Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: BynO9I6BJwcmSGWQkcPygO142B5INlieyiisgAr4QW8=
Subject key identifier: E8:16:DD:D2:21:6D:D0:CD:A2:7B:B5:A4:5D:5C:35:B6:A5:12:76:56
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 019D2704709A44C821163AA6F56EDCFF7A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 097E
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: l0x24u78bBWbJherG1kXsRg7wg2Eo8VILt0/6d5yiNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:70:9a:44:c8:21:16:3a:a6:f5:6e:dc:ff:7a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=e816ddd2216dd0cda27bb5a45d5c35b6a5127656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:fd:4f:e8:50:1e:45:9e:ff:fc:60:fb:87:
c2:1d:f2:0f:66:68:8f:28:6a:3f:57:55:e7:33:8a:
35:a6:b7:2a:15:63:ed:8a:87:e6:53:fa:cd:e9:d7:
10:b0:ad:63:da:ce:d4:00:d2:cc:78:d0:b6:ed:c8:
be:ed:a6:09:38:1c:37:32:c7:85:b3:2b:ca:63:5e:
29:17:7a:0d:bc:12:25:d1:b5:69:97:28:e4:22:a8:
76:ec:f8:7a:87:77:10:23:0c:13:b9:9d:6f:ac:60:
c5:42:65:d5:d1:e8:9d:45:03:d5:1f:2d:b7:8d:06:
a6:12:b8:17:b3:8a:0e:2f:25:48:a7:0f:76:5d:0b:
b6:46:6d:72:02:cc:bb:d5:44:b5:a2:ba:e5:30:46:
ed:d0:ff:92:e9:b5:e2:74:7d:4a:31:f3:f4:4e:6d:
4c:27:84:db:58:87:30:53:f5:7b:6e:12:3e:0a:46:
b1:a7:88:04:25:a9:8c:cf:9f:e1:c8:f0:d4:07:19:
af:50:8b:6a:5d:9a:af:10:d9:5a:92:d7:8f:5e:85:
d3:02:3a:c5:c7:3a:d9:f6:47:7a:04:61:50:35:b6:
3b:f2:af:c5:38:ef:86:39:0f:6f:5b:4c:67:a9:ca:
52:6d:22:78:e2:77:fd:bd:44:93:e4:49:c7:34:69:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:DD:D2:21:6D:D0:CD:A2:7B:B5:A4:5D:5C:35:B6:A5:12:76:56
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e4:40:db:52:05:e8:c9:bf:d3:14:f9:fd:21:c8:fc:5d:2b:
f3:47:f9:37:8d:dc:6f:88:b7:ff:23:9e:20:20:ec:14:a1:b3:
c2:70:8f:3c:0a:91:e9:74:d6:43:3c:f6:41:4b:c7:67:42:14:
7b:07:fb:61:b8:35:6f:06:3b:1e:46:82:cd:3b:45:8c:38:77:
22:7f:e5:45:dc:59:cd:93:2a:86:ed:9b:61:29:60:fe:7e:c9:
bc:99:1d:39:24:30:4f:75:c0:c4:e2:18:c1:de:3f:17:e0:43:
6d:bc:d2:df:bb:a9:3d:da:1b:5f:7f:7d:af:fc:95:8f:0e:c2:
6c:ac:e7:8a:b9:27:b8:a4:a6:dc:5d:1d:3d:66:fc:53:05:47:
b5:18:7b:7c:56:68:a9:59:63:f4:d8:5f:4e:fa:e9:c0:3c:c6:
5a:d9:2e:35:b9:d4:db:7b:32:4f:1f:73:30:11:65:7e:72:74:
ce:e8:e5:d7:c3:a4:68:6f:7c:46:37:b2:94:42:8f:4b:cb:7c:
74:79:d0:fc:8a:5e:57:63:f3:88:94:bd:94:01:f2:22:cf:d6:
d1:7f:cf:19:b5:e8:b7:df:f4:31:e0:aa:d6:91:bd:46:07:a7:
d0:cb:ff:04:36:88:ff:0a:7f:80:49:6e:82:18:e8:93:17:01:
eb:2c:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:09 2026 by rpki-client