Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: RQGsMRH2v5UnFEB7a6zTbuY+3dPS4mzEB+JhBS/h/lQ=
Subject key identifier: BF:9E:43:27:9B:1E:21:C0:7F:04:EE:E8:55:E2:54:12:B5:2C:37:A8
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 019D2B4E139BEA6389DD96CAAC81BBD77831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 18:00:30 +0000
Manifest this update: Thu 26 Mar 2026 18:00:30 +0000
Manifest next update: Fri 27 Mar 2026 18:00:30 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: ZRf97EB7TDZFNNfMdchfs8XnyDHiNRlzOM42UG2OwI8=)
2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:13:9b:ea:63:89:dd:96:ca:ac:81:bb:d7:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Mar 26 18:00:30 2026 GMT
Not After : Mar 27 18:00:30 2026 GMT
Subject: CN=bf9e43279b1e21c07f04eee855e25412b52c37a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:4d:38:0e:55:e0:ec:27:b4:5e:e6:db:ac:
88:25:c3:52:13:8a:cf:e4:72:43:d9:19:cc:67:20:
87:9f:4b:3a:38:7c:e7:47:6e:81:3c:fb:a4:c2:2d:
a8:21:d3:39:c1:e7:13:a2:0c:63:38:71:ab:bf:ec:
87:8c:ee:9e:39:37:77:0a:49:6f:1a:0e:f0:29:6d:
a9:b8:c2:b1:a1:4e:42:67:63:3a:05:f5:75:03:03:
ae:27:22:4a:b2:69:ac:df:d7:6e:1a:3e:06:84:d4:
ad:77:6b:45:54:f0:0c:1c:84:f2:af:b5:2e:5a:92:
9d:b1:26:89:89:74:72:c1:42:ad:95:c6:1d:34:8b:
7c:d2:c2:ff:94:ef:94:78:53:99:19:1c:2b:b8:ad:
2a:d9:fb:a8:5b:68:70:3d:0a:b1:29:2e:df:93:dc:
2a:73:b0:5f:98:85:0a:22:6f:71:e1:87:e0:3c:80:
e9:86:b8:02:9f:a5:3f:93:13:93:0e:2f:41:b1:56:
32:ba:ce:84:db:9f:55:9a:fb:7a:b6:80:8b:3d:5b:
a4:31:57:37:38:1c:4f:ac:91:98:c0:1e:08:80:83:
b7:e6:f4:e1:3c:93:da:60:6a:cd:a8:67:28:66:22:
ec:00:52:2a:19:d1:0f:55:e4:80:33:8f:0f:75:b3:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:43:27:9B:1E:21:C0:7F:04:EE:E8:55:E2:54:12:B5:2C:37:A8
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9a:83:db:56:ae:9f:8c:af:73:cc:90:4e:83:d3:91:6d:de:
f3:7e:e9:cd:61:bb:87:af:5d:1e:2a:ec:ba:45:27:9f:87:f9:
be:47:30:e5:7f:2a:36:77:80:0f:d2:23:5f:31:95:1f:4a:ea:
c4:2d:1d:53:48:d7:39:b6:c8:ee:96:52:67:e3:39:81:52:3b:
28:f9:cd:af:72:b2:9a:f0:c4:81:b7:49:87:ba:c5:e2:49:40:
99:a2:ec:89:06:fd:c4:9e:62:81:cc:dc:cb:47:e0:e8:5b:8c:
d7:74:47:73:05:78:b2:ec:03:e3:fb:b2:03:56:71:18:4f:10:
ce:a7:5e:b9:0a:29:6e:79:e0:55:59:0a:ba:c4:ff:4d:a9:c2:
63:91:00:6c:0e:91:ad:65:87:08:be:5f:1f:0e:b6:3d:9d:de:
4b:eb:c9:66:a0:af:bf:12:dd:b3:21:bc:ab:f1:b5:79:7a:55:
71:a4:2b:cf:43:fe:ad:45:69:6f:9f:fd:82:9e:68:3c:f6:fc:
72:45:ad:e6:31:80:4b:b2:c2:1d:be:63:ef:f4:a9:85:21:3b:
f2:dd:3d:9d:00:d3:30:b1:79:82:ff:83:42:98:df:8b:1b:26:
cc:b1:d1:bc:a4:3d:b5:e8:62:25:51:a9:d3:8d:55:32:a7:29:
6c:c4:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:15:03 2026 by rpki-client