Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft (raw, json)
Hash identifier: hAyQjr/jUPeeBydQ8xP49eqFfOXS1VVXgbgdNYzEhyg=
Subject key identifier: 82:7C:F8:F9:83:4E:11:A6:67:AA:03:A0:6D:9E:81:FA:5C:19:97:E9
Authority key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
Certificate issuer: /CN=590bbeab48842a41afac4921d1357838b6fe6c87
Certificate serial: 019D2A3BEAD8F7D82E5F5E0566DE0DA41D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
Manifest number: 017D
Signing time: Thu 26 Mar 2026 13:01:02 +0000
Manifest this update: Thu 26 Mar 2026 13:01:02 +0000
Manifest next update: Fri 27 Mar 2026 13:01:02 +0000
Files and hashes: 1: 2fY4hZsSdTh_WzyCJONWuTPYXgI.roa (hash: jMpz0IEZreqrZP5N9+pawfm7cQg+jdhrHzZuUi3cLOw=)
2: WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl (hash: yU1Fts5Dp+K/5dosra7PU49qKclyC7hYmDrbi835nxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ea:d8:f7:d8:2e:5f:5e:05:66:de:0d:a4:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590bbeab48842a41afac4921d1357838b6fe6c87
Validity
Not Before: Mar 26 13:01:02 2026 GMT
Not After : Mar 27 13:01:02 2026 GMT
Subject: CN=827cf8f9834e11a667aa03a06d9e81fa5c1997e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:08:7e:bc:e2:72:9a:2b:ef:0a:13:c1:e2:
d6:b7:71:43:53:64:5f:41:40:70:95:41:2b:85:10:
9c:d7:53:30:0f:fd:3c:5e:27:13:71:b1:69:1d:34:
ea:2c:dd:6c:5a:1c:0a:3f:57:e3:1e:16:f2:28:5b:
a6:58:e5:2f:b7:99:00:58:ce:3c:c9:f9:a1:f7:c8:
85:23:c4:84:63:a9:44:49:50:f5:fd:c6:be:67:96:
03:00:72:92:7d:80:69:47:e4:b8:dd:45:2c:da:3b:
b3:89:a5:15:49:81:cd:13:5f:69:64:ad:55:6b:1d:
19:a2:0d:84:ff:38:bf:e1:85:56:0f:03:40:3e:9a:
c9:05:f7:0b:60:9d:73:01:90:af:bd:bc:6c:f8:8c:
3f:e5:60:3f:ca:71:cd:42:51:e8:b0:04:bb:b1:44:
64:f7:b2:49:1b:fa:fe:f8:15:d3:f9:37:73:dd:c1:
4b:91:a4:6a:51:fc:b5:ae:34:54:e7:d1:d1:6f:3f:
ec:03:9b:46:c4:91:21:61:0b:1e:22:19:72:25:95:
61:0b:ab:46:2d:22:d3:d9:bb:3b:6e:3d:a1:52:5f:
a2:52:d9:b6:c6:eb:b0:62:f2:09:50:ca:c9:b2:f4:
72:76:33:04:94:5b:6d:1b:1b:55:64:ab:db:f5:10:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:F8:F9:83:4E:11:A6:67:AA:03:A0:6D:9E:81:FA:5C:19:97:E9
X509v3 Authority Key Identifier:
keyid:59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:06:b9:a9:34:6b:f7:19:44:c1:c5:65:77:67:eb:23:7d:21:
3c:6e:3f:b3:cc:46:81:54:99:ab:0a:bc:a7:97:a4:f3:a2:93:
d5:df:9d:5c:3a:f8:58:0c:57:ff:80:6d:91:55:ce:51:fe:b8:
d7:38:a6:2b:67:82:15:88:a0:ce:31:c9:96:31:bd:2d:1b:70:
f5:bd:c6:bc:7b:03:1d:b2:40:a0:ff:e9:fe:4b:77:e6:8f:79:
43:c0:6d:a3:5d:9e:d6:65:0b:91:ef:49:7c:20:50:90:d3:d6:
da:d9:fc:be:41:39:ea:08:ca:27:86:71:cb:dc:18:95:33:f6:
d4:35:eb:41:b6:63:e1:69:0f:e7:61:c1:30:06:6a:d2:9e:22:
8e:41:5e:cf:3f:01:98:12:dc:20:84:1e:80:32:5b:80:1b:11:
92:9c:6a:9e:46:72:4e:84:5d:b0:39:46:cd:46:2d:d5:14:e7:
04:8f:35:a9:02:ff:25:dd:78:28:86:c5:6f:95:b0:c8:c9:45:
98:db:52:e3:ce:27:97:52:ab:b0:26:3c:db:d5:fe:e2:64:ad:
ed:cf:98:e9:eb:c2:2d:b2:9e:8b:f1:a8:e6:a3:7f:62:cc:15:
73:9f:4f:6d:64:6b:05:50:9d:7d:58:95:4d:dd:83:70:85:cc:
54:5d:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:54 2026 by rpki-client