Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json)
Hash identifier: Ow+VB8r+gjClvyx6i7rAwLLerWzeBVcQigBzwIlBJ1I=
Subject key identifier: 43:EE:A4:77:66:AD:D9:8A:8B:BF:8B:B8:26:C0:EB:50:96:B3:20:12
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 019D28BB27A1072490B646C7A35669491607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
Manifest number: 020F
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: h3AKrb6+iLbm0lG4WxiwNcYQRskTZ61AwY7jG5QfLVg=)
2: rHga55Czu_olcqXp1dL1ZJ5IEJs.roa (hash: HvIYhtCsc4ksr8e9YC8iXYnS+/L7IK0zJKHOtTBpT4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:27:a1:07:24:90:b6:46:c7:a3:56:69:49:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=43eea47766add98a8bbf8bb826c0eb5096b32012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:ba:b1:b2:27:ee:44:57:3d:ac:bd:bb:df:
8a:e8:c0:1b:cf:c7:0b:b7:79:4c:65:be:3c:cf:2c:
98:65:29:13:9d:36:4a:67:10:59:0b:7b:4f:69:bb:
27:43:36:ca:2b:9f:08:90:ad:9e:0d:ce:95:20:4d:
3e:1b:2d:37:a0:da:a9:8e:e2:6f:22:04:2c:26:40:
ee:ea:33:1a:eb:90:c7:10:38:ce:43:a4:42:92:7e:
e9:ea:bb:06:02:22:a9:e2:57:d1:76:94:37:b9:91:
88:04:47:e8:a1:ff:20:6a:5f:30:2d:0e:c2:9c:b0:
16:55:1f:01:92:35:11:7f:5d:ad:7f:a7:3a:1c:2e:
0c:c4:30:04:95:97:29:93:e3:9e:55:48:ea:57:2c:
12:ae:0e:97:15:d3:2e:9d:d3:1f:8e:70:1b:38:5b:
f5:50:22:c6:8b:06:cf:f8:0b:c6:2a:d3:75:09:d0:
d7:ed:21:a3:64:db:0d:b0:70:10:16:56:b1:c6:ba:
b5:53:c3:c4:bc:f4:55:93:49:83:5a:24:b2:f7:8a:
d7:c1:3c:aa:f3:ad:ea:c3:14:a4:8e:3b:d8:5a:78:
86:6f:62:50:bd:df:c3:02:58:0e:3c:39:62:d3:1e:
d8:e6:90:11:05:e7:42:75:6a:28:2b:ba:63:9e:35:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:A4:77:66:AD:D9:8A:8B:BF:8B:B8:26:C0:EB:50:96:B3:20:12
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1e:76:96:cc:a1:30:d6:b1:1d:c1:ff:e5:d4:54:5e:6c:aa:
58:e1:cf:46:40:4d:29:09:95:ea:8c:1b:69:c7:dc:83:62:0d:
f9:60:fe:b7:4a:e6:ea:7e:e1:ee:68:2e:33:ff:5a:c4:97:a8:
3b:4a:75:ab:6e:63:78:aa:c6:53:63:c8:a6:e7:92:0b:36:92:
5a:69:5f:aa:cd:fa:43:c5:7f:27:32:e1:f3:84:d4:2f:62:ac:
5a:62:5f:85:b4:03:17:8e:ed:29:14:d5:95:b6:b1:58:a3:5a:
fa:43:bf:35:3b:22:0d:7b:1d:7f:8e:12:e2:a1:f0:7f:dc:d5:
7f:ab:f8:ed:21:f9:c9:8f:a6:73:38:8d:23:cb:d7:0f:7b:7f:
0e:7e:bb:9f:be:5d:15:f3:bc:c8:bd:f2:c7:57:c0:61:cf:ac:
2d:9a:eb:fd:d7:d3:d3:d2:60:23:d4:fd:4e:96:7c:b2:09:fc:
f8:4d:98:52:43:3d:da:fb:95:b8:6f:67:f1:80:b6:91:32:bc:
61:73:6c:c3:24:91:de:8c:f7:5f:5f:f1:8a:c2:64:47:3f:e8:
51:a9:a6:ae:8e:a3:0e:7a:58:ca:6f:2a:ed:ca:ed:57:fc:52:
d0:98:c5:02:52:98:1a:f6:47:7e:0b:ea:28:97:97:1f:74:60:
76:a3:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:53 2026 by rpki-client