Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: YfP7et5AijKUeZHyMS/yRdesRbyuZLdA28K+8t8qZMQ=
Subject key identifier: 96:28:8B:3C:61:21:E0:A8:D6:87:5E:22:A5:5E:56:13:5B:E8:00:E8
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019F8EA26B283668764EAB8F6E5145DD929A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 0533
Signing time: Thu 23 Jul 2026 11:00:36 +0000
Manifest this update: Thu 23 Jul 2026 11:00:36 +0000
Manifest next update: Fri 24 Jul 2026 11:00:36 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: JrTk3tiScmVlxIawBGVY7FJKG9AJoiuePqDi4ZWEl2o=)
2: _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (hash: /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=)
3: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:6b:28:36:68:76:4e:ab:8f:6e:51:45:dd:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Jul 23 11:00:36 2026 GMT
Not After : Jul 24 11:00:36 2026 GMT
Subject: CN=96288b3c6121e0a8d6875e22a55e56135be800e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:56:54:60:d2:95:06:9b:47:bd:db:66:71:
6a:f6:7c:1f:b0:74:d4:13:d9:d2:c7:d9:59:21:8c:
7b:7f:52:27:16:00:ba:a4:77:e2:ee:8f:c7:31:63:
f9:e4:93:57:43:37:24:e7:56:89:25:c5:68:49:db:
26:ec:d8:96:25:84:c7:e9:d7:23:7b:7d:0d:0e:85:
7c:09:38:06:20:10:07:16:37:93:d4:34:84:80:3e:
37:28:e6:f1:87:08:e0:c3:18:22:8e:e8:62:95:eb:
95:91:52:08:87:8b:0c:a3:a5:43:f2:91:b1:63:f7:
b8:ff:d8:57:1d:bd:ae:47:15:37:c1:7b:9e:9b:b1:
30:1d:ea:3e:82:a3:89:81:16:ca:d1:62:35:c4:0f:
1e:4f:b5:91:96:a9:d1:ed:c8:7e:61:5d:38:0c:59:
4f:3f:6a:b6:d1:33:2b:56:6a:8d:54:b3:b9:1e:a8:
da:bc:b2:f2:56:a3:71:a5:2b:7f:24:ab:85:42:ff:
97:b4:29:5b:cc:c9:ed:5a:a8:e9:dd:4d:68:0d:5d:
cd:90:64:ae:83:75:78:2b:43:ca:76:4e:67:5b:a7:
d2:93:c6:11:af:f4:09:d3:99:03:35:ac:25:ae:73:
93:4d:fc:1a:4f:5f:da:7f:8c:af:b6:75:a0:cd:fa:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:8B:3C:61:21:E0:A8:D6:87:5E:22:A5:5E:56:13:5B:E8:00:E8
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4d:ad:50:42:ed:88:3a:1b:ee:e2:f4:c4:a2:78:6d:f7:3c:
f9:85:fb:75:8e:52:ac:12:7c:bd:82:4d:d1:15:6a:2e:f9:15:
1c:07:cc:f9:a2:69:69:86:d1:7a:0f:cd:6b:64:d8:e5:f2:07:
61:15:19:fb:8b:ff:e2:e9:8f:e5:09:00:09:00:15:7b:c8:48:
d1:b0:2d:ab:58:e1:b4:12:46:be:9c:62:04:45:18:65:5c:cf:
16:8b:63:63:a6:74:21:e2:0c:a5:4f:c2:b3:62:02:ab:1b:8f:
5e:9a:ee:b8:9d:f1:ff:4c:36:1a:b5:9f:1a:9e:c4:ad:7e:44:
af:67:8c:02:a8:1f:b9:c9:9c:df:6a:b2:11:64:42:77:53:17:
f9:31:44:b4:93:50:ea:94:d1:93:2e:52:0d:9b:71:de:a9:f9:
cc:9d:64:8d:d1:05:33:3c:0f:42:5e:6d:14:84:da:21:5c:78:
75:e9:6b:3a:49:bb:b1:db:ab:fe:0f:ef:b8:ce:52:7c:3b:8c:
40:38:e9:6f:7d:c3:47:80:5b:d6:7a:fd:e0:b5:33:60:ad:77:
af:72:b3:b2:43:49:7a:cc:c6:6d:f7:41:8f:10:41:19:24:3b:
b5:63:7a:59:82:61:b2:b9:3e:ab:2a:5c:52:98:dd:e7:83:e2:
be:36:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:40 2026 by rpki-client