Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier: gjdZoOU6xFpTb39R/ETQKifa1ABZLjR9OpoWp5Njmjg=
Subject key identifier: 3B:B1:FF:FD:26:F9:A9:73:A6:DD:3D:2D:55:20:CB:61:FD:45:73:DD
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial: 019D329A7553F2CAA919F09074778A8D96C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number: 0435
Signing time: Sat 28 Mar 2026 04:01:16 +0000
Manifest this update: Sat 28 Mar 2026 04:01:16 +0000
Manifest next update: Sun 29 Mar 2026 04:01:16 +0000
Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: W0iN1lUwbHal+QkTzZpoMpw0fkF/K0xfsLHx5htJ2Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:75:53:f2:ca:a9:19:f0:90:74:77:8a:8d:96:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Validity
Not Before: Mar 28 04:01:16 2026 GMT
Not After : Mar 29 04:01:16 2026 GMT
Subject: CN=3bb1fffd26f9a973a6dd3d2d5520cb61fd4573dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:4b:72:7c:b3:5b:b9:6c:01:53:de:a5:e6:
ce:31:e8:31:dc:5d:56:32:99:a0:c6:46:65:72:03:
c6:84:6a:4a:25:fe:10:2c:f2:8a:a6:06:33:a6:1c:
3e:b9:06:2b:0b:d5:f3:28:45:81:3a:41:24:b3:ee:
de:2f:08:4d:bd:64:67:84:2e:33:f8:e1:91:ef:e7:
cd:e6:2d:7b:5e:5e:f6:4f:a9:bf:5f:d8:8d:55:74:
a2:42:21:49:ce:f5:16:1d:5c:77:e8:02:e6:23:04:
57:4e:de:eb:e6:57:44:d3:40:f5:9c:84:c2:e5:b4:
ba:22:67:2d:84:f5:2c:7f:08:5b:16:07:7d:41:65:
e0:2c:73:51:79:90:bf:6b:9b:40:4c:d3:29:39:59:
6f:c7:8b:e2:7e:9e:35:55:38:c8:ff:ed:36:29:a3:
03:10:56:23:83:b5:59:a0:75:49:24:98:8b:76:f4:
5f:4d:7a:97:e1:18:a0:13:21:73:f0:e9:b2:0e:bb:
a9:49:a2:68:6d:55:e5:b7:ca:4e:ee:e8:f5:1d:f9:
bd:9a:f8:b0:3b:12:01:1a:da:4f:0c:58:c6:d3:35:
24:94:a5:4f:00:1d:bd:8b:31:61:59:b2:5a:ba:43:
3f:7e:3d:51:00:27:82:f5:1f:60:f7:72:5b:60:6b:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:FF:FD:26:F9:A9:73:A6:DD:3D:2D:55:20:CB:61:FD:45:73:DD
X509v3 Authority Key Identifier:
keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:27:e8:36:0e:a8:6b:bd:9e:a1:4a:e8:2d:91:86:25:51:
14:7e:a1:e9:a0:01:f0:67:a8:b5:3c:93:b6:02:7e:d3:ba:71:
2d:ff:fd:ab:3a:a5:f9:ee:8d:d4:1f:01:52:88:ea:ed:6e:ad:
de:1d:a0:b7:eb:5e:57:ae:f8:ed:1f:12:d5:5c:aa:de:b3:12:
1e:ed:33:18:7b:f5:e7:fb:6d:75:f5:9c:cd:cc:9d:65:b7:90:
2f:10:6f:b3:80:90:42:13:55:a2:f0:9c:92:99:04:95:59:69:
ab:76:90:23:8d:00:f2:4e:a6:55:c5:1e:b6:b8:d4:83:94:3f:
16:9a:86:15:83:15:12:0f:7c:7a:4d:13:27:d5:6e:fd:9e:13:
07:e4:50:c4:26:d9:a7:f8:bd:27:cf:c0:dc:c7:6e:cd:b1:ea:
e7:95:c9:7f:7a:bd:40:0d:59:e4:f3:de:c1:ce:27:46:03:cb:
9e:96:81:48:5e:44:4b:e3:92:fe:de:bb:3f:83:6e:e2:ab:08:
5f:45:c3:83:76:53:ef:db:c7:91:2b:c2:df:ca:6c:45:9d:fc:
39:43:5f:02:68:ea:66:b3:6e:d6:51:e0:5d:99:a3:6f:ac:ed:
fc:a9:f2:2e:dc:51:80:56:fb:29:2c:b7:d2:28:9e:95:78:cb:
f5:c6:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:06 2026 by rpki-client