Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: Gy6on8fCnVx60w0oMgVXNt4olX5rAwoTzW/FPawkO2k=
Subject key identifier: 73:7F:0B:41:B4:05:09:E2:A8:47:AF:B3:8E:4A:8B:8A:B8:8F:45:A5
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 01A0CDB58AC099716E553E2A89994CE1F647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 0223
Signing time: Wed 23 Sep 2026 10:00:21 +0000
Manifest this update: Wed 23 Sep 2026 10:00:21 +0000
Manifest next update: Thu 24 Sep 2026 10:00:21 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: jO7WGb0jeOUSzPE0uRKn69Z7YgzLlETJvB3v38Wwm3M=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:8a:c0:99:71:6e:55:3e:2a:89:99:4c:e1:f6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Sep 23 10:00:21 2026 GMT
Not After : Sep 24 10:00:21 2026 GMT
Subject: CN=737f0b41b40509e2a847afb38e4a8b8ab88f45a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:1c:01:91:ca:b9:15:85:00:0a:ef:10:7f:
98:fa:b7:b4:27:df:70:bb:aa:df:07:dc:fb:0f:cc:
d5:ab:70:91:f1:ef:d9:82:6c:89:90:75:de:07:69:
a5:a5:2d:6a:33:4a:7e:53:7d:90:bc:25:86:fa:d9:
7f:df:c8:52:4f:bc:1b:48:42:bc:18:8a:29:4c:e3:
cc:77:2c:ff:3c:db:59:12:88:ac:1a:97:99:7d:20:
0e:9c:9c:27:30:c5:67:df:b3:b5:98:29:00:f2:f7:
d2:1c:4f:0b:54:64:91:8d:36:9e:71:13:c3:d5:e6:
58:f8:37:12:00:29:78:01:6a:3b:39:af:cd:00:9d:
97:e0:a5:bc:6f:7b:e6:a5:b1:bf:54:06:15:ea:d2:
ac:a7:5b:15:5a:00:66:a7:ff:83:71:20:a4:0e:9f:
e0:e2:55:64:19:6f:ec:eb:e3:84:47:c7:ef:16:5c:
b8:1c:51:0b:e0:9d:9a:30:f7:17:8b:65:58:59:db:
d0:f8:5f:cc:b3:65:e2:a5:42:e4:9a:00:f7:51:57:
4f:b3:f2:b7:ec:f8:d9:de:e2:65:2c:26:3e:f7:23:
1f:bd:3e:1d:00:5e:79:8c:98:6c:c6:1b:97:8b:89:
e8:9d:d5:a7:4f:26:ac:05:4b:5b:3f:55:a2:58:cc:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:0B:41:B4:05:09:E2:A8:47:AF:B3:8E:4A:8B:8A:B8:8F:45:A5
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d2:c9:8f:01:1c:67:dc:8a:58:c6:c8:ec:c1:9d:df:08:15:
5f:42:b0:92:5b:a4:00:c4:dd:7b:a6:51:aa:a5:41:07:18:54:
61:91:2c:f6:ed:dc:d4:e6:95:6f:c3:28:ca:35:90:ff:bb:b7:
7a:95:6e:6a:51:54:30:67:49:c0:2b:9b:5b:c5:4c:f8:f8:ca:
de:87:d1:41:4f:6a:4f:63:73:55:a0:d4:b7:6d:e9:83:16:66:
e5:62:4e:c0:bc:d2:22:74:de:d3:2d:64:a7:2e:69:05:48:a3:
ec:53:3d:cd:66:c9:a9:f2:18:67:89:ab:24:9d:82:85:57:20:
06:64:3f:3c:7c:d0:89:2e:53:3a:be:48:1f:55:b3:d3:5d:f4:
e2:93:e4:43:25:36:87:d8:c3:14:58:50:74:68:20:62:61:15:
aa:c5:c0:27:e8:be:e9:00:de:00:be:f5:67:bb:b2:68:7b:39:
4b:c0:52:fe:42:4b:66:e6:72:51:c1:ba:99:65:87:6c:35:7c:
13:6a:ea:e3:a7:2a:fb:2d:b1:02:4f:41:b1:de:9f:9f:af:85:
c5:90:98:ee:ca:00:6b:cc:a0:ca:6c:85:55:c6:83:c3:e2:3f:
91:a7:a0:80:25:9d:79:8c:63:ac:5b:ce:5e:6e:13:32:00:f9:
a6:32:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:25 2026 by rpki-client