Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
File: W3EQDctuS1m2AWEkSd9pBIPWdQY.mft (raw, json)
Hash identifier: N36LZgC4Hle4BXrDYIppV19olF/vXJPmYtWG0wafIas=
Subject key identifier: D1:1C:87:9E:1E:33:7C:96:87:44:CC:66:A4:47:12:8A:1C:A6:69:69
Authority key identifier: 5B:71:10:0D:CB:6E:4B:59:B6:01:61:24:49:DF:69:04:83:D6:75:06
Certificate issuer: /CN=5b71100dcb6e4b59b601612449df690483d67506
Certificate serial: 019D33AC9FD82566125294B263AAAFF5BFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3EQDctuS1m2AWEkSd9pBIPWdQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
Manifest number: 60
Signing time: Sat 28 Mar 2026 09:00:44 +0000
Manifest this update: Sat 28 Mar 2026 09:00:44 +0000
Manifest next update: Sun 29 Mar 2026 09:00:44 +0000
Files and hashes: 1: W3EQDctuS1m2AWEkSd9pBIPWdQY.crl (hash: hJDmVX4hM/E7yGjmYy/HfwSKrWs0A+hgy2H1TqlKcs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3EQDctuS1m2AWEkSd9pBIPWdQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:9f:d8:25:66:12:52:94:b2:63:aa:af:f5:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71100dcb6e4b59b601612449df690483d67506
Validity
Not Before: Mar 28 09:00:44 2026 GMT
Not After : Mar 29 09:00:44 2026 GMT
Subject: CN=d11c879e1e337c968744cc66a447128a1ca66969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:95:68:23:ef:a3:5b:3c:3b:7e:13:b9:15:
ae:4d:4b:28:2e:bc:b7:82:31:66:92:57:a9:e1:b7:
b2:7d:ce:c1:d5:95:06:dc:3b:15:a4:00:75:b1:f1:
a7:09:40:cb:89:43:a5:fd:88:c9:e1:f5:c7:38:10:
90:8b:20:0d:1f:87:ad:ae:84:c5:d5:28:80:e8:b2:
d6:b7:85:5f:51:3a:0e:4a:1c:16:97:7b:8f:25:84:
e1:88:58:33:75:2a:a5:ca:e9:0c:60:35:68:b8:6e:
3f:6a:a6:b2:36:24:65:3e:ff:02:71:44:6d:70:81:
e5:5f:b8:84:6e:b7:f7:e3:7a:44:a6:fd:8b:55:87:
71:66:5f:6b:6f:59:56:9c:51:48:2b:4a:62:d0:47:
29:af:7b:a7:48:ba:1c:0b:1c:e7:61:5d:e1:66:b5:
c2:d2:68:1a:4a:c9:8e:aa:ba:8f:f9:c0:c8:c0:5a:
48:72:86:10:3a:94:9b:6c:f9:ec:0e:e3:e0:48:73:
85:78:e7:24:21:e5:d8:26:03:7f:a1:18:0f:af:2a:
4f:2f:21:b3:ac:a1:42:76:e5:99:36:a7:2d:ea:e8:
2a:8a:d1:8e:f9:c5:3e:ce:7d:73:4f:96:18:33:6d:
ba:a4:96:88:70:95:24:ae:41:5c:d0:69:06:ca:d5:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:87:9E:1E:33:7C:96:87:44:CC:66:A4:47:12:8A:1C:A6:69:69
X509v3 Authority Key Identifier:
keyid:5B:71:10:0D:CB:6E:4B:59:B6:01:61:24:49:DF:69:04:83:D6:75:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3EQDctuS1m2AWEkSd9pBIPWdQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cd:b5:70:5e:6a:ed:4a:b2:b8:80:85:89:b8:b5:90:49:dc:
ac:61:91:ef:f5:8b:32:bd:55:85:fb:40:dd:08:8a:01:b2:09:
b5:08:fc:7c:d0:f2:8c:7a:b2:1c:18:67:91:75:39:6c:53:3b:
73:20:56:7b:ca:78:54:64:c3:af:a6:cf:a0:30:f9:77:53:8f:
b9:ce:33:30:e5:b5:a2:57:fe:80:94:ae:17:1d:56:aa:de:a7:
55:5f:1e:9c:f2:19:50:fb:37:9f:b2:50:03:c1:d4:cf:36:b0:
97:19:d9:c3:fa:b2:53:b2:58:9a:94:5b:7c:0e:c9:bd:9b:dc:
68:87:f0:9f:00:42:1f:f5:0a:9c:45:1a:48:7c:99:c5:c4:7c:
43:7f:10:80:51:90:f0:4c:d8:06:a9:9e:ff:55:a5:b5:b4:63:
35:be:7a:26:12:9e:9a:f1:10:e5:bc:e9:45:42:08:e6:23:ef:
59:7c:61:62:1e:84:2b:e6:0e:07:f1:26:12:ea:47:bd:99:19:
5c:f6:d9:3f:a9:56:ce:b0:6b:0a:4a:75:c9:be:47:42:8c:da:
1d:a9:a2:a8:67:a9:6b:b9:f3:55:9e:ac:69:28:c9:6f:69:80:
db:b2:7a:75:8d:66:be:73:02:78:b0:81:aa:c7:0d:c3:cd:9d:
86:c0:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:56 2026 by rpki-client