Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: k/ZofsYCtEfVK6eJKZuKbHjuBGLaf91XYDaU8+Lobzk=
Subject key identifier: 8B:68:7F:22:BD:50:B9:E6:10:64:53:34:3C:2F:65:C0:F2:3D:94:96
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 019D2A3B7521451043B2D9C6852C141BAFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 1803
Signing time: Thu 26 Mar 2026 13:00:32 +0000
Manifest this update: Thu 26 Mar 2026 13:00:32 +0000
Manifest next update: Fri 27 Mar 2026 13:00:32 +0000
Files and hashes: 1: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: 9poXKcntRqVYNam6rUOJrCL3058lvav4bCZFiLeL4Q8=)
2: bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa (hash: CRa0+I5ztcID9122/jSOLxqWovtuwyYOYDu7k5cAWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:75:21:45:10:43:b2:d9:c6:85:2c:14:1b:af:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Mar 26 13:00:32 2026 GMT
Not After : Mar 27 13:00:32 2026 GMT
Subject: CN=8b687f22bd50b9e6106453343c2f65c0f23d9496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:9a:56:d8:88:55:b8:65:ee:06:30:05:68:
68:16:f4:a5:a3:48:cb:d8:c9:bd:9a:cf:79:7c:ed:
06:67:f4:8e:ad:70:ad:b1:b2:ef:27:af:1e:57:cd:
a5:5e:71:73:a0:d2:7e:a4:7c:ef:a0:dc:d6:4a:77:
c0:b9:e2:46:94:28:a1:b2:db:4f:9a:85:2f:0f:16:
31:3d:43:fc:e2:86:33:b9:45:7c:4b:ab:4e:15:02:
c7:50:d0:fc:b0:e2:b2:e6:b7:46:74:2e:48:6a:bb:
68:2f:a7:83:6f:24:86:23:30:4c:d6:69:a3:39:fb:
f4:ef:a0:bb:99:bb:7d:4e:41:07:01:e6:d6:61:7a:
3e:5b:10:2f:a4:d1:9b:f9:5a:16:f8:4d:8d:f2:80:
2a:6d:ee:1d:44:89:dd:db:26:79:c7:e1:ec:22:5e:
73:1c:88:3d:52:4d:d5:d3:8c:94:fe:39:0a:4d:fd:
69:a6:18:ac:7a:31:a6:66:31:de:1c:5c:e9:18:85:
1c:8e:35:79:8d:30:70:47:02:db:7c:52:76:4c:8b:
18:e5:e9:94:71:08:69:12:57:86:6c:d3:16:53:9c:
11:fb:2c:41:22:c2:fa:71:29:b8:79:82:6f:10:e0:
bf:cf:7d:00:76:80:2d:89:d5:66:4a:83:77:6d:74:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:7F:22:BD:50:B9:E6:10:64:53:34:3C:2F:65:C0:F2:3D:94:96
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:75:fc:82:85:38:37:a0:3a:2c:09:64:c2:32:c6:43:38:
cc:3c:4f:79:2b:be:f4:d9:6a:63:f9:f3:2c:c7:a0:ad:34:a4:
df:42:2b:5b:3d:ad:60:8b:bc:f4:2b:bb:95:06:67:26:df:eb:
d7:87:36:0b:6b:1b:55:d7:d7:a6:49:bc:fd:ca:b3:6d:bc:46:
4a:21:6a:89:cf:9f:71:10:ef:6e:bd:ce:44:cc:96:40:20:39:
3b:06:dd:e1:e0:99:c7:42:1e:4e:b5:cc:3d:d0:03:79:b5:3e:
dc:1b:66:4b:82:ef:e0:0e:7b:57:ad:8e:93:2c:4a:61:4c:06:
6c:c1:f2:e7:40:7b:28:25:40:ad:d9:3a:15:83:18:db:35:48:
11:5d:89:b8:4e:9c:0c:32:14:cf:aa:3a:b0:cd:f5:19:da:92:
47:a7:0a:f8:43:68:dc:46:1e:32:92:69:72:21:4f:56:84:92:
4f:6a:3f:cb:af:48:ef:8b:bd:16:91:90:e5:71:b9:32:76:e0:
cb:f8:e8:df:c7:bd:9c:c1:36:32:f7:fc:86:19:09:40:46:0f:
93:f5:fe:f5:68:f3:b6:fd:2c:3a:08:61:0f:60:f6:1f:07:7e:
6c:8c:57:39:fe:79:f9:14:c8:8d:d2:ea:bd:a5:cb:bd:ce:f5:
8f:86:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:03 2026 by rpki-client