Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json)
Hash identifier: BDdrjkk1xjjErr6O7CQ75H+asyU5FolqKsPlnYs6/fY=
Subject key identifier: 31:83:07:01:11:07:BE:1C:27:A9:0F:95:BE:A6:2E:16:6D:6E:D9:A5
Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Certificate serial: 019D25F17C9B02CE1C4AF8B4457E999353DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
Manifest number: 0371
Signing time: Wed 25 Mar 2026 17:01:16 +0000
Manifest this update: Wed 25 Mar 2026 17:01:16 +0000
Manifest next update: Thu 26 Mar 2026 17:01:16 +0000
Files and hashes: 1: J_yn6Pm9vKNMDRcVwbyp133TknU.roa (hash: mliXlxJfksLfLE++jqaaumKeI12AEMNdDLjQ9GlOQ2M=)
2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: ZLaLU0RGhUK1mFYzyHU95P988/uRb7CffOP8Lg5Y9VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7c:9b:02:ce:1c:4a:f8:b4:45:7e:99:93:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Validity
Not Before: Mar 25 17:01:16 2026 GMT
Not After : Mar 26 17:01:16 2026 GMT
Subject: CN=318307011107be1c27a90f95bea62e166d6ed9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:40:3a:62:3a:a6:70:7b:69:25:ec:23:17:
42:52:1f:0d:d6:12:0d:15:33:d9:1d:32:e0:4b:d0:
99:f7:f0:f8:0c:71:de:90:4c:56:58:8f:b7:99:a4:
6b:a5:3c:01:5b:6b:da:ea:ed:e8:70:f6:2d:68:fa:
9c:3e:e9:4b:49:90:f7:38:4c:8d:36:c9:0c:98:46:
6b:e4:34:cf:60:bd:82:d2:1c:5b:53:db:cf:4c:a3:
aa:f9:d8:f3:65:9b:d7:63:18:8b:69:d3:cf:85:bc:
50:26:56:56:6e:f2:32:ad:c0:fe:b4:b1:d9:67:08:
8c:a9:37:be:f0:37:ad:36:1b:27:d5:31:e7:70:b8:
c4:3f:73:39:90:c3:72:b6:30:f3:24:9e:2a:b5:75:
c7:63:77:71:bd:4a:8e:87:15:ec:34:38:82:75:c2:
c9:a8:71:bb:f1:d4:ab:71:fb:8d:b6:4a:58:1e:49:
d8:af:36:86:e0:fd:67:d2:8f:d2:66:a6:b2:a3:97:
66:bd:93:9d:32:49:a6:52:d8:25:e1:3b:ea:56:98:
e6:0a:2c:59:b7:48:cf:af:0c:56:04:7d:37:9e:8b:
39:3e:14:6d:fe:6b:d5:14:b8:dd:0d:2c:6f:3c:29:
4a:ae:2e:c4:d4:b9:45:6b:51:f6:05:0c:66:93:d4:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:83:07:01:11:07:BE:1C:27:A9:0F:95:BE:A6:2E:16:6D:6E:D9:A5
X509v3 Authority Key Identifier:
keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:57:d4:59:9b:ef:c3:89:29:e0:71:6f:b7:00:ca:1c:de:
b4:6d:bd:87:2b:93:78:f4:13:7f:4b:e3:f3:ed:9e:e3:ed:7f:
e3:a8:62:25:99:cc:54:b7:b6:bc:ca:9e:2b:a0:79:26:39:7c:
ec:16:3a:5a:06:56:34:35:e0:c0:13:f2:b8:24:36:63:dc:84:
6d:1f:12:a8:13:08:24:ea:79:90:ea:a9:0e:30:bb:35:ca:28:
be:b0:54:57:38:c4:f5:a7:d3:47:37:e3:da:bc:e4:00:ea:01:
b9:8e:82:ed:ae:4b:23:4a:1c:f2:5a:d8:0a:bc:3e:18:8f:52:
f4:26:16:3f:3c:59:99:c7:c4:bc:78:2e:bf:29:b6:57:90:63:
29:c5:9d:fb:3d:47:94:00:be:f7:5f:00:db:8d:b2:31:82:82:
0d:a0:07:2a:a0:a1:f2:a9:d1:c8:02:ec:a7:bb:4d:85:98:f4:
01:25:3c:d8:71:e3:70:33:37:25:28:e0:f5:24:ca:22:e3:ba:
9c:3f:ab:7f:7c:5d:ee:28:fc:33:57:3d:2a:49:d6:81:e6:8c:
1d:a6:4e:26:40:e5:78:c3:db:78:18:5b:c9:a5:c3:8b:0b:c7:
23:2d:1d:2f:ce:2d:bf:4d:95:91:85:ea:f7:a9:5f:80:57:17:
68:fe:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:20 2026 by rpki-client