Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: Z7XLaJ+jIP9T+jWz/De4Gn5YYKERS/wKg8iZmibH5JQ=
Subject key identifier: 9B:6D:8D:0C:75:36:F3:07:CE:DF:A8:5A:E7:87:76:1C:2A:98:4C:77
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 019D273AF75961F05E8B76C57AEB4B0AC2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: 4DvKtRZcP9GLGM8ozElcZ3EtKur7x6Dte7a0qS+t98E=)
2: hjtitcU8d-FLJ62seFiGxMChEI0.roa (hash: zPnqOgCOOliYSlkJeU3JzTfIehQxkqyATNcPPm5JpBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f7:59:61:f0:5e:8b:76:c5:7a:eb:4b:0a:c2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=9b6d8d0c7536f307cedfa85ae787761c2a984c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:df:98:89:13:0b:58:8d:df:c3:31:82:87:
b1:a4:8c:bb:15:ac:37:0d:c5:4e:b2:ee:fd:29:af:
b9:1f:3e:b6:08:17:4b:27:a7:ba:c4:e6:ca:da:84:
f6:6e:80:35:1a:14:e4:0d:28:6b:d4:53:63:d2:c6:
85:cb:aa:20:04:89:2f:32:48:34:c0:29:2d:7b:4c:
64:f3:8a:ca:8e:f7:89:33:a7:f1:43:e4:66:83:75:
33:bc:73:ad:2a:be:24:e8:5f:ea:a8:12:df:20:18:
4b:df:fa:93:2b:4f:c5:cf:61:2e:f3:7e:40:e4:73:
dd:f5:84:76:70:e3:38:d7:96:0e:9e:96:7e:a4:f3:
e3:03:b0:7a:1d:36:68:bc:f3:a8:ec:c1:04:6e:62:
e3:37:68:1c:8d:f3:98:61:f2:b0:01:0c:dc:e6:d8:
db:31:10:93:cf:86:8a:f0:c7:ae:39:17:0b:af:bf:
23:69:7e:4b:f5:b8:e9:e6:b6:7b:3e:b5:85:f2:5e:
78:54:c2:53:d4:62:14:72:d8:30:d3:29:9d:75:54:
14:76:a8:fc:ac:86:dc:60:97:6d:90:b7:d7:4f:57:
82:53:bb:b3:1a:5d:37:d0:b3:ef:36:75:b4:f7:0b:
18:e0:a0:c6:89:40:f5:ff:27:a7:8d:b8:fa:2e:81:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:8D:0C:75:36:F3:07:CE:DF:A8:5A:E7:87:76:1C:2A:98:4C:77
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dc:c5:2a:9c:2e:09:53:e3:41:66:32:ef:d2:43:b4:6a:17:
99:7b:6a:9c:57:aa:56:8d:81:44:f8:ec:5b:1d:09:d7:4a:fd:
b0:cf:03:a9:be:f9:a7:73:49:4d:95:81:b0:9e:0a:5b:67:9c:
f9:92:04:06:75:a1:e8:62:78:53:eb:19:55:04:20:56:bb:b4:
2b:09:90:d1:29:ce:2c:31:3a:0c:99:92:50:01:03:eb:cc:8a:
2a:aa:f4:69:fd:3a:ee:b8:bc:95:47:2c:78:d3:dd:f3:1e:9a:
c6:f5:7e:ec:1f:89:aa:20:f4:7c:3e:43:76:d5:9d:58:f2:d6:
b4:c4:66:25:6e:e1:95:9f:13:09:91:16:2c:e2:cf:cd:2c:80:
d1:c9:3a:68:54:0e:1e:f3:4a:b9:fe:f9:89:86:1b:47:4e:e5:
dc:e1:f6:18:96:a7:c3:a4:0f:37:64:e8:58:fc:57:f2:23:3c:
6f:98:d2:61:87:1f:42:06:40:db:24:5d:4c:34:49:d9:43:57:
ae:6d:9a:e7:79:1b:9f:7a:30:25:81:e1:09:f7:a8:d1:e2:55:
0a:24:58:cc:e9:70:24:fd:fe:30:f6:90:eb:dd:8f:a5:5b:e3:
78:f6:75:d1:75:45:74:f6:6a:aa:6a:dc:a6:fa:98:c6:dd:74:
a0:a2:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:33 2026 by rpki-client