Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: LqDpf8lgjD0z9puwtyMYeG6pGQ77RsXcqt6oNsXvk+I=
Subject key identifier: D1:12:CA:D5:B0:1E:14:05:FB:63:6A:9D:7E:B4:57:0D:8E:82:68:78
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019D27DF8E624C5CEBDA8CFACB909D7CECFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 10B5
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: ZiR+YtzFi2G/ifu5U9+tVaaOMPWodw4HaZklHycBc/U=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8e:62:4c:5c:eb:da:8c:fa:cb:90:9d:7c:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=d112cad5b01e1405fb636a9d7eb4570d8e826878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:0e:bc:70:d4:2f:6e:00:74:9d:ab:f4:4b:
21:c6:b7:a2:d4:cb:46:0d:e3:2c:2f:aa:f5:43:38:
b2:53:ae:e3:5f:53:20:b9:b8:39:2b:15:18:39:2b:
73:d3:ae:ed:da:82:48:87:05:8b:33:db:a1:f5:00:
9c:a7:c4:89:ef:45:44:d7:37:67:f4:63:7c:f1:97:
72:4b:bd:98:2e:e4:21:a9:64:5e:0e:cc:5a:f8:cc:
30:c0:94:ae:38:a7:60:11:ee:11:07:de:dc:99:13:
3b:24:c8:6f:af:5c:64:47:43:9c:f0:97:d3:ef:17:
ea:0a:13:9d:aa:6c:1f:37:e9:11:65:ab:5c:2a:e2:
e4:6d:c4:e3:18:5a:aa:ee:40:91:24:a7:44:a6:7b:
90:cf:26:0a:e2:58:c5:50:71:f9:67:0f:5a:a7:5d:
2a:31:ef:9d:70:20:60:91:35:45:5e:16:c2:7f:82:
e6:4a:08:36:02:c1:9a:85:db:4f:40:34:b9:30:85:
2e:e9:2d:ac:46:f9:1c:43:43:6f:69:16:aa:89:b8:
da:e3:79:c8:f5:f0:ff:9d:88:da:12:05:26:e7:db:
d1:0e:a1:28:c8:8a:a4:2f:ae:37:a0:3d:32:00:69:
bf:13:2b:42:b4:b4:be:ae:5d:f8:4d:45:7f:47:8e:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:CA:D5:B0:1E:14:05:FB:63:6A:9D:7E:B4:57:0D:8E:82:68:78
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:23:96:89:21:22:be:ef:de:13:c7:85:1e:4a:be:ea:da:
ee:4f:e2:bd:9b:df:e3:e5:7a:53:52:56:fc:0e:42:75:68:c9:
f1:6b:6e:46:c4:52:12:ca:7c:25:c6:a7:df:3d:6c:a2:ac:c4:
a8:52:b3:d6:63:5e:73:52:db:c4:cd:b9:7c:ea:f6:b1:7b:38:
d0:3f:74:3d:fa:b1:12:3b:74:30:a3:60:f0:d3:f6:b8:f7:24:
23:c3:64:d0:5e:c9:a9:1d:f6:5e:94:ef:09:43:24:16:86:63:
49:a3:a0:47:98:3a:b4:07:74:66:b4:1c:a5:99:aa:88:3e:46:
2e:57:4e:4b:01:7e:79:3f:5d:7a:94:62:f1:01:00:a7:61:fe:
1f:f8:ab:d9:77:23:7b:81:3b:b2:f9:74:4d:38:2e:96:5c:ac:
a6:b9:66:6d:07:e9:55:58:77:ec:21:8e:c5:82:56:cd:76:38:
aa:6a:70:27:86:b4:81:fb:9a:be:a6:68:d3:58:e8:ff:ab:a3:
6c:2b:5b:1e:ad:f0:20:6a:43:4c:70:6d:5f:ff:a0:2c:dc:f8:
36:e7:39:81:cd:57:0c:b8:a4:a4:21:96:3c:63:90:66:7f:00:
75:e9:39:b4:a3:7f:ca:d3:06:dd:e2:c6:6c:f6:e8:e2:14:b3:
c4:5f:f3:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n345iTFzr2oz6y5CdfOz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjYwMzI2MDIwMDU1WhcNMjYwMzI3MDIwMDU1WjAzMTEwLwYDVQQD
EyhkMTEyY2FkNWIwMWUxNDA1ZmI2MzZhOWQ3ZWI0NTcwZDhlODI2ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xsOvHDUL24AdJ2r9Eshxrei1MtG
DeMsL6r1QziyU67jX1Mgubg5KxUYOStz067t2oJIhwWLM9uh9QCcp8SJ70VE1zdn
9GN88ZdyS72YLuQhqWReDsxa+MwwwJSuOKdgEe4RB97cmRM7JMhvr1xkR0Oc8JfT
7xfqChOdqmwfN+kRZatcKuLkbcTjGFqq7kCRJKdEpnuQzyYK4ljFUHH5Zw9ap10q
Me+dcCBgkTVFXhbCf4LmSgg2AsGahdtPQDS5MIUu6S2sRvkcQ0NvaRaqibja43nI
9fD/nYjaEgUm59vRDqEoyIqkL643oD0yAGm/EytCtLS+rl34TUV/R46iwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNESytWwHhQF+2NqnX60Vw2Ogmh4MB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+Mjlokh
Ir7v3hPHhR5Kvura7k/ivZvf4+V6U1JW/A5CdWjJ8WtuRsRSEsp8Jcan3z1soqzE
qFKz1mNec1LbxM25fOr2sXs40D90PfqxEjt0MKNg8NP2uPckI8Nk0F7JqR32XpTv
CUMkFoZjSaOgR5g6tAd0ZrQcpZmqiD5GLldOSwF+eT9depRi8QEAp2H+H/ir2Xcj
e4E7svl0TTgullysprlmbQfpVVh37CGOxYJWzXY4qmpwJ4a0gfuavqZo01jo/6uj
bCtbHq3wIGpDTHBtX/+gLNz4Nuc5gc1XDLikpCGWPGOQZn8Adek5tKN/ytMG3eLG
bPbo4hSzxF/zOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:44 2026 by rpki-client