Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
File: WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft (raw, json)
Hash identifier: EEc9tcxwhsQaj9Ejgo+n99B2eOAXwzbdmI7Vsdv7U+U=
Subject key identifier: E8:4C:98:3E:D7:D8:1D:4F:3A:7F:2F:C5:3C:E5:90:95:C2:8C:AC:06
Authority key identifier: 59:4E:72:50:8C:06:71:83:22:C0:FD:DC:5F:67:30:9C:BC:89:14:F4
Certificate issuer: /CN=594e72508c06718322c0fddc5f67309cbc8914f4
Certificate serial: 019D329AE7F9E8D0FF328C3DA7247DAB7EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
Manifest number: 1B
Signing time: Sat 28 Mar 2026 04:01:45 +0000
Manifest this update: Sat 28 Mar 2026 04:01:45 +0000
Manifest next update: Sun 29 Mar 2026 04:01:45 +0000
Files and hashes: 1: WU5yUIwGcYMiwP3cX2cwnLyJFPQ.crl (hash: OEpT27G/XWqzAADVIPpdgXPZE7alN9JSzucD9pz1rhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:e7:f9:e8:d0:ff:32:8c:3d:a7:24:7d:ab:7e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594e72508c06718322c0fddc5f67309cbc8914f4
Validity
Not Before: Mar 28 04:01:45 2026 GMT
Not After : Mar 29 04:01:45 2026 GMT
Subject: CN=e84c983ed7d81d4f3a7f2fc53ce59095c28cac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:37:45:6d:b8:03:0f:93:1f:dc:9f:47:99:
4f:92:7c:c6:3c:c9:f1:59:b2:e2:61:47:ee:3c:7f:
c6:85:8e:e8:b4:bc:62:b3:56:e8:9d:d6:94:43:9f:
b1:3b:c0:96:67:09:49:ee:ff:76:d5:66:3e:fb:59:
cb:44:fb:5e:44:09:6f:37:45:d9:6a:01:ab:79:62:
5b:da:b4:b8:20:ac:33:c1:4d:80:c5:d7:34:69:7c:
6f:b4:ff:5e:69:12:35:9a:b5:d7:6d:e7:19:b7:f4:
23:de:b9:e0:d3:d3:85:24:4e:d1:c5:64:bf:01:4d:
6f:c1:6b:62:92:aa:ee:05:73:27:4e:dc:a9:1c:e3:
1c:18:b0:58:ae:e8:26:1b:a4:72:cf:cd:5c:62:32:
ef:95:5d:aa:48:29:1a:77:37:bd:fc:34:fb:f4:45:
ec:d0:d9:e8:62:64:2c:1e:16:39:59:71:91:0d:33:
71:9d:d5:3b:11:00:86:17:c3:54:4f:67:8d:a5:03:
86:0d:05:92:67:c7:c3:b6:74:6c:2e:d6:55:1d:01:
86:d2:71:97:0b:fe:6e:ad:9a:1e:f7:d9:81:2f:4f:
b2:3a:9c:08:57:d3:03:96:34:8e:65:1d:eb:9f:66:
fb:16:32:56:83:52:3e:cb:96:09:dd:3f:62:b1:0f:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:98:3E:D7:D8:1D:4F:3A:7F:2F:C5:3C:E5:90:95:C2:8C:AC:06
X509v3 Authority Key Identifier:
keyid:59:4E:72:50:8C:06:71:83:22:C0:FD:DC:5F:67:30:9C:BC:89:14:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:08:2a:fd:ff:1e:b8:d8:32:93:13:97:d2:f7:79:46:8e:93:
16:25:c6:4a:74:97:26:65:d7:4d:93:fa:b4:ec:fc:0c:8d:52:
c6:54:5e:43:21:17:33:4b:ac:5a:ad:7e:05:bc:11:fa:a7:e5:
2a:26:59:e2:ee:72:98:85:1b:25:32:b0:47:27:c3:40:6a:8e:
b3:e1:05:4a:81:b5:48:9e:47:73:0d:f0:91:dc:1d:3d:b6:03:
9c:e3:2e:16:57:2c:d3:89:86:60:48:ca:f5:69:cc:8d:01:dc:
6f:a2:4c:bc:02:02:23:70:0d:ce:70:63:34:fc:1c:0b:8c:4d:
d4:24:52:ed:dc:a0:de:a4:85:9b:0a:72:1f:d3:34:29:5f:d1:
75:81:fa:4c:56:5c:6a:30:b7:f0:67:2f:c8:16:10:c7:b3:fa:
04:46:a4:f9:c2:4b:fb:9f:02:df:fa:08:3a:b0:74:d3:45:4a:
92:1e:e6:59:86:a3:c9:69:2f:0d:e4:50:05:31:c8:72:26:cf:
52:1b:df:8b:9a:ae:f6:bb:52:ec:3d:f7:e1:76:bd:84:aa:fc:
c2:20:2c:4a:b8:6f:e4:a5:e7:3a:d3:ee:cd:15:c6:13:c1:9a:
ec:7c:eb:4b:b9:d3:e0:68:f1:02:25:0e:29:77:ce:ec:1f:ac:
4f:06:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:34:30 2026 by rpki-client