Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
File: WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json)
Hash identifier: 8NgVouJ7fpXVOKHpbvj6CVPbEUE/PRifDIic2f/eDKM=
Subject key identifier: E2:76:73:62:B9:0E:CC:2F:3A:5D:72:0B:08:AB:B5:97:C7:51:54:2A
Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
Certificate issuer: /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Certificate serial: 019D2695C92DC15CDA3CED02FF4290EF59F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
Manifest number: 0D83
Signing time: Wed 25 Mar 2026 20:00:43 +0000
Manifest this update: Wed 25 Mar 2026 20:00:43 +0000
Manifest next update: Thu 26 Mar 2026 20:00:43 +0000
Files and hashes: 1: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: sHkCrXH4FpF+gwAgzBasQ0lL77m11q+DJXmjvafDJn4=)
2: f_GWy2LHysske0RWtBkF7AL9X-U.roa (hash: nrjzy2n06K9FvMdvpZLXzctrlxHCSSGtGX1t8yN4WJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c9:2d:c1:5c:da:3c:ed:02:ff:42:90:ef:59:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Validity
Not Before: Mar 25 20:00:43 2026 GMT
Not After : Mar 26 20:00:43 2026 GMT
Subject: CN=e2767362b90ecc2f3a5d720b08abb597c751542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:93:b8:87:e6:78:02:72:20:d3:10:55:b6:
e9:38:38:0e:29:d3:10:1a:c6:e6:eb:14:2f:d8:86:
7b:ee:86:a9:5a:e7:26:8f:17:d6:5f:f0:95:43:b0:
c1:1b:fc:7d:96:00:2a:51:d4:e5:c6:6b:ed:62:35:
ce:07:ba:e7:07:f8:17:1f:0d:84:5a:38:13:5d:8d:
68:90:64:a6:d1:b1:1c:e0:d2:6b:c9:f7:e9:b5:6c:
18:23:84:d0:ad:ed:6a:56:95:95:d7:d8:dd:e6:96:
eb:df:19:b4:22:a4:5a:b8:4f:10:17:ff:63:60:dd:
62:3a:fc:ea:6c:9a:93:04:6c:2f:33:6a:1a:1f:11:
28:d8:83:36:53:68:3e:04:15:2c:03:fc:cf:9d:23:
10:8b:f1:85:ff:70:f9:9c:8b:e7:74:b3:ab:85:d9:
3d:1b:6e:05:31:bd:4a:5d:73:4e:fa:21:09:4b:65:
49:59:8a:f3:8f:d1:6e:a6:34:b2:fd:6d:6a:30:c2:
9a:fa:6c:e8:ce:c0:c2:33:9f:5b:d9:5f:ae:2e:c5:
52:64:93:c6:ec:ef:b3:1d:8f:58:56:55:9a:01:ea:
cf:cf:66:dd:98:83:73:d8:17:0a:0f:42:56:69:91:
60:50:23:10:3b:76:e3:3a:f7:0d:9a:8d:21:69:07:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:76:73:62:B9:0E:CC:2F:3A:5D:72:0B:08:AB:B5:97:C7:51:54:2A
X509v3 Authority Key Identifier:
keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3b:06:b0:f6:8c:3e:27:65:0f:f7:b0:f5:0f:d2:5d:b1:25:
7d:f0:f8:3c:33:5a:3f:fd:ab:d0:60:1e:d9:67:4a:79:97:a9:
95:e8:af:5d:7e:aa:49:8d:c8:c9:e7:01:8e:d5:72:30:db:a3:
7d:b4:49:ad:7e:f6:90:b9:98:8d:4a:10:d5:21:9a:fc:c8:29:
44:47:0f:5b:2b:66:52:ae:0a:23:cf:96:20:b2:6b:ba:7e:7e:
67:41:4a:52:be:01:4a:be:c9:e8:4b:55:03:6a:5f:49:ce:b2:
cd:11:d2:70:fa:d7:0d:29:c6:44:4b:37:fa:b1:80:15:89:9f:
2b:b5:8c:96:9e:47:10:37:9e:0b:57:d7:a6:b9:7a:7f:b0:f6:
3d:be:bf:3e:cd:71:27:a0:fb:48:8f:a8:f6:7d:b0:f6:d0:5c:
55:d4:b6:c4:85:6a:a9:71:f3:5a:2b:b7:09:be:e5:a5:c7:4d:
31:58:d9:48:47:26:44:a6:57:53:5c:47:cb:9c:41:62:0b:be:
f9:f4:4e:8c:6a:0a:00:9e:35:f8:41:be:c9:4c:a4:a9:40:78:
e9:0c:e5:42:13:51:8d:bb:e7:88:ad:04:3d:ba:a6:92:ee:74:
10:ee:f8:6f:38:89:cc:b4:60:50:32:a8:42:67:76:13:c1:59:
48:d5:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:29 2026 by rpki-client