Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: RhGY32fXsl7vCh65+AI/OAHIk4ICGnFyH70u2nh4ScI=
Subject key identifier: 8B:7B:A9:EA:50:7D:C8:6D:6D:F1:3E:25:65:6B:53:D2:5C:30:A3:D2
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019D281693F6FB3D8FE5B7AF10CE4DE0436A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 03F4
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: aoubk1YFvVEKgdR0kDmhNcHEmZBvUisKMmBOrGhHzH8=)
2: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:93:f6:fb:3d:8f:e5:b7:af:10:ce:4d:e0:43:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=8b7ba9ea507dc86d6df13e25656b53d25c30a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:4a:87:3d:91:fb:ec:40:d3:36:fc:60:56:
62:a5:88:5d:05:27:d0:68:40:07:6d:7c:8a:db:2d:
ea:e1:25:8d:db:c2:77:fe:08:14:66:4a:61:9f:16:
54:d9:8b:69:82:97:05:00:76:aa:0e:d8:3a:5f:d0:
7d:66:2d:04:79:d0:99:ac:70:fc:ac:96:3c:b5:91:
95:60:7f:44:03:9c:c0:ae:c3:2e:c7:83:87:df:49:
18:0b:e1:80:98:3f:11:59:9e:d0:9e:fa:d6:bd:6a:
fa:f3:2a:ba:bc:99:0d:ca:c4:21:63:bf:b4:d3:42:
48:7c:23:19:73:3d:cc:8c:a0:e5:43:3e:42:a8:10:
d4:6d:62:78:58:e8:ae:26:3c:a4:ae:30:87:72:38:
53:2e:39:d6:b2:cc:96:ba:89:9f:62:33:8d:73:89:
88:3c:91:d6:27:85:c2:f1:e9:cd:9f:2b:af:da:41:
64:3d:a1:49:80:87:92:10:d0:d3:81:bb:4d:87:ea:
81:f2:32:08:b0:8e:7d:a2:b2:47:82:40:af:d5:ec:
a4:f3:f1:25:ae:24:b8:6c:27:06:54:0c:e7:8e:35:
cf:dc:94:2a:88:5d:93:59:a4:b7:9b:aa:9f:8f:e6:
7d:17:76:7e:c0:3c:c0:82:2b:b8:c1:9a:8c:b0:b4:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7B:A9:EA:50:7D:C8:6D:6D:F1:3E:25:65:6B:53:D2:5C:30:A3:D2
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:29:9b:e0:37:89:ef:0d:c8:e0:d7:c2:53:d5:50:9d:3a:
c8:1c:2e:b6:33:3c:b0:d5:7c:2e:93:2f:3b:9c:63:3b:a9:82:
83:ba:93:d7:bc:7c:98:1c:4a:b8:7a:97:7b:6d:f7:20:52:cc:
3b:26:7f:8d:12:66:18:78:e4:4e:fd:ef:d5:65:df:bb:9a:b5:
b1:0f:80:01:61:0c:6b:3e:ed:b4:ee:88:c6:3e:a3:ee:67:a9:
66:ff:10:cc:6b:bc:e0:90:03:c3:7d:33:be:c5:05:c5:75:d9:
af:dc:e1:29:7f:0a:4a:55:45:b2:d2:37:a7:9f:9b:ea:0e:d7:
18:6b:0e:87:9c:4d:d8:35:6e:64:86:3d:1f:3a:06:ff:e7:0e:
a3:7f:9d:a9:18:36:c5:be:95:10:73:c5:32:f0:96:8a:da:b8:
1b:77:85:8c:17:86:22:0e:8e:71:09:82:2a:13:95:11:5e:83:
98:ef:0f:01:b4:6b:61:82:53:04:05:4e:ac:74:8d:ff:a4:95:
ac:8e:dd:43:a6:2f:3b:2e:86:0f:24:d0:42:6d:12:c4:14:0d:
a8:66:f7:b4:eb:d3:ee:b6:0a:76:01:1c:86:4a:fe:9a:1b:d6:
81:c0:98:9f:98:72:a8:3b:06:41:28:3b:03:10:c9:4c:6c:a8:
69:bf:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:02 2026 by rpki-client