Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: wubgJusCNyv0iUIsvNpmK0sWrgT0qKroubV+blnG8v4=
Subject key identifier: FD:D6:35:8D:38:9B:85:91:56:83:DB:E5:77:A0:3D:8C:24:8B:B6:52
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 019D25F2102BA73B5F19F8F90E28DBBE8AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 15E5
Signing time: Wed 25 Mar 2026 17:01:54 +0000
Manifest this update: Wed 25 Mar 2026 17:01:54 +0000
Manifest next update: Thu 26 Mar 2026 17:01:54 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: hzKTtNZqA6KnB6ImrrZTNJEZndP0sNHWAjICGABJkdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:10:2b:a7:3b:5f:19:f8:f9:0e:28:db:be:8a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Mar 25 17:01:54 2026 GMT
Not After : Mar 26 17:01:54 2026 GMT
Subject: CN=fdd6358d389b85915683dbe577a03d8c248bb652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:77:37:fb:a9:34:db:b2:a6:29:0b:c5:92:
2c:6f:37:3e:65:94:e8:e7:8e:65:39:02:6a:4c:54:
c8:c3:d9:14:b1:0e:40:af:9b:7b:37:01:7d:17:3d:
89:cc:57:8c:23:a1:59:a7:b8:55:bb:31:8b:f8:37:
b4:ca:0e:6f:68:2e:5e:c3:96:32:1f:52:07:12:b8:
e8:6c:fd:fd:11:c7:49:33:cd:c0:00:2f:0f:d4:cf:
f0:29:a0:91:1c:51:2b:4a:a4:41:11:d4:59:bd:b0:
03:46:e8:0f:cc:4c:2e:00:b2:e6:17:13:54:f8:88:
87:ae:c1:a4:72:81:bc:a8:3a:87:7b:76:05:38:a8:
d5:7b:9d:0a:22:76:18:30:14:c2:52:b0:17:77:4d:
3d:e3:5e:94:80:5a:68:ac:d8:40:09:c3:4a:2c:f3:
ca:d9:34:ef:98:f4:b0:b7:ab:7d:63:db:17:4c:0b:
90:a5:3e:4e:da:59:14:e0:d3:3b:a4:f1:7a:9a:91:
47:c6:f6:2c:28:fe:ec:ce:ad:69:0b:76:fd:c8:0a:
81:67:d1:34:aa:96:d3:dc:5d:2a:88:5d:89:aa:d6:
0a:16:d4:d2:50:be:6d:7d:a8:65:99:f4:a1:50:36:
95:3d:8f:4d:2f:96:2a:c5:39:15:35:f2:ad:4e:fa:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:35:8D:38:9B:85:91:56:83:DB:E5:77:A0:3D:8C:24:8B:B6:52
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f1:1a:1d:41:b4:3f:25:13:03:16:e2:0a:a6:cb:9c:77:ac:
67:d2:f1:a7:ef:d6:74:b5:c3:b3:54:36:87:51:67:27:29:8c:
3e:eb:b0:24:8b:5e:1c:36:4e:be:0c:f0:91:c4:ac:ea:51:74:
ed:79:25:98:3b:5c:59:0c:49:e2:15:79:24:a3:ea:0f:d2:84:
27:9b:70:1a:3c:ab:2c:42:8f:6a:c0:e2:ce:ab:eb:f5:ec:e3:
7a:ef:61:b0:a2:18:8d:9a:92:03:36:34:3e:4b:53:62:44:8c:
38:f7:a9:c2:e7:14:ad:ac:b9:27:e4:d4:40:c4:34:2f:d3:96:
bf:d3:91:55:71:05:3c:46:f6:63:ba:94:5a:81:28:11:54:c1:
0e:b4:67:00:11:39:e5:62:10:21:dc:40:d3:34:ab:72:04:48:
02:7c:51:98:00:03:26:79:e4:8d:f6:b4:8d:e2:b9:1b:c9:39:
87:ef:66:1d:51:bd:7d:6f:fa:32:43:2c:69:f9:2e:9b:4d:63:
62:ad:f3:15:b6:18:2c:c1:aa:ca:72:fd:1c:86:ea:df:4d:28:
53:e2:d9:c9:1b:13:87:11:82:29:c1:d6:fe:53:48:58:69:4d:
38:3e:79:d6:8c:3b:89:75:3a:77:be:10:fa:57:f8:04:7f:60:
b4:77:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:53 2026 by rpki-client