Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json)
Hash identifier: MFgmpsRCWGSCPYg9Q8o2I6TCQEhvWznFpBfdR/vfDz8=
Subject key identifier: FB:1E:F7:3E:0C:AD:E7:47:09:EF:88:18:8F:CE:4F:E8:06:F8:59:B8
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 019D2703D7B2E7F61152CC372CEBD7C57945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
Manifest number: 042C
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: AQ159j7xEoZQ1W/gekuvZGqtRa3CsBGniPJ3Yrb3NAE=)
2: cml9YHU_ypax2ib4maFPoihbh6U.roa (hash: Y6I1JN/k3woFsSnAPG7GyjDBJmIyx7fHnaeAcHVvkC4=)
3: vBMtviwzR2kVgzmNNYo_Vafp9LM.roa (hash: lNCNgMYzNrricpFi/DIzZBh14EOt1NtDvwmLx+z5MvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d7:b2:e7:f6:11:52:cc:37:2c:eb:d7:c5:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=fb1ef73e0cade74709ef88188fce4fe806f859b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:12:ed:d9:7b:b3:8e:d3:a0:ee:55:33:3d:
92:3e:df:71:75:19:15:61:45:32:29:bf:6d:aa:73:
b4:f7:d0:dd:66:49:f8:45:42:b2:29:01:32:a0:0c:
9e:35:48:ba:ee:45:e9:c4:ff:b4:09:4a:b3:2b:71:
37:ff:c8:40:6c:2f:10:d6:73:2c:2c:73:06:34:31:
cb:3d:12:0d:32:f7:4c:29:da:9d:b5:86:c6:8c:86:
5d:43:a7:84:44:60:36:93:69:7d:b6:82:dc:be:18:
72:55:53:fa:b5:92:22:ae:d7:ae:5f:e7:a0:e1:e8:
90:81:95:b2:9d:f1:01:bb:af:87:d5:75:5c:3e:f7:
70:19:54:62:04:bc:5c:a6:5d:0a:af:ad:81:d2:29:
6c:77:92:67:79:db:c4:2b:8c:0a:e7:72:04:b1:81:
a3:5f:76:59:f4:0e:10:5d:7e:8b:57:d1:db:de:ed:
8e:d5:77:17:b5:03:f9:2f:fa:10:9e:f9:5c:fd:e9:
96:4e:bc:77:e4:3a:a6:a9:72:a0:a7:4b:1d:09:b0:
24:14:d4:df:11:22:e3:c2:11:fc:78:45:d4:6f:80:
47:fe:47:f8:d4:5e:5e:36:fa:1c:09:60:10:84:29:
2c:48:7a:2f:6b:24:f5:32:7b:aa:61:00:c1:4c:ab:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1E:F7:3E:0C:AD:E7:47:09:EF:88:18:8F:CE:4F:E8:06:F8:59:B8
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:bd:c3:dc:d7:fe:10:95:8f:9a:aa:8b:03:fb:34:e0:6e:
43:25:48:d0:02:6b:22:29:b1:72:d5:a6:ea:c2:df:a3:23:7a:
d8:a9:cc:73:d0:8d:bd:0f:cb:01:f9:e9:65:34:78:2a:49:01:
21:15:1d:70:16:68:c9:d5:dd:d4:71:96:ec:3a:58:44:0c:ac:
6b:4d:75:18:cb:4a:3f:1c:57:f6:9f:da:a6:16:43:af:d8:f8:
e1:7f:74:78:7a:62:da:4b:2b:78:78:a7:3b:e7:a8:6a:0e:a0:
10:3b:3a:07:48:01:63:1e:f4:15:5b:b2:6e:2e:9e:c7:66:4b:
c4:9e:db:8f:0e:c3:92:02:96:e3:92:09:d2:c1:41:3c:b2:38:
41:0c:ae:8c:b9:e0:0d:c4:75:42:1b:8e:00:23:0e:ac:26:57:
36:d8:66:1c:cc:74:22:67:7e:f5:e2:41:1d:fa:3c:25:15:a3:
e4:02:9c:21:f0:90:ff:76:dd:9e:e9:23:c5:fa:a9:92:a2:bd:
f4:6c:35:ff:fd:c7:01:66:28:93:61:83:f5:69:d6:94:9d:2c:
f3:b7:57:cd:da:9e:02:b9:08:88:36:3f:29:5c:8d:04:ea:0a:
3a:59:fd:e9:d0:47:c6:1a:7d:c7:4b:55:f0:a0:12:62:fe:2d:
da:c5:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:29 2026 by rpki-client