Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: nhNNSeG97TC+Z5uyc/vEW7vCnjI6KmYvub43Of48XA0=
Subject key identifier: DB:B6:48:F9:F7:30:5F:94:49:3F:37:CF:4A:28:4A:BE:52:77:AB:9A
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 019D26CCDDBD874C8942D6EA50DCC6B775ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: fqZAPUE7c5rwvlcPavP1MdEDSPjcrS2Fp8cpdfq9+DM=)
2: pQkeOCldJON1bEi4a2WMMaalKQQ.roa (hash: 72ocHiEt31RfsJktzPnYu56a2X+W6BrY0WnSPYRnr1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:dd:bd:87:4c:89:42:d6:ea:50:dc:c6:b7:75:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=dbb648f9f7305f94493f37cf4a284abe5277ab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:f8:64:21:96:72:a3:df:0f:b8:c4:ca:d8:
b4:9d:1d:a3:b2:f7:54:5c:77:98:f7:19:b5:dd:c8:
49:6d:97:95:8b:c7:98:d2:f3:41:8a:dd:85:25:6d:
9e:cb:92:9d:6c:78:a2:c6:c5:b0:fb:35:6e:5c:f0:
38:d7:24:a5:d7:39:37:35:60:1a:b5:8f:47:d8:4e:
3c:3f:b1:84:19:01:76:6c:09:ad:64:33:be:f1:4b:
47:71:bf:03:4c:16:20:54:eb:3d:28:9b:07:db:df:
0a:20:20:d8:5e:50:82:00:0f:6f:5e:58:fa:c0:bf:
0d:b8:cb:09:7b:f6:8e:cb:ca:73:4b:2e:00:67:da:
ad:c5:84:ea:14:3d:11:e7:0d:0b:bf:cc:48:b3:75:
dd:b1:b7:98:d6:48:67:44:52:3c:21:c3:b2:fc:55:
c0:db:c5:05:6e:38:26:e0:96:ef:d4:8f:3a:bb:96:
ef:91:0a:a1:5f:0b:5c:29:b0:37:3b:3c:36:5d:88:
c1:af:78:5e:dd:a9:4f:51:e2:68:73:e8:42:bd:63:
18:99:38:13:7f:4d:e3:30:10:ea:07:f6:00:24:69:
06:5e:6c:c6:98:6e:93:1b:27:d2:ef:f1:3a:87:5f:
2f:aa:e9:c2:c4:95:15:2a:d9:92:ee:9b:fc:e4:91:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B6:48:F9:F7:30:5F:94:49:3F:37:CF:4A:28:4A:BE:52:77:AB:9A
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:e9:ff:a2:bc:c7:db:b7:ae:3e:8d:77:3a:b5:93:0d:3a:
59:32:54:e5:e2:ed:8e:b7:20:7c:44:4a:62:11:5d:fe:e8:31:
ab:79:06:a8:22:5e:c1:b6:04:a9:ac:2f:b9:8a:f0:e2:bb:b9:
f1:7e:38:c2:bf:46:9b:a3:fd:ab:e3:b7:0e:2a:b5:73:fa:87:
a2:39:b7:a0:8a:fc:dd:20:e2:25:2c:b8:00:73:e2:e0:fb:e3:
70:40:ec:6d:e0:06:b4:bd:83:ca:f6:b3:e8:9e:40:05:3f:e5:
d4:c5:5a:19:74:37:92:c9:91:16:1c:b2:bd:a1:e6:9e:82:4f:
31:34:7a:04:1f:25:73:9d:f8:f8:af:14:c6:7b:f4:83:52:f1:
b3:bd:1b:ef:b6:5d:33:94:72:cb:b6:32:28:de:57:47:b3:2e:
d0:a2:96:86:db:15:47:de:6c:ab:aa:b8:2f:31:e8:7c:7d:4f:
88:65:c6:4a:2d:67:17:4f:e9:94:2c:9f:0e:e5:2d:2a:81:90:
b6:9c:52:f9:ec:29:75:df:a4:a5:b4:39:3f:4e:1c:80:12:bd:
1b:f4:bb:b5:bd:0e:62:01:26:ed:d9:5b:61:1b:57:d5:e9:d6:
23:4a:42:d2:c3:e1:11:48:9d:68:a4:44:85:40:56:a6:ff:d7:
a8:24:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:24 2026 by rpki-client