Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: nmrX+FuVCtVogdZotYrWNFaE+IYCOu2WMHQe5qV0yqo=
Subject key identifier: 69:89:C9:D3:85:9E:FF:80:86:1E:B5:68:7A:7E:69:A8:27:D1:90:4D
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019D2960EB3FB1E0913E6BE3CEDAF98E100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 1597
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: nkOOO6Qs/9Rkj9ezWNNGkZJBvj1VLQqYYQttB7u5JvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:eb:3f:b1:e0:91:3e:6b:e3:ce:da:f9:8e:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=6989c9d3859eff80861eb5687a7e69a827d1904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:f3:7d:f6:7c:49:ec:ce:c2:93:ab:00:2a:
43:04:27:3e:02:63:2d:79:53:a0:83:c9:7d:f0:9b:
d7:bf:f8:ec:fa:a8:d4:6d:ce:e6:c6:9b:d8:58:7d:
28:ba:35:55:2a:35:bd:81:aa:cc:ff:d7:b2:ef:b2:
b9:c5:b3:57:bf:c3:c1:0f:8c:81:ac:10:ac:60:54:
2a:44:e3:75:8f:83:52:dd:e7:94:40:e0:06:4a:30:
7d:2a:af:90:16:3d:f1:d2:cf:51:ba:85:c2:d6:4a:
d5:d1:d6:f6:2a:9e:02:59:bc:7d:78:db:34:84:11:
b0:d8:26:af:ba:7a:00:10:9e:c3:b4:2d:a5:4e:a4:
79:9b:fb:2d:f9:5f:21:d5:6a:3c:64:57:db:e5:98:
47:8f:ae:a8:36:31:47:cd:76:28:7d:1d:68:05:df:
88:9b:b9:a0:5a:a2:35:a4:8a:50:f5:9d:ea:a9:d1:
12:89:8c:26:11:65:ce:af:57:7d:00:50:f2:76:83:
ea:5f:fe:60:45:3f:b1:a7:cc:e2:7a:16:b5:cd:4b:
dd:93:49:9f:8a:29:70:4e:4a:55:4e:85:b6:c5:23:
5d:76:2b:98:8c:ee:62:90:3b:57:03:a6:45:41:b6:
7d:dd:4e:3b:0c:a6:22:a4:aa:d3:5b:12:33:b7:57:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:C9:D3:85:9E:FF:80:86:1E:B5:68:7A:7E:69:A8:27:D1:90:4D
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:62:7d:ee:52:66:32:ed:8a:2f:e5:86:c2:fe:2e:d6:e7:
61:8e:37:e5:a3:4f:05:e4:63:21:de:23:55:27:25:7e:26:1f:
9c:6c:b6:73:64:7a:d8:a4:cc:b0:87:46:18:50:01:fd:f8:9e:
5c:33:60:78:77:fa:8c:b6:21:15:66:01:36:b3:ad:2c:df:95:
03:1f:41:1c:00:00:35:85:98:02:a9:89:07:ae:42:a9:83:03:
35:e2:10:37:3a:89:57:d6:cd:cf:a9:69:cd:0b:22:90:ac:d9:
2d:b7:87:ad:37:cc:c1:f2:20:73:de:05:47:d0:87:96:6e:34:
62:a5:f0:53:9c:f5:53:ce:9b:44:a8:c1:a4:2c:05:fa:ef:db:
85:52:21:c1:81:9b:e2:6b:e2:8d:c4:9f:a9:b3:bf:33:8b:bd:
b3:27:97:cf:1d:ff:bd:84:e3:7e:44:0f:c6:1b:f6:28:e4:1a:
c3:ee:d1:d4:8b:fa:36:30:13:cb:a0:c0:4d:74:6a:78:ab:2f:
66:03:53:d7:ee:f3:6c:da:c7:4b:dd:bf:ae:30:fc:c9:c3:40:
19:48:72:8b:72:5c:2e:67:57:b6:45:fd:cf:dd:e0:4d:cb:e1:
ef:21:15:42:5e:b1:a6:7e:69:11:b7:ac:1b:ab:e7:0a:bd:ce:
f8:e1:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:40 2026 by rpki-client