Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: cWetwh6TFGJmisFnyws+g16AaxM7H4cKqTlPbR7mgbk=
Subject key identifier: FC:91:E9:26:3D:FA:70:39:76:01:E2:40:98:51:FC:40:2A:A0:66:F6
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019D2960D6E1A986E4C1AE7727DA016F686A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 1358
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: fcc9mX62EaPhcRA1tzHLErbCu2/omueJNI5VFal6teo=)
2: r5JhX1WVRIuKls91bpGfQhBP5nc.roa (hash: 90E5B0cY9riZPq586g/WUgh0i6XK0BnsOAwKiwltDoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d6:e1:a9:86:e4:c1:ae:77:27:da:01:6f:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=fc91e9263dfa70397601e2409851fc402aa066f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:6e:fc:93:ba:1a:f4:99:6a:ac:d7:00:57:
b5:2d:b5:57:9c:bf:d9:5a:20:72:5c:8c:5a:25:0c:
24:02:6e:6a:d8:51:24:68:09:08:a2:9b:81:62:a6:
22:53:04:44:d5:63:38:55:6d:2c:4a:b1:d8:d9:12:
76:8b:83:03:3c:7a:47:1d:a4:e4:f3:b9:84:2c:c1:
89:60:f0:59:26:eb:34:8a:54:45:f3:cc:64:24:01:
a9:7b:bb:db:34:00:94:e4:3a:c3:65:2b:4b:d8:91:
2b:95:26:35:e7:e9:d2:f4:58:68:b0:e4:1e:fa:43:
75:82:a9:d0:f2:ad:f6:31:f0:4d:5d:cb:c1:d2:07:
00:f1:f9:9b:8a:d3:da:c4:be:26:33:f4:36:35:49:
48:83:5c:25:25:ac:aa:ca:b7:bd:50:08:df:ca:44:
77:42:2e:25:86:45:44:33:a9:69:01:30:4e:1c:c4:
a8:da:9a:28:77:ba:c7:2e:db:07:76:a3:61:33:5d:
4f:d7:e2:95:99:e8:36:9e:72:e7:44:d3:27:dc:c4:
7d:e9:e6:02:0c:56:f7:84:1f:a6:52:1e:14:35:ca:
ee:f8:76:99:bf:90:c4:58:b6:44:69:92:49:fe:89:
5f:ed:d0:27:5d:dd:c9:d2:83:09:43:d1:fc:b1:f3:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:E9:26:3D:FA:70:39:76:01:E2:40:98:51:FC:40:2A:A0:66:F6
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:d0:22:f4:db:ce:2c:a0:b4:57:f3:85:14:6d:9a:22:9b:
30:c0:53:ec:1d:36:c1:75:8d:62:fc:3c:74:d6:30:7c:a4:72:
5f:d4:20:28:d2:b0:c8:18:2d:59:76:6c:f1:b4:df:f8:19:d1:
dc:a7:69:98:5b:69:c5:8a:8f:ec:66:43:60:9d:fa:d8:fc:65:
d0:db:ab:e0:74:ab:cb:3b:42:7f:56:9c:e9:03:19:de:bf:80:
34:06:68:1e:96:c8:a2:29:c0:a5:d5:ab:23:f9:7c:a4:69:03:
91:72:49:6a:ee:86:07:5c:1e:b3:bf:43:21:70:64:9b:e7:34:
3b:e6:55:73:72:da:c4:c2:87:8c:73:48:81:6a:0a:ae:8e:17:
ed:09:24:c0:a7:e6:7a:1b:7b:18:e9:db:cb:0c:ae:d1:e4:df:
4d:b8:ba:ec:33:1f:67:17:cb:c9:86:83:7a:bf:6f:2c:c4:29:
54:63:9f:43:5d:73:35:a0:69:f8:30:ef:54:2a:ca:ce:4e:a9:
a8:63:c3:2e:cd:0e:c2:7e:02:fe:0e:0f:09:40:f1:7d:97:a6:
17:d0:4d:ba:48:09:43:0c:50:1b:12:fc:76:7f:49:ab:12:a6:
b5:0c:6b:c3:a5:a9:aa:9a:94:b6:73:f1:6f:10:39:44:a3:ad:
89:ef:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:19 2026 by rpki-client