Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier: zqi/u1Xmgpe02XypMi0teyVQO/nEl9k8fqAAG+XF3kY=
Subject key identifier: A3:85:C2:53:16:F9:E4:F8:A1:F2:B3:23:5F:D0:DA:D0:CB:0C:E7:4B
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 019D284D699325CA9C1B36245A1414C8EA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number: 17EE
Signing time: Thu 26 Mar 2026 04:00:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:00:55 +0000
Files and hashes: 1: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: 80ByyrV85w1lrpxMzlg9ImecMSdENOG2ov5LGkPFZgE=)
2: uXS0bdbFdOHb6Fis6v93sRggyKI.roa (hash: 5dDzWf7HGqV8pXI0aYhhoLgb4jJbNqsLqa/M4syFKfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:69:93:25:ca:9c:1b:36:24:5a:14:14:c8:ea:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:00:55 2026 GMT
Subject: CN=a385c25316f9e4f8a1f2b3235fd0dad0cb0ce74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:80:5f:cf:64:5c:54:69:c5:7c:5d:d5:e3:
81:e4:cb:19:73:54:4f:0f:a1:7f:40:2d:1d:dd:45:
7c:25:19:20:17:e1:0f:39:b4:76:69:f1:15:9c:48:
95:8a:e1:f2:4a:a2:e6:cd:50:c5:b5:51:b5:73:18:
e8:27:d9:91:a3:35:a9:90:9e:cd:de:04:87:6a:a0:
11:8b:18:6b:21:b1:09:7e:05:76:ee:f5:8c:34:7e:
4e:1a:99:6a:9d:f8:34:fc:c0:67:49:f5:68:29:a9:
6e:25:57:c7:58:8d:f8:2e:11:a4:ba:46:cc:8a:3a:
73:f7:59:e6:bc:01:23:64:ec:23:b3:7f:ba:67:63:
de:3c:1d:ea:9a:73:98:dc:03:19:c9:fb:cd:2e:21:
75:db:34:d3:f8:7e:8f:8a:91:33:53:d1:5d:a3:b8:
d3:fb:3f:4d:02:a6:fd:13:d1:2f:6b:20:94:f5:b3:
d7:64:b7:41:cb:40:93:ea:12:ba:9c:1e:2a:e6:b8:
06:6c:13:81:a7:b0:7d:82:fe:67:f7:f3:45:81:2f:
b0:0b:fd:1a:17:7b:da:f0:03:eb:93:06:f4:ab:42:
92:5a:ad:3c:8b:6c:27:29:bb:fe:e7:96:f3:8c:22:
21:fa:56:a1:59:7a:6e:9c:b0:d2:45:40:36:52:13:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:C2:53:16:F9:E4:F8:A1:F2:B3:23:5F:D0:DA:D0:CB:0C:E7:4B
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:7c:54:58:c8:47:2f:6d:b8:52:e4:c7:91:68:30:82:43:
d8:b6:0a:aa:0b:8b:27:ff:f0:8d:70:81:2c:6b:18:4b:9e:dd:
c8:61:a9:6a:2a:0f:53:1e:97:78:32:f7:68:8a:ea:48:fd:6e:
1b:7f:96:f3:e8:88:b5:4c:73:1e:d4:75:c8:d6:f6:0a:cd:b1:
74:00:1c:39:eb:37:ca:87:d9:ca:5f:39:4c:54:c2:4c:09:f7:
aa:40:25:47:d1:de:e5:e6:d4:e5:10:0f:5c:59:2a:de:6f:9e:
37:e9:68:2b:1b:83:7d:ec:4f:3b:f9:f7:87:7f:50:35:46:eb:
41:6b:3b:50:7b:5e:79:54:cd:8b:19:97:41:85:a4:c5:52:6a:
43:b1:9f:bc:b9:c3:de:f3:27:81:c4:39:7a:46:4c:ac:ce:23:
96:a8:d7:d7:31:5f:b2:4b:7b:b4:91:a9:a4:79:d3:d0:5e:83:
4c:92:80:2b:0d:8f:c7:0d:42:b9:62:4a:bf:69:77:8d:6a:00:
db:2f:62:00:06:52:d1:7a:2a:60:60:b2:28:a4:b3:9f:58:a0:
99:5f:5f:67:68:b4:ba:d3:38:51:49:3b:6a:57:fc:78:e5:c8:
e8:15:7a:db:23:81:2e:56:a9:52:5c:f5:64:67:94:dc:45:fc:
df:f5:84:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:41 2026 by rpki-client