Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: gK4LQAYleU+lne2KWWg1AgdsRhe1IML7Hg5h9bKG0qI=
Subject key identifier: 58:D7:55:27:D8:FB:AD:2C:E5:6B:33:EE:FD:7C:F4:79:21:61:A6:D4
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 019D2816908BD8D6F569FECD6923023710D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: jIloAo+tEaYLqw80xZotTQYUlI/8L1F/UcuQb9rhVeA=)
2: XWKWcGwWuxK442AqUwQOJoI0Riw.roa (hash: lPCDTJoNAlTYjYOQxRc8IFp9k2/Nouu3lyu3633P8Ys=)
3: vaTMXsKj9s2mYu4jK85sAAqXJgk.roa (hash: 9Sx8ua7dYYmRjEMlZOB1LM5xRgfZw4Tr41DAQH+beRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:90:8b:d8:d6:f5:69:fe:cd:69:23:02:37:10:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=58d75527d8fbad2ce56b33eefd7cf4792161a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:de:f8:64:cb:9a:b3:f1:2f:dd:50:be:38:
b3:c6:74:35:f7:e7:a0:06:1c:07:87:81:bf:6e:a4:
3c:e4:af:0a:d2:05:27:d4:f4:38:de:a6:6c:ce:10:
83:c6:02:aa:38:b6:5c:c8:ca:aa:72:d6:fe:fe:fe:
6e:fd:48:4d:ed:0f:80:44:7f:eb:e0:a6:95:97:32:
8b:fc:e2:d3:8f:f1:d7:5b:c8:38:4f:8a:36:8f:05:
53:4a:2c:ed:9e:bb:bd:48:c8:66:41:c3:d3:ba:75:
6c:08:5e:97:c7:92:2e:e9:4e:c4:0d:63:60:1f:ab:
5d:6d:dc:33:a2:de:1b:13:7c:5d:d1:af:97:4e:be:
71:d1:03:8a:1f:94:99:fc:99:84:a0:62:59:b0:55:
ce:fe:a9:ff:e1:f3:b5:74:90:3b:22:12:9b:cc:cc:
39:e5:d4:e5:40:4c:26:8b:0d:39:fa:73:ab:c1:f5:
bd:1d:f3:36:4c:b1:6f:96:db:51:53:4d:7d:03:3e:
5f:35:e4:2f:3c:ce:65:9e:96:d9:4e:68:0f:82:bb:
b8:ab:77:0f:d5:dd:f6:91:23:3e:3d:72:30:38:f7:
75:62:02:f3:60:dd:da:f5:89:0f:d8:db:03:6e:c2:
4f:67:8d:3b:d0:67:9a:25:ff:2c:ba:68:fd:ee:28:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:55:27:D8:FB:AD:2C:E5:6B:33:EE:FD:7C:F4:79:21:61:A6:D4
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:30:dc:cf:63:fb:44:7d:72:26:7d:16:22:25:4f:3c:20:
44:ba:b6:0a:b6:de:2c:47:70:99:a1:7e:af:23:11:d4:a8:58:
3e:12:d2:0e:b1:85:04:6c:c0:0c:82:38:32:78:bb:3d:0d:c6:
f0:5a:c2:33:2a:32:0b:83:e7:fb:10:13:5c:97:e4:7d:3c:a4:
8e:7d:75:85:67:9b:fd:0e:74:b2:cc:f4:66:dd:df:e7:e6:4a:
30:f1:74:0e:70:df:85:7c:d8:22:3c:5f:31:b8:b7:d9:23:ce:
de:fd:da:da:28:7a:5e:ca:21:13:92:e7:5e:37:c2:e0:d9:5b:
40:66:2f:65:e0:16:53:21:ce:fa:72:cc:f8:18:d4:86:47:69:
46:ac:47:51:c6:03:f5:3b:4a:14:75:c5:88:b2:21:af:14:37:
2f:a3:33:bb:18:f0:93:e2:4e:88:f6:70:36:57:a4:70:8e:4e:
85:d0:45:5a:3a:24:83:a3:48:78:be:bc:3a:f9:b0:01:04:d3:
f7:76:19:62:9a:ec:f3:5c:d2:8c:e5:c1:fa:1e:67:c6:70:e7:
f1:8c:d8:9e:c4:97:48:e6:c3:63:cc:2e:e1:05:38:5d:de:ce:
19:88:6e:21:56:c3:d5:ed:81:59:f0:67:20:12:95:a3:20:83:
29:b5:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:32 2026 by rpki-client