Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: 1a24plKhhfK5Tdk0dJt5gCT8p7jIDqCouA7tZx8qpvQ=
Subject key identifier: 13:9D:89:AE:35:C8:F1:9D:6B:3F:F6:A0:4C:E5:77:1F:7B:6E:4E:65
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 019D2583967A87408550662DA654CC9EB63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 14A4
Signing time: Wed 25 Mar 2026 15:01:13 +0000
Manifest this update: Wed 25 Mar 2026 15:01:13 +0000
Manifest next update: Thu 26 Mar 2026 15:01:13 +0000
Files and hashes: 1: TlfmAzV7GWwY3rXMRpeYUl7aKdw.roa (hash: 5eOHO+lm41+VyItnXbH9JnN/kNKtBVpRjgRNWcBchwM=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: 45cLr0ZuunQ8D+wTZruuI/iDGCxP4k30wNMb+xYwEsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:96:7a:87:40:85:50:66:2d:a6:54:cc:9e:b6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Mar 25 15:01:13 2026 GMT
Not After : Mar 26 15:01:13 2026 GMT
Subject: CN=139d89ae35c8f19d6b3ff6a04ce5771f7b6e4e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:68:d8:1b:97:b4:26:fd:53:d2:e5:31:11:
0b:9b:19:a0:3f:8b:24:cd:e0:fc:59:b8:2b:d3:b5:
4f:4d:fa:92:6e:38:f3:0d:d1:ef:aa:c1:3d:63:1c:
88:ea:26:58:27:74:fc:0e:21:4d:8e:70:45:38:53:
1b:85:03:7f:5a:31:eb:ce:44:74:35:a4:90:92:9c:
79:77:70:96:84:be:61:30:cf:bb:8b:66:a1:1d:96:
c6:36:85:35:e5:f9:5a:c4:9b:8e:e7:bf:95:68:6e:
1b:f6:5b:ab:73:2c:7f:e2:56:91:5c:bf:39:cf:d3:
ec:0e:32:aa:3f:53:53:a1:e1:be:e6:3f:c2:15:bf:
6c:f2:ed:4e:de:81:ab:e6:93:ff:53:9c:cb:00:20:
67:75:a8:56:83:66:5a:3f:21:a2:27:a5:55:e2:d0:
44:a2:34:c1:f8:06:16:c2:00:13:40:2c:2e:09:0d:
f0:b9:b0:2f:90:c2:94:78:8e:6b:c8:5d:6f:d7:c5:
ea:01:2a:d6:d5:00:a4:25:6b:94:28:9b:00:85:6c:
23:3e:83:44:1c:44:bc:9b:d7:56:d0:43:ca:1f:83:
e7:c4:23:b3:38:2e:f1:e4:c2:d5:bd:87:7c:69:f0:
d5:5e:77:f4:64:4e:3e:16:4d:f8:7c:28:97:5b:41:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:89:AE:35:C8:F1:9D:6B:3F:F6:A0:4C:E5:77:1F:7B:6E:4E:65
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:3d:cf:84:a9:71:78:ff:3c:85:62:95:ba:f6:f1:49:ac:
78:86:d7:05:f5:83:3f:9f:f7:ad:0c:db:aa:f4:92:b1:53:5b:
a3:33:e9:a2:ef:87:15:d4:05:35:7c:f3:07:e6:a0:a6:3b:7f:
83:ae:b3:d8:ac:32:98:18:02:c3:b4:f6:96:e7:7b:d8:91:0c:
86:4b:ea:1b:3a:08:9a:be:ee:6a:07:bf:92:39:78:05:8b:b0:
05:ee:67:0c:b6:92:b2:55:5d:6f:94:79:e6:14:48:73:62:8c:
77:2f:b5:94:56:b1:f7:02:29:4a:92:20:5a:64:27:02:c6:be:
62:4f:38:63:e0:d5:af:54:20:59:f5:29:0f:48:74:a5:8c:eb:
63:21:95:5a:bb:30:aa:14:0c:1b:4e:52:08:37:f1:9f:f3:ee:
f7:76:da:53:c7:e1:59:c5:ec:00:42:ea:15:40:09:8d:00:e3:
83:da:29:24:b3:7e:6d:c6:1a:60:03:74:2e:9c:41:a5:8e:ea:
be:e2:dc:13:cc:f5:43:66:ef:0f:32:69:98:73:53:08:29:dd:
83:d1:4f:a7:ea:95:8f:2d:e7:92:08:ac:18:a4:47:b0:66:f2:
7a:e6:d9:ff:fc:a7:52:77:36:1c:b0:30:a5:99:1b:4f:73:2f:
8a:9a:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:48 2026 by rpki-client