Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: A8fZCB8HlUe8CADcsb36DKF4Bx3/7PKOkfXWE2VcYUo=
Subject key identifier: AC:7E:B4:D3:E3:89:16:77:05:90:35:0E:36:E1:25:DD:DC:48:DB:CB
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 019D270497815D849FEBDAA8AA23A48969E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 04D2
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: T2r3/V509cLr7qDK30/igJfQkb2hom/DxuqbKxkAsoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:97:81:5d:84:9f:eb:da:a8:aa:23:a4:89:69:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=ac7eb4d3e38916770590350e36e125dddc48dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:5c:1c:39:cc:ed:80:79:30:68:e9:41:34:
cc:96:bb:c4:a7:ae:18:8d:d5:d4:2b:20:25:bb:97:
41:d8:ec:15:8b:e1:60:2d:c7:7c:e2:18:57:24:1e:
57:b6:7c:83:33:56:0c:13:c8:16:2b:6d:84:29:b9:
29:2a:34:06:68:69:33:33:bd:7a:47:94:f2:7a:fe:
50:e6:67:31:50:0b:4a:74:c9:0e:43:1d:7e:af:1b:
a2:cd:90:81:b1:ad:5b:e8:5f:58:b2:22:ca:2a:58:
13:6e:29:1e:39:4a:4e:7e:f6:ad:3c:b1:5a:f9:1a:
91:a6:01:d4:88:fe:01:1f:03:ea:9e:c4:ba:37:19:
11:56:2b:e9:e6:59:31:5e:62:05:52:a9:28:b1:f0:
c5:83:a0:91:36:e7:17:cf:2e:8e:d0:ed:9b:86:b5:
f4:56:0f:5a:3e:db:87:93:ab:80:eb:78:76:8f:18:
94:32:03:c5:ea:07:b6:53:2a:45:80:e8:a6:df:cc:
a1:35:6e:c6:0d:06:d9:37:b4:d5:00:3b:cc:13:01:
07:96:96:b0:83:f0:87:9e:89:59:8c:ee:97:db:2f:
37:a9:4b:f8:eb:84:38:97:e7:93:30:9a:31:2b:06:
f0:c7:2d:6f:c2:84:97:db:65:15:47:10:9b:14:c7:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:B4:D3:E3:89:16:77:05:90:35:0E:36:E1:25:DD:DC:48:DB:CB
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:24:92:01:4a:48:f9:9d:8e:2f:09:44:bc:3a:a6:1d:4a:61:
01:7e:db:60:21:1c:a7:c3:3e:8f:ca:b1:d3:9b:87:47:cc:0d:
7d:ee:1f:04:15:b5:34:1a:91:58:e2:66:78:34:7f:bb:1b:14:
76:a4:65:53:58:f8:db:34:5c:8d:0d:18:c6:f5:9a:bc:68:2c:
40:39:88:36:84:9c:c6:1f:fb:f9:cf:79:87:c5:fb:3c:4b:51:
e3:fe:72:f0:5f:49:37:58:07:f1:40:a7:6f:91:bf:53:4b:40:
ea:b6:07:61:90:98:e6:73:db:53:05:97:e4:13:84:a3:8d:0b:
56:43:38:74:f1:ef:4d:0b:2e:e3:91:74:17:5f:08:a2:a6:23:
e2:e0:f1:70:73:f5:96:e8:c9:b1:17:95:80:a2:37:0a:20:28:
f9:88:1c:b9:e2:d9:fe:2c:98:ff:7d:09:5e:4b:4e:f8:04:6e:
78:4d:a7:cd:a8:d4:90:cc:08:2a:be:4c:95:b2:ea:eb:49:e5:
c1:2d:8d:6b:e0:95:3f:ee:d9:34:3b:8e:f9:84:9b:52:13:9d:
0d:16:86:aa:9f:a3:0e:f2:00:73:56:54:8d:1e:e6:59:21:f1:
5c:2f:37:4c:11:5f:64:cf:e6:24:97:99:de:ed:29:82:5c:84:
d9:34:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:04 2026 by rpki-client