Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: 4ikPNcBdjFjl083sYU0YYwS1Odx9fNKcSYYmQvmJAHg=
Subject key identifier: 3D:4E:FC:61:70:32:BA:48:30:EE:D9:33:EC:D1:77:39:4F:5A:53:2D
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 019D2884776F3D1C69E2715890138E8B364C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 11D4
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: HYJQPof+k2GwOnO6SjBsWjfWS2JUoIOpbyPjm7v+k/w=)
2: fgkPvFZ2_f_B8Kes99MALTJ_h0M.roa (hash: he1XePUMYZj0hBporE6i0fgZ6VJq2FNLflajrVKGWrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:77:6f:3d:1c:69:e2:71:58:90:13:8e:8b:36:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=3d4efc617032ba4830eed933ecd177394f5a532d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:f0:26:58:76:e1:e0:3c:c4:8e:5a:98:20:
da:4c:cd:80:05:47:88:12:1a:26:b1:1c:b5:05:4c:
f3:b3:36:8b:ff:cb:3f:2c:8c:c2:44:fc:24:39:e1:
a3:23:57:38:05:ea:86:b6:a2:20:3f:13:a4:be:ec:
31:80:8a:b1:55:60:ce:95:3a:b3:4e:a1:84:7f:e5:
06:e8:d8:4b:f8:62:e6:4e:f9:cd:36:b3:73:30:0c:
2c:5f:34:d6:10:5b:2d:b2:be:e3:fc:9e:e5:c4:5d:
3d:21:bb:bf:ee:a6:ef:9f:90:66:b5:c8:cd:60:c5:
a1:63:bc:fc:ad:47:4c:84:94:13:e0:2b:2a:2d:1b:
cb:b3:57:9d:7c:6d:68:6b:55:e8:1f:88:d8:f1:df:
7f:4a:93:32:ea:72:0a:b5:7e:ed:f8:33:ad:7e:d7:
fc:63:d8:48:c0:82:43:f4:2f:32:f0:58:21:79:3f:
ea:22:49:fc:2e:0a:c3:db:c9:12:f8:63:9b:77:7d:
d1:ef:62:a5:87:90:8e:81:93:69:9e:90:3c:0c:44:
91:13:2e:55:5c:c6:ea:ee:1f:f6:db:94:76:41:81:
2b:99:1b:0e:b8:58:20:79:95:2f:a2:1d:0a:6c:77:
b8:db:f0:78:8e:aa:2b:cc:09:3b:85:23:1a:c3:a5:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:FC:61:70:32:BA:48:30:EE:D9:33:EC:D1:77:39:4F:5A:53:2D
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a1:7f:78:8f:19:7f:78:7b:a3:d2:ae:e6:b7:a7:3c:5a:f3:
b5:a3:6e:7d:6d:69:87:89:ec:e2:29:23:3c:b8:a6:f1:bb:42:
86:5f:20:b3:67:b1:19:d9:f0:be:78:1f:b8:ee:00:d4:d2:06:
1c:f2:5c:bc:5b:11:55:c7:49:46:83:ad:76:8e:68:f1:94:63:
03:95:e8:7c:0a:31:a0:04:ad:37:73:65:ad:6c:65:b3:e4:c2:
06:ea:1b:fb:4c:62:b4:ba:48:7b:8a:db:7c:a6:a9:66:58:c1:
76:ed:96:ae:49:be:d8:ac:bd:45:9b:d5:a4:6d:5c:44:b6:f1:
c4:5d:43:a6:85:36:0b:32:62:da:2e:26:37:9b:2c:33:95:63:
24:70:ad:b2:6f:53:77:12:0b:a0:20:22:5b:cc:e8:7f:09:85:
c3:1f:5d:48:41:8b:0e:19:ee:44:09:a7:e1:e3:64:8f:aa:4f:
d1:5d:ef:56:85:d4:5d:2f:7f:7d:be:8d:d5:c8:d9:02:42:da:
9f:f5:57:32:6e:e2:b9:eb:79:36:2b:c7:26:f8:a3:c7:a0:31:
72:05:91:5b:f7:b3:f2:bb:49:cf:99:07:1f:ed:56:99:cf:6b:
20:ec:e9:80:34:9d:8c:ff:2d:5d:8e:a5:37:a9:43:08:db:18:
3c:0c:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:36 2026 by rpki-client