Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: 8RTGpDFJRFspMr9312d4R1J4ri0XGsgnph8c3HDCOmo=
Subject key identifier: 27:E4:CB:63:2F:1E:7B:D7:03:BB:D8:91:A4:87:6C:C7:C9:3E:89:53
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 019D2AA997EAB647C75C5960CACAA5D45028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 15:00:50 +0000
Manifest this update: Thu 26 Mar 2026 15:00:50 +0000
Manifest next update: Fri 27 Mar 2026 15:00:50 +0000
Files and hashes: 1: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: Gtcf0BSi1jv1z4VkQ/+4WvaYw/954c1ztE+MEJl+tuc=)
2: mle5l9onvzOKjJkGxBdMMEzHzFk.roa (hash: RQr1Xm4c0zALnq6+MVgOiMthhqp0SNomTNBL9iMlkL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:97:ea:b6:47:c7:5c:59:60:ca:ca:a5:d4:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Mar 26 15:00:50 2026 GMT
Not After : Mar 27 15:00:50 2026 GMT
Subject: CN=27e4cb632f1e7bd703bbd891a4876cc7c93e8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:9d:63:78:f0:b6:bb:b0:5a:de:c1:c4:e3:
a8:8c:56:af:85:07:b6:0a:90:a4:66:a0:65:91:83:
46:a3:ed:fd:77:04:81:7b:15:d9:5b:7b:84:42:fc:
7b:cd:82:d5:92:22:34:05:56:c9:86:b6:d1:9c:ea:
8f:15:ef:46:2b:be:47:9b:1d:bf:54:b3:29:d5:e0:
84:f4:24:61:71:54:af:09:6d:0c:ce:c7:b6:25:2d:
8f:02:73:ea:4f:a4:84:ab:aa:57:3e:d2:46:33:c5:
19:80:18:65:f6:dd:1d:f5:95:73:18:c3:49:13:d7:
57:d8:82:52:87:42:14:08:7f:98:be:c2:9a:b2:02:
53:40:ef:14:5f:63:24:77:88:69:3b:ce:31:1d:06:
9b:7e:1a:6c:b3:ea:d0:d1:87:f0:12:b5:4b:b3:fc:
0b:d6:af:6f:65:a0:e5:02:9c:27:c8:5e:94:79:46:
b4:62:2e:68:6c:66:96:2e:33:33:b9:a9:c7:52:b6:
dc:db:2f:6c:db:b6:d1:68:08:fb:9f:10:c2:c3:25:
67:24:1f:e6:1b:01:48:8e:ac:12:47:90:a9:ea:68:
7f:58:f7:61:f4:6a:d3:28:68:95:a4:f8:c9:ec:cf:
ee:b2:5d:16:47:ef:b0:bc:cf:b2:b5:01:36:fe:8e:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:CB:63:2F:1E:7B:D7:03:BB:D8:91:A4:87:6C:C7:C9:3E:89:53
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:e7:df:f8:e3:d9:46:8d:7d:e3:af:b6:a7:c2:f4:03:28:
79:b8:29:15:5e:67:e6:3d:ea:1d:31:cf:53:8b:44:a3:0b:08:
c2:07:13:cb:1c:cd:66:cd:2f:ad:e5:53:98:e7:9d:40:1f:a7:
1c:58:12:ac:98:f5:60:d2:4e:a3:b7:5c:80:b9:c4:33:94:c3:
96:bb:db:5b:bc:81:ce:c9:fe:38:24:1a:aa:7a:d3:5c:f6:97:
cd:5e:51:b9:67:93:1a:0d:c8:97:a2:79:d0:82:c8:48:cf:d8:
2b:30:c7:43:5d:ff:59:87:bb:5e:1c:5d:13:a5:2a:62:a0:a6:
fd:f4:4e:53:a0:cd:d4:91:ab:74:96:65:43:8a:e6:f3:90:d3:
e3:4c:e8:b2:90:85:f9:8a:7e:9e:f5:40:7c:1c:8b:a2:03:12:
1b:96:94:56:e6:1a:95:1a:55:7b:03:8d:7d:23:66:49:ef:ca:
f8:3e:f5:d6:6d:74:9a:15:82:92:f4:9e:9e:b8:6f:d3:ad:f7:
7b:d4:43:e2:a9:8a:63:67:55:2c:31:32:a7:27:f9:20:3a:a3:
e3:99:8b:12:9b:f8:ca:11:c4:6c:6e:59:70:45:fa:02:c2:b8:
6a:dc:74:07:9e:25:05:87:4f:1a:c0:46:73:6a:e8:12:7f:77:
ec:7c:ac:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:57 2026 by rpki-client