Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: itAKj93cdiuv+3vOQBjDr0ceLXOh2AQIc19rYr/X2gY=
Subject key identifier: 81:A0:79:81:F7:65:C2:D5:94:D4:82:B4:85:66:2C:DA:65:44:50:A2
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 019D292997E4D858656ED24C9A6ECAD5FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0AC9
Signing time: Thu 26 Mar 2026 08:01:24 +0000
Manifest this update: Thu 26 Mar 2026 08:01:24 +0000
Manifest next update: Fri 27 Mar 2026 08:01:24 +0000
Files and hashes: 1: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: Ork5CtwkDMMBHEn38MX45tpW1+40vi9oD/nuI5uwrP8=)
2: YxXsZlINFbnQqhmq0BwCtCd3rCY.roa (hash: oiaRCOkv2kOFQFoBqvT4f+V4BdFJ/TUUb8JSZ+N2nWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:97:e4:d8:58:65:6e:d2:4c:9a:6e:ca:d5:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Mar 26 08:01:24 2026 GMT
Not After : Mar 27 08:01:24 2026 GMT
Subject: CN=81a07981f765c2d594d482b485662cda654450a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:e7:43:c2:62:3d:ee:ef:e5:ed:05:0f:d6:
71:af:37:b4:c7:ba:b0:91:ef:de:61:90:f6:b5:aa:
de:96:38:0c:71:39:da:49:fe:cb:e5:74:22:2f:62:
24:07:6d:9b:86:62:03:14:2c:ee:f6:f7:eb:e2:05:
6c:18:99:f3:ba:c9:81:74:9e:4e:ed:10:bc:0d:d2:
9e:fe:86:e5:98:6c:c6:92:23:42:25:ae:2f:77:81:
66:f1:e3:1a:fb:0c:a1:c7:69:17:f3:41:c8:55:cd:
89:48:9f:c1:fb:28:0b:8f:dd:be:c1:63:c5:eb:a0:
44:23:53:ce:75:c9:a6:18:2a:a7:79:10:47:e2:b0:
32:b3:87:dd:e9:4b:7c:8f:59:0f:84:75:bd:b9:11:
f3:a1:00:44:18:c4:5d:4c:30:c0:c0:39:8b:85:50:
1b:b8:88:06:6b:76:e0:db:7f:f0:ab:63:ab:a2:02:
26:87:79:e7:c6:d0:5f:a5:87:89:74:1a:f8:e0:83:
58:84:9e:6d:e4:b0:bb:c8:e8:bb:bc:bc:fe:ae:dc:
76:0c:1e:16:26:3a:4e:b9:93:a1:68:e7:f2:52:f7:
bd:2a:47:da:f4:d8:29:73:a5:3a:1d:b7:61:da:b7:
12:2a:c1:09:fc:fc:f3:4c:ba:cc:6a:e8:98:b1:bb:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:79:81:F7:65:C2:D5:94:D4:82:B4:85:66:2C:DA:65:44:50:A2
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:02:1e:72:32:41:50:46:da:da:b2:96:b2:75:44:f0:1c:
cb:23:83:c8:cf:e3:c6:2d:57:2e:81:97:9e:e0:2d:ff:9d:e6:
fc:27:fe:0d:b6:4f:c6:f6:4f:41:ae:62:c2:c1:2e:30:4d:b9:
ce:40:a9:60:8c:1a:ec:8a:47:b0:19:ca:c0:a3:ec:78:94:5e:
fe:16:52:cd:c1:0c:1c:77:db:e0:22:dc:46:e8:53:1e:5b:68:
2c:5a:42:66:0d:54:3b:a4:38:8f:0a:ed:86:ef:80:6e:bd:d1:
7b:2c:6f:26:29:41:09:4e:cc:35:ff:16:96:8c:16:07:71:24:
78:07:8f:e9:5b:dd:04:de:e2:ae:9d:55:37:df:3c:77:59:e8:
36:4e:c9:e5:d9:68:c2:ba:d8:22:27:e0:06:ab:a4:05:65:91:
b1:32:fe:81:2f:7e:25:36:63:c5:a6:4c:60:51:ee:5b:03:0c:
67:d2:f9:c3:9b:b0:1c:a9:b7:a6:2e:4b:f4:5c:d6:97:2e:2e:
58:e9:94:55:0a:d7:0f:cd:d4:de:0e:ea:1e:74:7a:5a:e7:87:
eb:f3:ad:34:7f:6e:e6:d2:62:73:b4:6d:73:da:14:cc:9c:68:
21:c6:e4:2c:a4:be:a5:ff:4e:a6:7b:33:1a:b6:19:1e:34:e5:
48:7a:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:11 2026 by rpki-client