Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: z+DR3BGbfYYfZekVXVcFLmMrPGhBi3Ue2xGbcEeAb4A=
Subject key identifier: B6:4A:E5:A6:12:D1:A7:0B:3E:53:AD:89:9A:87:20:E6:F1:21:56:0E
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 019D26CD4A4C084D2F79AE748FF154885BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0C78
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: 6FXk9MN16mpMDzsEBMgqRSBrnIop9oL5fPjIJjX0EmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4a:4c:08:4d:2f:79:ae:74:8f:f1:54:88:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=b64ae5a612d1a70b3e53ad899a8720e6f121560e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e0:b7:45:d8:e6:fb:db:47:75:9d:76:9e:56:
26:f3:6d:c5:c4:8d:d0:57:0e:82:df:9d:96:0c:a1:
0d:bb:86:9e:37:0f:1c:c2:14:0c:9b:ed:c0:fb:d9:
63:6b:a0:4c:fe:2e:68:1e:ec:ce:51:58:6d:5e:f5:
3a:a3:76:40:c0:e9:9f:62:00:f7:f4:39:c7:8a:68:
19:d3:39:c8:de:18:6b:79:80:2b:76:04:71:a7:c0:
c3:e1:f6:77:05:3e:53:7e:15:db:f2:7f:2a:4f:34:
58:f3:de:cd:f7:62:b3:d8:48:8a:c2:5a:e5:d1:58:
c3:67:b1:97:4a:a9:08:02:a4:89:1f:d1:db:99:73:
71:7a:a8:78:3d:de:78:0f:11:8c:19:66:8d:c2:44:
9e:07:60:75:65:0f:46:f7:16:4d:53:ed:04:6a:0e:
58:08:61:30:c7:28:70:b9:b9:3d:de:42:16:01:bf:
78:b1:68:d6:02:34:69:f3:4a:d6:7a:25:1a:61:c6:
58:ee:e9:23:2e:84:8b:c9:24:6a:53:f3:fa:b7:38:
d4:28:12:63:12:27:b9:b5:9c:d5:22:15:b7:2e:9b:
08:50:69:71:f6:2f:ab:4a:7a:7b:f6:5c:2a:d2:10:
b8:c3:37:21:c7:db:48:64:b6:5b:cf:d4:f3:51:af:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:E5:A6:12:D1:A7:0B:3E:53:AD:89:9A:87:20:E6:F1:21:56:0E
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e5:c8:0e:8d:5f:07:7a:ff:da:59:47:a7:cf:af:ff:af:66:
e4:60:e9:98:6f:c4:8d:b0:04:ee:6a:70:f5:a1:e9:1f:62:c7:
6b:b7:e4:0a:f7:13:7d:72:94:9e:f5:b9:90:db:15:ff:66:55:
e0:02:fc:42:39:69:51:b3:06:fd:f6:bb:85:b9:72:7a:ce:dc:
0a:e6:7b:ca:47:a7:ab:a6:32:a0:17:34:21:33:4f:85:c1:8c:
dd:2b:df:9d:23:f7:96:d8:cc:26:2f:da:db:0b:29:e1:5c:97:
63:2d:e3:e7:c5:74:f7:f2:00:9f:5a:f6:f0:a8:20:6c:b0:3f:
b0:0b:99:3d:7c:ce:d7:73:0d:06:90:53:ff:c5:60:b8:a9:22:
4a:a3:d2:a1:68:97:02:f4:6b:e9:e2:ee:39:3f:88:83:33:66:
bd:f0:40:69:f3:52:dd:d4:e5:f7:14:a2:2f:99:36:45:00:56:
b5:77:4e:98:3a:bc:4c:19:aa:70:ea:03:4a:f6:e7:83:63:f5:
d8:d7:97:9f:9b:ca:5c:ec:a0:bf:07:90:76:75:ce:f6:a4:76:
67:87:f4:29:62:04:95:fb:03:89:0a:b3:58:16:62:9c:0d:81:
03:64:00:a6:b1:bb:5e:44:17:f4:d5:d3:21:c4:fc:62:fa:86:
48:51:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:47 2026 by rpki-client