Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: 5tq0OVjbwZG65/3500rmezFYOuUZhdWP7xKvUyKlV2Y=
Subject key identifier: DB:0D:F7:66:03:50:E0:19:BB:4C:AC:34:B4:E5:B5:6A:44:DF:D6:0D
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019E1C104E0E1B7A50E5F3C4331BC040CAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 0473
Signing time: Tue 12 May 2026 12:01:30 +0000
Manifest this update: Tue 12 May 2026 12:01:30 +0000
Manifest next update: Wed 13 May 2026 12:01:30 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: dMZL6XV9kRq4dZsmnDKFLQPCnRzzsb6CxN14jPLkDew=)
2: _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (hash: /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=)
3: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:4e:0e:1b:7a:50:e5:f3:c4:33:1b:c0:40:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: May 12 12:01:30 2026 GMT
Not After : May 13 12:01:30 2026 GMT
Subject: CN=db0df7660350e019bb4cac34b4e5b56a44dfd60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:ec:f7:c5:d9:e4:f6:3e:9a:34:25:01:64:
97:ac:71:89:2b:fb:d9:c4:6c:e6:b0:6e:90:00:cd:
a6:ad:6b:15:7a:46:e8:13:23:32:c3:20:88:9f:f9:
16:56:7e:a3:fc:93:3c:d1:c0:52:e2:fd:c5:7f:f8:
31:6c:92:be:d8:6a:c6:21:15:1c:65:9d:b4:37:70:
65:b1:d9:fc:c6:54:fc:a9:59:b6:eb:2c:fa:cb:b6:
ce:c5:03:c2:d2:c3:08:7e:6b:29:cf:f4:3a:25:bb:
ad:e4:e6:62:16:0a:5f:d9:ba:68:6b:5e:2a:ab:29:
08:da:ee:e7:02:ab:c3:8a:a4:7f:89:e2:89:af:0c:
19:d1:90:1e:e5:2c:74:f2:a3:e7:a1:e9:22:78:50:
ed:bf:d5:cc:6b:05:5e:6e:11:15:9c:49:3b:52:fd:
60:ac:10:21:ab:4e:49:52:b4:1c:7a:da:5a:94:a4:
e9:b3:7e:47:c5:59:ca:49:6a:66:c5:a4:45:39:37:
a9:d8:ad:b6:5c:4d:95:2f:59:7a:4a:cb:cc:03:05:
4a:44:b5:17:f0:34:82:a4:ff:aa:03:59:d2:35:a6:
7b:4b:a3:80:8a:d4:65:9e:9d:15:1e:10:56:8d:cf:
8f:b2:47:fc:00:0a:a8:f6:38:ad:9c:34:bb:1b:03:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:F7:66:03:50:E0:19:BB:4C:AC:34:B4:E5:B5:6A:44:DF:D6:0D
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a3:34:40:8d:e5:aa:84:87:0f:c4:0e:cf:86:ad:1f:38:b0:
39:85:db:5a:93:7b:43:17:96:88:9e:24:ad:84:d6:5b:de:aa:
ab:59:e8:3f:90:b8:68:9d:f0:19:0c:1c:35:df:c7:da:5a:48:
83:35:d4:24:91:8c:08:4a:b8:85:9c:20:16:0f:34:45:00:94:
76:92:06:73:28:98:11:32:ac:ca:03:5e:a3:8c:dc:7f:63:2c:
e5:75:c7:76:34:a4:46:46:d2:61:0c:09:40:e9:69:09:db:42:
b6:cc:bd:1d:8e:02:0e:ad:c2:ad:d1:7f:15:5b:5d:56:3d:1d:
f1:0d:e9:16:c9:6f:f8:09:c8:03:ac:88:a9:67:23:2e:3e:81:
cb:43:9d:a2:1a:96:e8:98:4b:7a:34:e1:fd:93:ed:24:a0:15:
01:8b:e9:ca:7e:a7:36:33:b1:cd:0b:08:b5:a8:5e:9f:79:8a:
61:ff:bf:20:5e:d0:3e:03:78:20:56:38:89:2a:8f:41:23:f6:
8d:8f:95:46:2f:9b:db:f2:c7:25:ec:6d:e5:ca:d8:f1:6b:34:
11:24:e3:02:48:cd:a4:ed:5f:4e:2e:26:d4:56:8c:7f:30:24:
3b:f1:50:e5:64:96:de:04:2a:5b:89:8e:c3:e9:1d:9c:bd:10:
80:f7:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:43 2026 by rpki-client