Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: Jod5IbWtx6Obuo41QnYhy0ul5KOdGySWdN4wJnHknnQ=
Subject key identifier: D6:B2:E5:7A:99:91:62:6A:9B:10:98:A0:5B:58:1F:DD:7D:9D:7E:08
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 019D284D6111356376E4944A8362659B3A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: Wf/bC+Gyfah2O7ZRJBeJ9wFvea+sS3+IQOUq3r+NbCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:61:11:35:63:76:e4:94:4a:83:62:65:9b:3a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=d6b2e57a9991626a9b1098a05b581fdd7d9d7e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:2d:93:7c:ea:9e:3b:85:be:9c:ef:ed:5d:
6c:3e:c6:c8:af:bc:c5:7e:c6:2f:b6:fa:3f:76:53:
20:09:a4:56:e0:fe:7c:18:12:e4:3a:8d:80:01:ce:
a1:d7:9b:d8:fe:63:22:00:00:6a:96:5a:c9:ae:31:
9d:4b:f3:27:02:7b:62:6d:f8:cd:32:e5:d9:3e:f4:
02:c4:73:eb:9f:fe:f4:b7:ce:a2:a7:0f:d5:4c:8b:
9e:ae:94:e3:56:10:d9:e1:74:1b:86:0a:51:a6:82:
16:ea:a4:7d:63:a1:a3:84:20:c5:9d:55:da:4c:ef:
47:ab:fd:84:17:64:91:9d:c9:66:e6:b2:a8:f1:6c:
ad:d6:c2:75:7f:42:f6:82:33:0f:18:f8:82:69:fe:
53:1a:ca:ec:16:c2:2c:ca:ac:2c:41:1d:51:64:a6:
1d:ad:53:69:bb:a9:61:a3:9c:a3:75:81:77:61:83:
1d:51:fc:c4:73:5c:10:75:e7:59:d0:46:f5:50:46:
b9:0d:fe:f3:5c:47:2a:75:b8:f7:45:2c:32:60:bb:
11:ac:ed:19:fc:f8:e0:71:dc:93:d3:23:28:96:c0:
93:44:ef:31:a4:6a:b9:b8:cf:e6:93:7f:97:b6:b4:
f1:cd:19:ed:82:f7:51:de:d6:7d:99:e0:71:07:d3:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:E5:7A:99:91:62:6A:9B:10:98:A0:5B:58:1F:DD:7D:9D:7E:08
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1a:23:4f:b9:b7:b3:c8:5d:71:58:76:e8:bd:c5:79:7a:61:
d4:27:3d:91:10:ef:74:4e:91:c2:b4:75:38:71:5f:97:33:a9:
77:1b:12:85:aa:3e:30:2a:47:d8:b7:d6:03:4c:28:74:67:91:
e7:a0:b6:a4:8f:b9:6f:72:03:44:32:ee:d7:d2:45:69:9d:51:
66:f9:a2:a9:e5:2f:cc:b1:68:2c:2e:b4:2c:14:35:e4:db:7c:
de:8d:fe:1f:39:ee:3e:5a:b1:e0:d7:df:c8:d9:79:04:33:b5:
65:5b:3d:3b:c4:99:46:6e:0b:ec:47:f9:a0:46:62:74:8f:84:
50:1d:5d:6e:79:38:ba:fa:02:e4:c1:59:0f:29:a6:a1:e1:99:
db:21:e6:6a:35:98:f2:aa:bf:0b:a9:90:3a:e8:17:29:ed:17:
03:6d:1d:0d:ab:45:60:4f:e0:8c:48:2d:84:37:af:9d:54:eb:
a3:a0:2b:8c:26:03:05:aa:36:b1:8f:5d:a6:30:05:32:a4:da:
45:6a:ea:91:58:c9:7d:68:35:76:23:a7:50:96:b3:84:0d:6e:
dc:d5:3d:a9:fe:17:ee:f1:a9:35:79:e3:d4:a9:7f:a4:97:c6:
1b:c5:10:bc:21:ed:93:36:bd:45:6c:d3:e6:1b:f9:a0:ae:6e:
1c:32:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:02 2026 by rpki-client