Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: 1GiM23W/FDRny9A/9yOiILTWm7kv8V07H74IzaxoBVU=
Subject key identifier: 51:0A:06:52:70:40:07:80:68:8C:A7:C1:EB:B3:34:5C:44:C8:B0:36
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 019D27039BB9FA84532B608425B4EB6CD261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: npRgnfNaZkO170STBgTp/TYYbkY4zYC7EwDnI4DaJ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9b:b9:fa:84:53:2b:60:84:25:b4:eb:6c:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=510a065270400780688ca7c1ebb3345c44c8b036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:e7:e8:bb:51:c5:37:3f:09:00:63:02:f3:
ef:62:b7:6c:a9:e5:55:98:4d:ac:78:f8:5b:06:f2:
06:de:af:81:18:b5:ef:95:fd:a3:2a:2f:4d:6a:0c:
05:77:a9:4f:d0:c3:dc:7d:8c:70:50:0c:b2:ad:95:
c5:a3:a6:7a:4d:a0:69:41:d7:ed:54:fe:1e:83:8f:
c9:bf:a2:e7:1b:b0:c9:43:6b:86:4f:28:a5:6a:49:
0e:85:e8:44:21:71:5f:a4:28:0c:0c:b3:4f:39:d6:
99:dc:e7:bb:56:59:94:2a:91:d0:2a:57:d7:01:bf:
8a:35:9a:ed:6c:95:7f:41:06:d3:d4:9a:79:2f:a9:
5b:97:1e:00:3a:9f:7e:ca:ad:b9:95:8c:cb:c3:a8:
0d:20:42:b0:ca:d8:ce:0a:86:11:6f:28:b1:20:96:
41:c2:6f:16:c8:49:b1:1c:71:37:a1:3f:db:15:93:
22:49:94:49:48:05:9c:b3:eb:47:c1:da:3d:d4:bd:
62:c0:f3:50:f7:49:e8:9c:cd:a9:bf:d8:bd:69:77:
79:41:2d:e4:a8:1c:ac:80:6f:c7:9f:7b:68:59:1d:
5d:43:27:4c:76:f8:1e:a6:35:2f:cb:ef:c5:88:c2:
48:23:16:25:62:04:c4:0a:db:e9:a3:79:3a:b1:63:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0A:06:52:70:40:07:80:68:8C:A7:C1:EB:B3:34:5C:44:C8:B0:36
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:75:26:33:5b:11:83:f1:91:d0:77:61:47:ad:c0:8a:34:6d:
95:f9:48:e5:56:ba:81:d6:bf:e9:da:01:fb:32:47:f6:dd:c2:
19:c9:72:7d:c5:05:b5:ea:65:00:1e:a0:08:f7:5e:fc:cd:07:
4b:c9:c4:e8:75:a5:be:a6:00:a7:77:69:6a:9f:b4:d4:2c:c0:
7e:67:a6:00:d4:e6:bc:f7:eb:af:43:6c:2e:05:44:4d:db:e2:
a6:04:c5:d1:7b:21:ba:84:b0:28:04:a1:b8:e9:ba:ff:fb:d9:
29:0e:79:63:2a:cc:18:6c:6d:be:f1:35:7b:a8:0e:fa:25:37:
71:96:43:11:9b:dc:23:3f:e8:43:03:90:f8:40:aa:1e:b3:cc:
ec:89:fa:6e:a1:2e:00:78:81:bb:53:45:34:bd:38:50:65:92:
e4:93:54:c2:99:f9:37:15:80:b6:55:d9:f0:90:28:e3:79:19:
4e:39:b3:b8:ca:31:79:dc:d4:42:d4:9b:29:f9:e2:6a:a2:dd:
74:f1:ee:05:f5:f3:d8:26:8f:28:b0:06:ed:26:e7:3a:16:4c:
27:e0:3e:8c:a9:ef:39:2c:d2:02:87:a6:82:44:bb:56:04:7a:
9d:ba:c9:2f:e5:e2:fa:99:20:15:78:9d:dd:99:08:7a:ce:e2:
e3:d0:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:28 2026 by rpki-client