b2:15:38:eb:98:
f6:4d:41:3d:69:9f:c9:d4:72:4f:f2:d9:8d:c4:f3:83:df:0a:
9f:66:fa:28:60:65:e2:3e:6c:b2:a4:a5:b5:4f:77:51:c9:aa:
22:91:55:3d:53:de:8f:27:4b:00:a1:bb:e0:15:1c:0e:13:50:
aa:77:b8:7b:2d:61:2d:d7:4a:5a:55:5c:32:6b:c3:7a:8a:95:
29:9e:3b:ef:6b:48:2d:b2:9c:2d:06:2a:bf:ea:92:12:0d:9d:
5c:b3:31:bb:56:56:9b:2e:32:5b:ff:46:5b:d0:3b:65:9b:10:
90:8c:cc:79:64:03:5d:42:59:4e:2a:1d:1c:44:99:ff:dc:12:
9b:ef:89:b7:e2:ec:72:12:ed:21:c7:e5:b3:c1:cf:ce:63:03:
38:35:d9:ea:bb:a0:58:21:77:a1:13:84:a1:08:68:35:b6:e6:
be:da:a1:3d:34:f5:aa:08:b3:7d:9c:d1:6b:76:38:04:30:81:
f1:a0:9d:5c:5e:c6:dc:0c:6a:f7:ed:3a:06:89:d3:b9:7b:d7:
2a:04:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:49 2026 by rpki-client