Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File: WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier: fYjWyz8ajFtMYqBGCjU4+yhaUXet7AsLj0r40VJwZc0=
Subject key identifier: 70:DD:82:09:74:D4:C2:A9:D3:5C:05:56:6A:D8:98:46:31:3D:47:A3
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial: 019D2884269B7670A81C70B70DCF72FDA6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: HWYj0Yf7UI2v4SI2DFohqiF03TQ.roa (hash: 161NIRovwk7K/08FGjsTUbLJAR0H5vgFaLSQ618AUbc=)
2: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: 0qQlVDqipBwLLW57MGxSECXWK2kbXWeuSvwHX141TmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:26:9b:76:70:a8:1c:70:b7:0d:cf:72:fd:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=70dd820974d4c2a9d35c05566ad89846313d47a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:02:12:4d:3a:cc:cd:b9:37:7d:63:3f:51:0c:
a9:69:4f:03:c9:31:1b:93:bc:c7:33:cf:4f:3f:17:
50:0d:5d:b5:06:51:ab:22:a2:f0:cc:1e:10:8f:4c:
e6:e6:6b:cc:6d:ea:74:ae:eb:94:22:56:c8:9d:9b:
8b:eb:db:f7:0e:f0:1a:73:b5:f1:5e:d7:aa:cd:72:
99:60:ce:e2:8c:8a:f4:eb:77:98:da:88:7c:8e:a0:
ec:79:45:da:e6:26:09:f2:d5:9c:3a:63:c5:e2:ba:
27:bf:06:1e:c5:d6:d5:ef:5f:b9:09:86:fb:8e:55:
9a:26:d2:c4:20:7d:a5:cd:c0:5e:9b:ac:6b:fc:e6:
a4:bf:83:77:e9:93:7c:2a:f7:3f:65:cc:92:44:9e:
c7:6b:f4:8a:7a:08:a9:ab:f7:d6:06:df:43:e3:79:
ae:f8:b3:aa:3e:c2:da:f2:ea:2e:ac:41:38:3e:1d:
6c:81:7d:28:8e:2b:c2:60:58:26:5c:cc:be:d2:40:
42:6f:86:e6:db:bb:fb:aa:3f:73:60:df:60:6f:87:
88:2c:24:de:47:00:25:0b:20:b3:b6:2d:55:c7:49:
d8:c7:48:64:3e:ee:2b:06:a9:30:f8:9d:73:3a:aa:
0d:00:45:35:9c:09:36:a0:f4:23:a4:ab:fa:75:30:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:82:09:74:D4:C2:A9:D3:5C:05:56:6A:D8:98:46:31:3D:47:A3
X509v3 Authority Key Identifier:
keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3f:ee:e0:4b:64:34:87:7c:0e:91:e9:57:09:b2:26:c7:31:
e8:b5:3c:6b:9f:b5:66:f0:68:10:51:90:d4:7d:76:b1:29:79:
84:a7:64:23:d6:fc:95:50:fd:a5:f7:56:e3:ad:b6:cd:e5:5c:
d2:41:13:ee:43:44:f8:01:e2:8c:0d:c9:4a:c0:99:5e:a9:3f:
a0:ab:d9:80:d9:e5:e4:07:a1:5b:fa:90:fa:93:4f:e8:7c:2a:
cf:fd:c7:3b:ba:3e:0e:87:9c:6f:b2:f9:e9:28:df:20:01:db:
35:c3:99:55:5d:67:48:9f:46:39:27:92:31:99:4a:86:d7:fa:
c9:ff:e2:cd:b4:db:35:12:a0:e2:80:c6:70:d6:4b:81:4b:da:
4e:0c:6e:53:a4:f2:9f:df:b9:33:5d:e0:16:9b:a7:48:bd:99:
04:f3:71:56:fa:ff:54:94:31:c4:0a:a1:2a:c0:41:a8:62:23:
c2:07:e8:92:cc:94:5c:34:31:a9:ee:db:76:a4:72:41:85:e5:
47:56:dc:f3:32:86:33:a7:01:ca:b3:08:06:67:14:ad:53:1d:
10:62:74:cb:fb:42:45:72:57:2c:2b:a7:6e:b5:91:60:95:b2:
b0:d5:6a:7b:7b:18:26:9f:3c:fb:0f:3f:1f:8d:03:88:98:c4:
d3:30:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:33 2026 by rpki-client