Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: rfG2fXJUEZzS5cjNm4JMPB7vfjhcqDKE/WVUeoCmD6Q=
Subject key identifier: 65:3C:AB:C1:0C:CB:29:B1:82:B5:1A:2C:D3:EB:56:F1:A4:B4:0B:78
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 019D284D67AA0C6C58EB81291AB3FD5AC914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 185C
Signing time: Thu 26 Mar 2026 04:00:54 +0000
Manifest this update: Thu 26 Mar 2026 04:00:54 +0000
Manifest next update: Fri 27 Mar 2026 04:00:54 +0000
Files and hashes: 1: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: zJF9xRQzEja3/anopwmLDFuYHCuPhZy7xa5Gvdh/uDk=)
2: fIkb69ZuPAj_lkNlkF5stv3pzy8.roa (hash: HcfpVtDwRtdGIEcmlCtRPcGYYq9FoTPjwQjdNlk5s8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:67:aa:0c:6c:58:eb:81:29:1a:b3:fd:5a:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Mar 26 04:00:54 2026 GMT
Not After : Mar 27 04:00:54 2026 GMT
Subject: CN=653cabc10ccb29b182b51a2cd3eb56f1a4b40b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:82:ad:14:4c:db:29:29:a8:53:f8:ee:38:
82:cb:82:df:2f:92:0c:cd:fa:5c:79:da:19:f0:10:
ba:9a:d4:46:f0:1b:b0:f1:69:6a:e0:fb:94:23:db:
88:d4:72:6d:85:90:d1:37:71:fd:a7:c8:3c:8c:b0:
cb:c2:c8:8b:7c:1f:84:e1:0f:7e:d3:26:44:a7:2b:
7b:d6:48:0d:80:59:6d:36:1e:9d:06:64:65:c5:b5:
c0:bf:24:ee:71:14:20:a1:f4:70:f4:4d:08:f5:78:
7b:cd:24:b0:4c:a4:5d:42:f2:20:5b:31:11:57:ea:
a1:95:80:c2:6e:4d:9c:6c:b7:d8:fc:a4:c6:df:70:
1f:32:0c:6a:a1:da:69:8e:a3:02:46:d5:58:25:fb:
d2:e4:51:95:16:fa:7f:55:fe:9f:34:59:f6:03:ef:
1b:50:6b:9f:85:f4:fa:64:07:3e:bd:2d:45:50:e5:
dc:6a:99:e1:d1:a0:a7:1d:e6:07:5d:c5:4b:9f:12:
cf:59:8e:00:31:f4:94:a4:0e:e7:79:4c:fb:8b:97:
15:ee:84:68:65:19:6f:f5:a7:b8:f8:6b:fd:73:6b:
13:e7:80:3d:ca:75:33:9b:d7:4f:f5:36:1e:b0:44:
45:85:b3:3c:2e:6f:7a:ea:d2:ea:e5:15:50:4a:be:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:AB:C1:0C:CB:29:B1:82:B5:1A:2C:D3:EB:56:F1:A4:B4:0B:78
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:e6:8e:0d:2f:25:b4:2f:40:4a:cc:00:4d:e6:be:42:24:
d8:3b:5f:ff:44:12:b8:e7:50:10:37:01:a9:74:3d:68:c7:d5:
29:40:b0:9f:d9:37:d8:14:2a:8a:02:a5:cc:c6:4a:ec:e1:8f:
2d:f1:8d:de:cf:58:23:b5:8b:86:c0:5a:2a:16:84:a5:cd:d7:
04:67:b3:10:ad:7a:6c:64:fa:66:a3:80:1b:f7:27:4f:0e:2b:
e1:f4:18:71:6f:ee:71:be:a0:d2:44:75:db:94:0f:9e:4c:ff:
f3:b7:f2:48:5e:9d:01:ba:13:7a:76:32:db:6f:33:42:fb:9a:
0c:ba:6a:ef:26:d7:3d:ec:66:71:87:3d:a9:56:fd:df:f7:80:
3b:36:62:2b:36:bc:7a:32:96:43:c9:35:1a:8d:bd:a9:f2:2c:
dc:25:ed:1a:38:81:95:0e:fd:fa:73:4c:c7:f0:7f:67:1a:31:
7b:79:78:53:de:bb:ba:ba:35:52:ac:63:9e:7b:75:be:13:df:
20:75:e4:f0:3e:1d:4b:ca:3a:98:43:4e:c0:d9:03:41:d4:56:
33:94:5b:a1:e4:27:28:cf:5a:b1:65:a0:06:b8:da:72:15:dd:
eb:1b:9a:c6:b8:86:8c:b3:1d:02:a1:7c:c4:82:54:e7:38:69:
2b:e8:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:58 2026 by rpki-client