
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
File: WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft (raw, json)
Hash identifier: RnTFECJCGX6+jYisSAVFUJlIGohb+nD8goRvfGJna6E=
Subject key identifier: CE:6F:CF:C9:20:AF:7D:12:79:8C:BE:6C:AC:8B:D6:F5:4D:6F:04:63
Authority key identifier: 58:0E:49:44:02:95:E5:05:3E:D0:2A:BC:6C:79:9E:8B:59:D4:CE:E0
Certificate issuer: /CN=580e49440295e5053ed02abc6c799e8b59d4cee0
Certificate serial: 019D2961BBEE4DEF631D23A5767E47BB11DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
Manifest number: 83
Signing time: Thu 26 Mar 2026 09:02:44 +0000
Manifest this update: Thu 26 Mar 2026 09:02:44 +0000
Manifest next update: Fri 27 Mar 2026 09:02:44 +0000
Files and hashes: 1: WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl (hash: VgeCXyGv1udqBqotoLRI3Xpp1YWMnHZMLExwMJdb4bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:bb:ee:4d:ef:63:1d:23:a5:76:7e:47:bb:11:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580e49440295e5053ed02abc6c799e8b59d4cee0
Validity
Not Before: Mar 26 09:02:44 2026 GMT
Not After : Mar 27 09:02:44 2026 GMT
Subject: CN=ce6fcfc920af7d12798cbe6cac8bd6f54d6f0463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:62:e5:4e:01:18:99:fc:77:93:63:8f:d0:
e1:78:06:4b:17:7e:fc:ce:9b:47:a3:d0:b9:b6:a4:
58:f1:1b:40:2c:8f:29:55:db:fc:76:84:51:a7:5f:
6f:41:0d:6b:97:3f:77:cd:94:52:14:f7:37:59:3c:
95:34:03:ab:bd:6c:fe:6a:64:b1:33:02:2f:aa:b4:
bb:e5:20:6c:e4:7f:c5:8f:6d:91:43:64:c7:ba:d9:
30:fe:5a:74:78:81:cc:16:3f:0a:0a:89:0d:21:e6:
d5:e8:21:2b:c2:b6:45:3b:69:2d:6c:c0:5b:6c:98:
40:5d:61:4d:60:f4:ff:54:dd:d7:b1:39:75:08:56:
c6:81:d7:1d:a8:73:70:16:f2:2d:5f:2d:98:fc:2a:
d0:05:60:80:af:94:f6:bb:05:59:bf:e6:01:f4:d2:
e6:49:c3:5a:20:de:ea:4b:2c:b4:da:f5:8e:8d:3a:
74:10:10:c8:c8:78:c3:8a:05:bf:5c:9a:e6:7f:2b:
0f:b9:2e:0b:43:06:3b:b6:88:f0:95:8a:6c:ec:da:
64:2b:33:5b:a2:0e:ce:45:4c:f7:bd:86:0f:1c:1c:
71:ef:ad:4e:6d:b8:3b:85:91:15:76:ea:25:50:0c:
9b:e3:45:d2:13:d1:64:2f:23:c0:13:67:6e:f8:d1:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:CF:C9:20:AF:7D:12:79:8C:BE:6C:AC:8B:D6:F5:4D:6F:04:63
X509v3 Authority Key Identifier:
keyid:58:0E:49:44:02:95:E5:05:3E:D0:2A:BC:6C:79:9E:8B:59:D4:CE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cb:44:04:e2:71:af:6f:1f:fe:45:a1:07:9b:6d:6b:f8:fa:
70:32:d3:27:ea:fb:ff:45:e5:06:08:7d:3b:32:e2:27:74:c5:
a6:7c:5a:69:78:16:05:ed:73:6b:02:f9:c6:27:13:5f:e5:7a:
32:63:21:da:70:63:3b:7c:f0:9d:4a:67:24:72:fb:85:bd:cc:
30:da:6c:63:1d:52:af:3d:cf:6d:dc:32:a5:63:a6:6f:4a:83:
47:07:63:2f:21:46:65:02:f2:ba:a7:01:4e:37:1c:af:30:cc:
4d:a6:56:20:8f:ec:bf:aa:18:2f:58:b0:97:f5:fe:55:83:02:
25:ae:29:fa:94:3b:df:6a:5b:23:d9:24:a3:04:79:ee:45:4e:
d9:24:3c:d6:5f:5b:6c:7f:a0:eb:9c:e1:dc:3a:ab:3a:2e:49:
b4:88:b3:26:50:da:17:d7:3e:ab:45:26:04:70:22:ab:96:dd:
45:5f:6b:84:23:55:b2:a8:dd:bb:89:ad:6f:35:d7:71:73:c8:
6b:35:6f:96:a3:2c:90:1f:b0:c5:7b:89:0f:98:bb:0a:03:d7:
59:c7:11:49:e3:4c:90:79:d0:f1:14:10:93:53:e0:fd:ea:7a:
00:18:92:e2:ae:c6:42:1c:2e:4a:6f:37:3d:c8:42:01:2d:ab:
bf:36:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:51 2026 by rpki-client