Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: 4btz8Zt0vWTr9gXdrWSP+cN5xYcOgtd913DE6Tv86xk=
Subject key identifier: 07:72:22:2D:BF:13:AF:E4:92:EA:D3:E9:90:B9:62:CC:2F:DF:34:99
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 019D273A901066063AF771BE83FF87D30E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 0498
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: SGhM4myocKcxh4kuOj+SWWoQXu9A0H3K3feYPDaenCI=)
2: fph5gTuLwd2OWoh3SrvtX0TJ1jU.roa (hash: SKuyO2n0G10edipOcdvCUjjKqC8VGVks6CgzeewLwB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:90:10:66:06:3a:f7:71:be:83:ff:87:d3:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=0772222dbf13afe492ead3e990b962cc2fdf3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:80:ac:7b:b5:b9:be:a2:10:56:ce:18:9a:
a4:33:c6:75:c1:bc:63:a4:f0:c4:fe:a4:9b:e5:12:
ba:43:4a:4b:7c:68:62:70:06:d6:56:84:6e:fb:09:
99:ca:e9:5e:a2:cb:65:93:9f:2c:dd:8a:90:32:cb:
09:ac:51:a5:6b:2e:63:56:8f:11:82:8d:44:7a:cf:
6f:51:92:67:3e:43:8f:af:9d:c7:d8:a4:da:c5:82:
51:bd:b6:bd:8b:80:e7:2a:88:56:0a:01:ae:fb:b6:
a1:c1:00:cc:21:15:8a:6e:0d:a9:dc:f4:81:04:b7:
db:a1:1d:04:0e:3d:c7:8f:a9:e9:06:36:ba:2a:8b:
95:9b:c0:e3:35:b6:2f:ac:63:b3:ae:4f:58:f5:50:
1d:5c:c2:59:d9:60:32:ce:b9:41:e7:48:ec:ca:37:
c5:da:78:4e:21:e0:5c:22:40:cb:45:15:01:65:b2:
39:0a:69:fd:81:86:f4:d7:7e:d0:45:f6:09:c1:96:
03:65:02:ca:be:cb:37:44:44:c1:44:73:86:6f:7a:
7c:43:93:71:4e:4b:f5:6c:b3:e8:67:6e:d3:c7:67:
88:88:3f:14:60:2a:bb:43:08:a8:2d:e8:6b:ac:e8:
3a:69:d6:eb:df:41:ed:26:d6:d3:93:7e:35:c8:ab:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:72:22:2D:BF:13:AF:E4:92:EA:D3:E9:90:B9:62:CC:2F:DF:34:99
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:5f:99:54:4d:cd:35:bd:37:de:23:1e:94:7a:30:7a:61:
65:88:9b:b5:56:18:22:63:32:1b:2d:f2:3e:90:91:e7:4c:58:
d9:39:69:5a:59:5f:86:23:b1:7e:df:68:ee:4c:48:b3:26:a9:
0e:6f:d7:d4:54:0e:6a:ff:1d:65:41:79:3a:b4:b4:5d:de:2b:
b4:a1:db:49:21:5b:15:ed:57:ff:c4:59:bd:4d:ab:95:af:a7:
fb:d7:f2:8d:b0:bd:5b:15:80:18:e1:e8:7f:64:5f:59:07:12:
e4:a3:1c:80:20:1c:67:09:1c:43:51:78:ec:8a:b0:61:fb:d6:
c8:b4:a7:e3:13:ba:0d:e2:61:45:da:b7:ed:b6:57:86:a8:80:
e8:aa:2a:89:66:32:6f:69:84:a9:f3:26:53:4b:94:98:b2:16:
ab:56:5f:a2:63:f6:19:ba:81:43:44:cf:1d:d0:b1:cc:03:3b:
d7:8b:af:b9:3f:8a:2b:57:f3:23:d4:19:94:9a:7f:98:7e:f3:
03:5d:24:24:e9:9e:27:12:91:40:43:f1:94:9f:48:3e:dd:8d:
90:e2:d8:b7:6f:23:66:dd:e9:8a:2a:0e:eb:37:62:cf:1e:a3:
28:95:8e:db:af:ed:d1:a2:32:f0:47:1d:38:3f:6e:c7:99:8b:
e7:39:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:47 2026 by rpki-client