Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: /r1feTSTyUw0AnKAW5culmyvwekLd5wk6c6Hmc1hCQU=
Subject key identifier: FF:81:BB:FF:2A:E6:10:19:9F:DC:2C:29:7F:B1:46:0A:A0:69:D2:0B
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 019D2AE07B981ECB659405CA486802F95855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 41
Signing time: Thu 26 Mar 2026 16:00:47 +0000
Manifest this update: Thu 26 Mar 2026 16:00:47 +0000
Manifest next update: Fri 27 Mar 2026 16:00:47 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: OyIWEbfhNqzNpnq4/F8dLVY0A58fd5d324BD7370mYs=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:7b:98:1e:cb:65:94:05:ca:48:68:02:f9:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Mar 26 16:00:47 2026 GMT
Not After : Mar 27 16:00:47 2026 GMT
Subject: CN=ff81bbff2ae610199fdc2c297fb1460aa069d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:df:52:2c:af:38:c8:d0:cf:95:eb:cb:ea:
77:18:6c:91:14:2b:93:d5:7f:de:2f:78:84:71:3a:
74:62:2a:c0:19:32:58:04:50:ec:f7:14:37:25:63:
12:7b:74:ed:1c:b0:29:3d:9b:a1:33:e2:1d:42:6e:
b0:ab:3d:81:54:40:9f:dd:7d:46:c7:e9:b7:fd:24:
b4:05:6b:1b:78:b1:5f:a4:f9:95:ce:5b:d8:74:ce:
0d:2a:9f:b5:f7:20:77:ca:6a:b5:f7:53:6e:c6:67:
e2:0b:64:66:e1:37:ae:81:9d:3e:79:6b:91:5d:64:
f6:89:86:0a:5d:bc:5a:fb:99:1b:69:1f:3f:17:c8:
4e:9f:7e:b5:50:2b:9b:e5:e9:92:71:ca:46:98:6f:
50:bf:94:49:bc:ad:19:a3:aa:79:7c:13:5a:78:90:
f5:80:78:bc:84:4b:17:7f:27:cd:e0:0f:58:77:71:
b3:75:43:58:ad:7e:b0:eb:80:84:cb:58:66:ac:f9:
09:ef:cc:10:f1:af:07:d9:c7:0d:5f:f8:74:df:c8:
93:1e:66:1c:db:e5:42:36:e7:d6:d2:2a:7c:cd:f2:
cc:c8:ed:a1:f1:8e:63:6d:e1:6f:b4:62:7b:51:86:
21:0b:51:c6:0a:25:19:ec:c3:ff:23:f3:b2:0d:90:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:BB:FF:2A:E6:10:19:9F:DC:2C:29:7F:B1:46:0A:A0:69:D2:0B
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:d8:5b:ba:77:cd:85:fe:c3:c9:30:4e:64:df:3d:a0:4f:
b6:6c:e9:74:2f:ce:c8:69:53:5b:f1:eb:54:2c:fd:a3:b2:9b:
c2:2c:23:62:5e:61:40:e8:69:2d:ef:98:61:33:55:6b:d7:cc:
05:f7:1c:90:82:6b:43:5f:29:1f:26:32:1e:b9:0a:d8:95:cc:
77:44:06:b6:7d:e5:d3:d4:50:23:5b:56:fa:dd:ce:3b:72:b5:
b9:b3:6e:5d:e9:72:51:44:a1:84:21:23:48:1c:78:e0:83:64:
68:2b:5a:ae:88:6a:ab:50:7a:4e:71:cd:6c:1b:89:ae:cb:92:
26:3b:41:25:79:14:85:52:ff:1c:88:1c:09:49:da:4a:d4:50:
c6:f8:c6:34:b6:a9:2e:7c:3c:9f:b0:48:5e:df:27:7c:d8:98:
ba:51:ab:58:46:a2:1a:83:6a:ac:76:3f:b4:a4:91:31:cd:4a:
7f:b0:c0:7c:79:14:6e:d1:86:f0:a9:30:b3:9e:4f:7a:e0:4f:
17:dc:84:32:98:98:b8:63:68:55:fc:1f:4d:f4:8f:ec:15:05:
7a:47:c6:5b:e2:ec:bc:20:79:ba:52:70:f0:0a:d8:f4:e9:8b:
f6:98:95:82:45:84:54:89:f6:4d:22:ee:3d:58:35:96:f2:fc:
46:7f:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:13 2026 by rpki-client