Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: 2zSEUKQYlGRRUWTYFIBlZirNB8hgFg0U6LfOANFUbaQ=
Subject key identifier: F7:D7:63:8E:66:D9:31:F8:7B:55:78:B8:70:28:7A:86:16:22:71:9A
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019D28F328B3D94C27C87FE1074DFF324D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0B9E
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: WGr3KxVaeuJxxdy57cSnut9zeNU+/FpLKJhOFrmmhqA=)
2: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:28:b3:d9:4c:27:c8:7f:e1:07:4d:ff:32:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=f7d7638e66d931f87b5578b870287a861622719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:5a:a8:a7:a1:28:16:4c:c2:6d:74:50:3c:
3c:10:47:f2:a9:29:e6:0b:22:40:cb:ad:86:81:2d:
71:87:f8:7e:bb:a5:1c:76:fc:7a:01:01:84:7b:49:
0b:d0:23:0d:f7:b2:18:3c:72:cd:bc:8d:5f:25:a6:
33:d4:23:63:f6:e2:43:9c:c7:37:c0:f3:b8:e8:f5:
f7:ef:b3:a9:32:f4:44:3b:fa:66:08:6c:dc:62:44:
44:a4:12:ed:55:eb:7a:07:c9:4a:1a:68:eb:27:95:
1d:28:fb:84:b3:9b:76:6b:1b:f5:d0:e6:a8:59:2d:
41:ed:8b:e6:be:5f:dc:a6:6c:46:eb:58:34:e0:7f:
2b:c8:41:a5:89:a3:9d:b3:0a:a6:3d:ef:5e:1e:f7:
27:69:6e:f5:c4:7f:d5:23:23:db:ee:6d:ce:0d:af:
0c:5e:f7:59:ff:cd:6b:29:d7:6a:a2:e1:44:71:90:
57:07:57:f6:75:ca:d8:36:17:d9:00:c4:5e:89:60:
b4:4c:9c:3c:a2:50:72:34:6b:de:1f:62:77:3e:4d:
b6:03:10:bd:f5:e4:6b:ba:44:99:8b:df:d0:b3:14:
a7:49:f0:fe:68:a5:ab:aa:78:f7:e6:9d:f2:78:b3:
ad:87:01:2f:b8:ee:a6:49:ba:14:6a:f9:5d:25:52:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:63:8E:66:D9:31:F8:7B:55:78:B8:70:28:7A:86:16:22:71:9A
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:43:1d:78:4a:fe:62:1e:fb:0b:60:64:20:e7:7b:67:b5:6e:
2e:80:eb:11:a2:c5:b4:e1:b7:98:f0:b7:2b:24:23:7c:a1:de:
36:f3:7b:d7:8f:22:a9:a5:f3:63:c5:16:de:e2:02:32:b3:46:
fb:7f:e5:47:4d:3f:1e:84:8e:4c:14:24:b3:ae:82:33:65:e7:
f6:bf:87:fa:79:c7:41:28:6a:32:53:73:bd:dd:e1:d1:55:27:
23:dc:92:c1:2a:5d:43:a2:44:d5:4b:70:aa:6b:ad:92:89:7a:
5e:4d:b4:ca:96:6d:e6:d2:d2:89:5c:e2:5a:b5:de:a9:7b:68:
83:f8:3c:2d:3f:20:26:30:96:36:75:41:12:4e:90:f3:21:cc:
ab:e9:07:01:d0:4e:04:a2:8a:fb:46:69:e2:0b:03:29:56:8d:
cf:c5:9d:a8:49:43:d6:81:12:d9:b6:61:8f:c2:cb:13:52:48:
ba:c8:f5:0e:ff:9a:c6:e7:af:a1:cb:51:d1:7f:2e:cd:5e:c3:
1c:84:30:35:5e:d4:c0:1b:6b:58:f7:85:27:47:37:c6:a2:3e:
d5:4d:41:a3:e1:44:a0:0d:bd:a0:eb:99:06:be:24:56:3c:c6:
e3:2a:b7:cb:7b:7e:80:74:aa:83:ac:55:a4:18:51:4b:48:10:
60:d4:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:08 2026 by rpki-client