Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File: W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier: IuEZNQYirdhmJQZAeMjLYY04KPlDIi+JDGJSlxKer40=
Subject key identifier: D5:3E:A4:63:2E:A1:0E:43:8A:7A:53:97:C0:1C:93:80:9B:45:6B:E5
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer: /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial: 01A0E7096D1B5BD2412E78D9DE6EEDD33859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number: 0A22
Signing time: Mon 28 Sep 2026 08:02:29 +0000
Manifest this update: Mon 28 Sep 2026 08:02:29 +0000
Manifest next update: Tue 29 Sep 2026 08:02:29 +0000
Files and hashes: 1: VAZohNpvO9_o7KjFilOTjZZYLIs.roa (hash: rwnYRxIBD/e1mgHLvJoCajFd/31HX2F77fRGUhaXShQ=)
2: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: oQuknpHujRWpv3+kOcF9HdmlX8LGkdKdWpleInwXKAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:6d:1b:5b:d2:41:2e:78:d9:de:6e:ed:d3:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Validity
Not Before: Sep 28 08:02:29 2026 GMT
Not After : Sep 29 08:02:29 2026 GMT
Subject: CN=d53ea4632ea10e438a7a5397c01c93809b456be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:dd:3f:83:d3:3e:07:dd:80:3f:68:47:55:
e3:93:0a:f9:cf:3d:53:94:15:a0:a1:d0:9b:2a:9c:
5b:7a:f6:ae:0f:24:de:4c:09:3b:d6:50:f7:ce:28:
54:2b:6f:38:1b:7b:0f:41:89:4b:9e:c0:34:a9:3e:
8c:ee:b5:e7:7f:74:55:05:15:bf:b7:ca:3c:29:17:
27:a8:ba:a5:0f:62:4e:45:1e:27:03:2e:96:5e:07:
37:67:69:f4:76:90:d1:31:3f:e8:20:2a:32:7a:35:
63:0b:ec:d9:fe:a4:9c:e1:b5:7a:1a:9e:5b:53:73:
c2:85:63:63:5c:7e:ae:22:56:1c:eb:42:4e:85:50:
72:dc:ea:93:bf:a4:fc:31:17:d5:0a:76:b9:87:3e:
ec:67:44:d1:f6:25:0c:08:c0:ef:de:e7:4b:2b:7c:
ca:8e:ed:f7:fa:15:d9:3d:41:ad:12:2c:5e:be:bb:
e6:aa:f1:84:c3:82:5f:1a:c2:80:f8:1d:21:26:ed:
15:a4:78:0d:42:e0:d7:0a:1e:6a:58:d5:18:aa:4f:
df:7c:b9:4a:75:45:2c:6c:31:8e:34:61:f9:39:77:
cf:07:eb:f0:03:57:d4:29:7f:42:a6:a7:31:83:a2:
dd:56:9a:76:ab:96:14:a2:05:1f:19:65:92:9c:a8:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3E:A4:63:2E:A1:0E:43:8A:7A:53:97:C0:1C:93:80:9B:45:6B:E5
X509v3 Authority Key Identifier:
keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9a:bf:d9:e9:b6:bb:2e:8d:f7:4a:4c:1b:a5:46:c9:77:31:
40:a6:82:f6:18:d2:59:05:71:aa:f2:d3:24:bf:87:85:04:3d:
69:22:56:52:86:aa:53:f3:1c:35:dd:89:e1:5f:bc:90:e8:17:
db:65:02:1f:59:a7:3a:52:92:98:b4:9e:3d:2c:16:58:74:9e:
7e:38:54:d3:64:ff:76:15:0d:31:e7:87:5d:1e:25:26:83:08:
0d:bb:67:0f:7e:d5:1c:6e:c1:ef:71:ac:7c:91:38:3a:80:d5:
75:2a:6a:ea:79:c3:cc:84:3d:1d:8d:d2:26:4e:86:24:1f:0c:
90:06:3e:a3:b4:4e:f8:96:9f:a9:38:0a:5e:b1:f2:89:14:fd:
8b:36:b8:4a:1b:12:79:96:40:80:81:1d:a9:be:a6:8b:65:26:
87:03:e9:b7:1d:47:cf:7c:83:d9:3f:2d:1f:2d:0f:01:63:f5:
d3:de:cf:d1:9a:99:a9:c7:5f:13:67:bd:73:16:09:f4:b6:ed:
a5:9e:4f:b9:9d:e7:0b:de:b7:ab:39:28:ed:7b:22:ba:b7:e1:
da:46:e5:9e:b8:f6:5e:15:c7:c3:b8:b6:97:71:3c:67:60:d3:
c7:da:3c:fb:cb:eb:15:92:5b:f9:51:c7:17:c6:ba:ec:88:5e:
f0:8b:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:15:11 2026 by rpki-client