Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier: IFBd02qFrRYK/hf5DD1lvEdBIHRJ8PIqwRX9cIZzxfo=
Subject key identifier: 53:2E:49:7A:64:A6:62:3D:A2:BD:B3:C0:FD:07:3D:6F:4C:7A:00:7F
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 01A1DEDE0A4D6BCFDF30EDB82B8C5E93DADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number: 1943
Signing time: Sun 15 Nov 2026 11:00:55 +0000
Manifest this update: Sun 15 Nov 2026 11:00:55 +0000
Manifest next update: Mon 16 Nov 2026 11:00:55 +0000
Files and hashes: 1: FrTYd2n1mPMmnQqlw_GA42S0gns.roa (hash: 4LYehQSenwwS3QpKE9QMEjIzFleWyGwk4ZhWD2c4154=)
2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: dDhySO08QYnltvjdTI4649OqjpgPUD5SlodWBWK5VjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:0a:4d:6b:cf:df:30:ed:b8:2b:8c:5e:93:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: Nov 15 11:00:55 2026 GMT
Not After : Nov 16 11:00:55 2026 GMT
Subject: CN=532e497a64a6623da2bdb3c0fd073d6f4c7a007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:77:ad:c9:67:6c:a4:88:3c:56:f0:b0:9b:
51:9e:81:d9:e1:1d:1d:ca:50:a3:2e:2e:f1:d2:72:
08:74:22:bf:c1:e3:be:65:2a:7c:fe:f1:91:e8:76:
91:ab:85:b7:72:18:ae:4f:ae:b3:2d:4d:54:99:52:
e9:26:f9:b1:25:2c:e4:92:64:8a:5f:52:9f:9b:eb:
2c:c6:04:48:7c:ac:03:20:4d:0a:bd:64:2d:d4:ad:
b4:68:c5:85:f4:49:57:08:e3:3d:37:eb:b4:2e:de:
6c:7d:26:1a:cd:a2:37:f6:ce:22:69:e5:1b:63:09:
63:fa:49:90:b7:4f:f6:2e:cc:92:bf:e8:8f:71:9d:
8d:34:42:44:53:b0:a7:ae:04:8a:dc:3b:b8:68:a7:
79:c4:ad:7d:3e:f0:a4:22:cb:a2:ff:74:97:00:b5:
c7:77:49:05:44:70:ff:f7:2e:1f:b2:d4:e6:f8:7f:
d4:7b:3d:ee:d4:a7:80:1f:dc:e2:7e:2e:d7:1c:ab:
25:63:37:85:28:72:f8:ba:7b:52:76:e8:3d:3c:34:
fa:77:72:93:8d:cc:4f:e2:d7:16:9e:04:ef:f7:a1:
cb:4d:bb:d6:6c:3b:44:89:9a:66:eb:d0:9a:94:3c:
00:56:14:6b:0c:b0:47:4d:19:f1:66:07:a1:85:7d:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:49:7A:64:A6:62:3D:A2:BD:B3:C0:FD:07:3D:6F:4C:7A:00:7F
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e8:f9:03:ae:5c:e8:b1:9e:81:c2:6b:28:f2:2f:ba:db:b0:
ac:ac:db:0a:4e:78:ab:34:f5:f9:1f:31:ab:94:4d:f4:ae:e5:
57:23:8a:60:9f:2a:70:65:5f:7d:38:85:03:37:46:81:76:42:
ec:25:39:8b:d5:51:9e:7f:4b:93:4f:7f:d8:f6:f0:60:ce:2f:
a2:f2:fa:c0:98:d3:26:68:6c:9c:8e:0e:cf:ec:8b:ea:cc:9f:
24:65:0a:e2:1f:a4:3e:f4:3f:7c:bf:f9:96:65:9b:c3:e5:66:
b1:c3:ae:7a:65:78:99:23:0d:a6:11:ff:93:16:55:0c:27:66:
06:54:d0:b8:f1:7d:31:2d:07:75:c8:14:e6:28:71:86:c6:44:
6d:0b:0a:34:ec:69:56:21:c4:83:b8:c1:37:8a:7d:7f:e8:08:
af:05:6f:16:a4:a7:21:77:fe:69:84:8a:07:9d:0b:66:c6:af:
d0:8c:15:af:e6:be:d9:1b:c4:e0:f5:ce:db:2e:19:44:9c:87:
29:e0:34:d0:0e:e6:7c:b3:35:b6:f6:38:11:86:e7:aa:da:4c:
45:66:5d:a7:97:4d:72:16:61:de:8d:4f:38:1c:6d:8a:83:3c:
b3:7f:8f:82:89:99:7a:7e:a3:57:8f:b1:8d:01:6a:f5:16:04:
84:12:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:54:28 2026 by rpki-client