Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
File: WX2pAlHCK1uljAuii6BJC51tQgU.mft (raw, json)
Hash identifier: kb3qwF2JVK5xRfjRgftKW31eyLIxaqlYm3YJmbf+a04=
Subject key identifier: 00:4C:D0:C3:55:89:11:01:AC:33:40:7E:43:2F:40:CB:7C:03:B8:4C
Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
Certificate issuer: /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Certificate serial: 019D2515C18BD46B610038856D144F484503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
Manifest number: 12D3
Signing time: Wed 25 Mar 2026 13:01:15 +0000
Manifest this update: Wed 25 Mar 2026 13:01:15 +0000
Manifest next update: Thu 26 Mar 2026 13:01:15 +0000
Files and hashes: 1: WX2pAlHCK1uljAuii6BJC51tQgU.crl (hash: s9GQ4yu43qe78Y4z8Qz0TTscWKc1rpmbNS8+9jeSJS4=)
2: wp43uQ4Y7G_TuDLdqj3WtI8cFb8.asa (hash: cM42IU8piBPhyxypKouUfTLilijPrh6kydUlWxujs08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:c1:8b:d4:6b:61:00:38:85:6d:14:4f:48:45:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Validity
Not Before: Mar 25 13:01:15 2026 GMT
Not After : Mar 26 13:01:15 2026 GMT
Subject: CN=004cd0c355891101ac33407e432f40cb7c03b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:84:cb:37:95:b2:ce:4f:f1:6c:c3:24:22:
17:f1:31:06:6c:e5:5a:e5:1f:d7:46:9c:2f:58:3c:
d0:05:03:5f:72:10:f6:a4:03:ed:f3:fc:ed:b6:bc:
48:dc:b4:76:f5:19:5e:ec:7a:50:bd:27:43:91:1f:
59:d8:1d:fd:65:0b:42:38:2a:c8:eb:73:f9:e5:01:
b2:b9:da:d6:eb:c3:ae:56:46:45:31:ba:4b:9f:a9:
f7:9b:af:10:4a:9a:66:d8:79:39:5c:6b:7e:3c:c0:
f9:77:59:2a:11:2c:17:5c:c8:dc:c0:5a:16:6d:74:
a4:1e:e9:27:4c:19:d8:43:19:40:52:11:77:72:fd:
8c:10:6e:9a:9a:31:49:e4:b1:0a:b6:ee:02:90:0f:
a0:79:d0:08:32:03:e7:9f:79:ca:68:b0:85:cd:72:
22:1f:68:dc:fd:66:79:ec:ce:0e:8f:bb:68:7f:45:
f8:5a:96:52:f4:c1:68:f5:15:c7:db:d2:65:3e:fd:
cb:81:60:8d:bd:bf:f8:46:61:ca:8f:01:41:2e:33:
e9:80:54:80:bf:46:96:6c:4d:e8:c0:a4:9d:ac:ff:
79:c0:75:4a:87:57:64:94:1f:75:47:fb:78:ff:00:
69:fc:8c:f3:f5:a8:77:58:04:bd:97:58:4e:de:b3:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:D0:C3:55:89:11:01:AC:33:40:7E:43:2F:40:CB:7C:03:B8:4C
X509v3 Authority Key Identifier:
keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a1:c3:5e:ad:04:5a:5c:33:ed:6c:a9:c7:a0:d5:cb:f1:bf:
da:d6:e9:67:c2:8a:58:e3:a0:01:3d:4c:ea:89:d5:e5:87:bc:
a0:f3:eb:40:72:0e:1c:9e:d3:3d:a4:14:15:8e:46:4a:a1:ad:
e7:af:66:50:0e:2c:d0:fd:c5:58:be:da:50:3a:1a:01:9a:05:
a8:57:ef:fd:90:2e:bf:0c:6e:4a:0a:d3:27:88:54:3f:a8:8d:
15:d0:f7:9c:b1:38:55:20:f6:ed:e2:66:e3:aa:d4:1b:14:d3:
cc:64:d9:98:c0:cd:bd:ab:af:53:fb:d5:94:5a:dc:86:46:2f:
c2:ae:1d:20:13:a0:19:bd:e0:0d:26:20:97:0a:c3:c6:ba:95:
9b:3d:85:1d:bc:1e:5e:67:26:61:5b:9c:dc:76:9c:1d:e4:79:
6b:a7:3d:06:5c:e9:9c:24:b3:a9:f5:3e:15:db:23:0e:90:48:
94:28:ff:8d:e7:2d:8a:8d:40:5f:66:30:1d:87:c5:90:75:e7:
bf:e2:2a:4e:c4:93:12:46:d6:d5:b1:8a:b8:e9:a1:6f:ad:44:
1e:bd:c5:24:d2:7a:29:22:4c:c8:ca:84:44:b7:36:c3:37:68:
0e:9f:8f:dc:bf:39:da:e9:2a:8b:ef:cd:b9:8a:b3:37:25:09:
c4:dc:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:19 2026 by rpki-client