Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: BRd/ZQzyUCeX27LdNBWx7ZDDLBoo7zmL7OawAtlEaxI=
Subject key identifier: 63:D9:BC:DC:50:D0:E1:01:DD:22:B2:7D:D7:CC:8B:6E:8B:96:5F:5A
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 019D25F1CA90EDB46B20BB90735366726585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:36 +0000
Manifest this update: Wed 25 Mar 2026 17:01:36 +0000
Manifest next update: Thu 26 Mar 2026 17:01:36 +0000
Files and hashes: 1: PM2xutOtApHOjMCZG4fRaGN19-A.roa (hash: cmOF+MvtNkb0EB47v73B7IdtgsKunZ1G49rR7QDbH58=)
2: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: YuDiqmAKcIPypZzm0BZDJ7e9Y7tm5l554kTgjERmMoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ca:90:ed:b4:6b:20:bb:90:73:53:66:72:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Mar 25 17:01:36 2026 GMT
Not After : Mar 26 17:01:36 2026 GMT
Subject: CN=63d9bcdc50d0e101dd22b27dd7cc8b6e8b965f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:19:f3:bc:3e:48:f2:2e:1b:d2:4f:c2:b0:
1b:0e:fa:2f:88:cd:11:8e:51:4f:42:19:08:9c:34:
a0:51:d2:41:95:24:65:74:1b:5c:a6:60:9c:7f:79:
4b:f1:8d:a9:1f:dc:0f:ce:37:43:d7:90:a6:a3:7b:
07:60:3e:9d:c4:ed:a7:b5:9f:8c:67:db:86:d0:46:
ff:22:f8:29:6d:fd:e4:0f:b6:a9:6c:0d:93:4d:7f:
02:a1:20:b0:20:e5:51:5c:6f:db:61:89:90:0b:41:
b0:c3:2c:40:94:c5:95:ea:27:78:2f:e8:85:37:f3:
45:1e:f6:b5:b9:77:d6:21:8f:81:f0:66:be:b3:e7:
83:0b:bf:19:0b:69:37:14:a8:3d:4f:80:d9:db:22:
e9:2f:a0:31:da:fd:80:48:ee:71:c7:44:43:f6:ba:
f8:fa:e2:4c:d8:0a:0c:8a:53:44:26:b7:f3:8b:21:
fa:95:d5:6d:8c:b0:95:7c:e7:ef:c2:8c:6c:fd:87:
64:52:30:43:99:79:ea:91:54:19:3b:33:16:0f:28:
47:62:20:23:e6:bf:26:34:ec:ae:fb:6c:01:4a:fa:
8d:c4:4c:fa:02:ca:f3:95:65:23:68:0d:af:c2:b1:
b8:a3:16:59:5e:54:5e:96:aa:34:5b:a9:1c:bf:9c:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:BC:DC:50:D0:E1:01:DD:22:B2:7D:D7:CC:8B:6E:8B:96:5F:5A
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:d2:a0:42:56:03:63:bf:9a:8b:b3:7c:da:03:3d:b3:78:
e3:2d:c3:a9:89:26:90:fa:ba:f3:e9:57:51:0c:5b:07:e9:af:
bf:42:50:f9:4f:3e:94:51:75:35:e7:3a:54:09:40:1e:89:65:
01:60:0e:b2:7c:36:30:2c:94:52:76:83:e4:5b:2c:e8:3b:ec:
75:c3:e5:d1:1e:2b:d5:c0:f7:35:99:dd:e2:6f:32:f8:90:d2:
6b:f6:e0:9a:d2:1b:c2:b5:b9:af:2c:a7:30:13:89:dd:20:8c:
c4:38:06:c9:99:78:2e:f1:89:6d:3a:6f:6e:43:0c:39:aa:69:
e3:d7:b8:36:fa:ef:08:18:08:0c:e6:df:56:e1:36:ec:07:04:
38:88:e9:a8:07:0d:71:b6:97:5c:21:4c:f3:df:be:53:ed:39:
2f:57:ad:e0:ed:c3:91:1d:a7:4f:06:fd:e0:ef:21:fc:46:e5:
16:6e:e5:5b:dd:e8:c3:75:dd:fa:69:42:9a:3c:47:54:19:2e:
59:06:d1:dc:c0:2d:c7:64:2a:d9:c0:78:50:aa:ed:28:13:2e:
45:5c:36:f4:47:18:8d:0a:1d:1b:cc:1a:7f:2e:5d:aa:44:b1:
62:05:65:e9:d1:c1:83:ca:fe:d0:0a:10:92:3a:8b:6d:47:73:
11:a5:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:09 2026 by rpki-client