Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: bt302Pz2KgPYr+QgBnP8vhyqnAIPwP+GSlSglau/nLk=
Subject key identifier: E4:1E:45:BB:1E:87:C5:DA:31:B1:AF:81:C0:C5:CD:53:5D:B0:C9:72
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019D2B4EEE887E7325ACA6CF6B74B61F9BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 18:01:26 +0000
Manifest this update: Thu 26 Mar 2026 18:01:26 +0000
Manifest next update: Fri 27 Mar 2026 18:01:26 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: 9YelgxviLaEiB5a/LNZBhYYWp2XyMTWSUKOOktxhpcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:ee:88:7e:73:25:ac:a6:cf:6b:74:b6:1f:9b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Mar 26 18:01:26 2026 GMT
Not After : Mar 27 18:01:26 2026 GMT
Subject: CN=e41e45bb1e87c5da31b1af81c0c5cd535db0c972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:32:0d:94:e4:57:59:c6:75:b3:7c:f9:59:
93:a4:c1:bf:2c:be:8f:88:bc:a9:53:7c:fb:71:de:
8a:9d:35:e5:53:4c:9d:19:f9:de:7b:bf:17:b4:88:
1a:c9:42:05:31:6a:e5:dd:ea:6b:12:43:0c:94:3e:
d8:62:62:7c:7c:5c:ed:94:1d:f4:10:ef:5a:21:58:
9f:a1:69:62:a2:1b:07:30:38:a6:b9:66:c8:4c:5a:
fb:d5:5c:65:00:e5:c7:7b:24:81:2c:9d:75:91:bb:
6b:19:f6:3b:ae:6b:57:0b:1e:3f:d6:5f:07:40:f7:
8b:45:47:3b:36:4f:61:bc:9d:26:e1:38:8a:8d:bd:
44:78:5a:98:da:63:7a:f9:f2:3e:12:68:48:f4:26:
8a:15:ec:e0:e1:fa:3c:3c:97:ad:0b:52:71:46:bf:
dc:be:b0:56:50:a6:43:bb:b0:58:68:d0:09:07:28:
70:91:a4:b8:16:8c:e8:1e:10:bb:e0:ab:ab:84:1a:
b8:ba:8f:b4:39:8d:f3:16:db:d8:73:a4:bc:3a:fa:
6c:39:4d:40:1f:e3:93:27:de:07:63:75:35:f8:1c:
b6:65:a8:97:3b:d5:ae:3e:5e:c8:db:53:6e:6c:d0:
ce:b8:c3:c2:8e:df:96:62:e7:80:47:6e:fc:83:26:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:45:BB:1E:87:C5:DA:31:B1:AF:81:C0:C5:CD:53:5D:B0:C9:72
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6f:46:d6:30:b9:74:fa:55:2d:d5:82:66:a2:82:ea:7d:ec:
15:7f:64:8b:f0:06:01:ba:78:ac:d1:53:49:3c:02:81:a6:ce:
ce:76:4b:42:7c:9b:23:8e:d0:f0:b7:62:15:e6:ef:cf:07:00:
81:f1:b0:a2:97:af:f0:bd:ab:88:d1:c8:5a:20:8c:86:ab:2d:
6e:e1:92:f5:37:ca:f0:df:4d:f6:e3:c6:2e:8e:6e:c2:f1:ee:
e9:0d:17:a3:a3:7e:11:38:28:e1:a8:62:f1:0b:35:98:61:b6:
6a:63:d3:b0:7c:bf:35:85:06:a1:a1:95:f7:18:fe:c8:44:3c:
f1:9a:9d:90:4a:ca:d3:62:dc:91:c9:9a:1d:38:96:70:76:60:
fd:d0:bc:8f:66:7f:c2:66:e2:06:9a:b6:32:c8:05:b8:78:52:
ca:47:f8:41:3a:17:d6:07:4a:d2:d8:9b:f3:83:58:1e:95:71:
48:1a:c1:4d:ce:ea:98:59:90:68:f9:58:a5:bb:74:bb:a4:b9:
57:75:14:ea:06:fd:f0:71:a4:f6:ae:ea:ae:e1:fb:09:86:ee:
a6:5a:fa:35:68:45:fd:35:a6:c9:7e:8f:3c:b6:4f:94:c1:ed:
ba:47:51:ea:e7:ce:00:b8:89:73:c0:52:13:1b:d1:65:cd:e1:
f3:f4:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:23 2026 by rpki-client