Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: 8YjsLGlIQ2IzRcTf6nh9PJPCRlh4D1gdlmxknMXBzRQ=
Subject key identifier: CD:80:B2:00:0D:A7:52:D5:E4:FE:EF:08:17:14:26:6B:C2:C9:85:8A
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019E1F11521A82D05F59FDEED444FD60F119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 1135
Signing time: Wed 13 May 2026 02:01:29 +0000
Manifest this update: Wed 13 May 2026 02:01:29 +0000
Manifest next update: Thu 14 May 2026 02:01:29 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: BozRFC6MQjZHbw+HJJmmSB2OFvRXrXdLbD/eS6KTFSk=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:52:1a:82:d0:5f:59:fd:ee:d4:44:fd:60:f1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: May 13 02:01:29 2026 GMT
Not After : May 14 02:01:29 2026 GMT
Subject: CN=cd80b2000da752d5e4feef081714266bc2c9858a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:a1:b6:f5:dd:d5:89:4b:ac:44:69:4f:93:
e6:3c:92:77:2c:ac:fe:16:0d:7a:06:96:51:fa:14:
9c:65:0b:e0:62:fa:76:3d:50:15:55:8a:24:a0:b2:
4b:44:7b:a2:3f:2e:4b:d1:64:3b:ce:59:64:22:d4:
c1:6c:43:bd:8b:fe:a9:7f:9f:9c:78:a9:fb:64:23:
9c:0e:33:28:76:16:f7:7e:09:c0:52:67:2b:09:80:
d9:0b:ff:39:f5:12:2e:f0:81:e8:5e:be:c9:6b:40:
68:aa:e8:b5:be:c8:71:a7:81:95:0b:80:8f:de:09:
5a:30:42:a5:d2:7e:f0:3d:7c:0d:cb:0b:32:f7:7c:
7c:04:09:78:82:e2:dd:2d:45:ec:e7:5a:e7:ea:a5:
e7:ca:70:7f:29:de:13:43:0b:b5:1a:6b:42:8e:20:
aa:26:cb:34:9b:83:55:ec:df:04:e3:12:d6:a7:63:
8c:cd:46:ec:c6:ca:b1:fe:93:76:35:4e:67:09:08:
fa:79:62:f9:7d:ed:9c:cc:8b:ca:0a:f4:53:1d:7f:
fb:ce:d6:72:82:95:ae:89:91:33:ae:69:af:90:c2:
56:ec:f7:37:b2:9e:d7:9c:d5:b6:17:3e:89:91:f8:
09:95:24:a2:3b:0f:bf:9e:a8:d6:d9:c8:eb:bb:df:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:80:B2:00:0D:A7:52:D5:E4:FE:EF:08:17:14:26:6B:C2:C9:85:8A
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e4:79:8c:e9:37:26:c5:de:29:3a:7e:d5:a5:41:52:d5:5a:
c3:d2:5d:c6:aa:35:97:1d:17:32:da:1a:d0:2f:23:8f:cc:fc:
27:bb:07:b7:ea:0a:6d:61:ee:bf:49:74:ff:b9:c5:95:49:05:
77:f0:e6:e9:f1:9b:1d:49:df:53:67:1b:5c:0f:11:73:67:06:
38:ee:a8:fa:e1:fe:f5:39:6a:35:a6:44:6e:31:5c:47:e1:f5:
00:8e:7f:8d:4a:e5:bf:5e:ad:0a:13:02:dc:77:75:b0:31:1a:
94:f0:d8:de:f6:7f:d7:56:e1:16:d9:9f:e9:3f:45:7b:4e:81:
aa:12:92:79:b1:1d:dd:5c:4c:36:6a:63:82:b6:1e:c8:6b:f8:
3c:97:ac:c0:11:74:74:4d:d6:0a:37:55:60:9b:e9:da:7e:43:
54:25:de:b6:4d:86:b3:62:36:3a:1b:3e:5d:fb:9a:8e:d5:32:
63:e2:8e:62:25:88:6c:d1:c9:f7:6b:9e:1d:00:50:a3:0e:f3:
a0:44:4f:04:27:e4:32:8b:06:cb:ac:f5:56:8d:01:6b:5a:5b:
e1:3e:e6:52:e7:45:3d:c2:db:8f:dd:24:3f:ea:80:5a:1b:e6:
db:8d:a8:b0:47:af:2e:4a:85:30:09:52:c0:6b:38:f3:27:17:
5a:29:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:08 2026 by rpki-client