Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: FTQ+LVoVUzVq7OUgUagoPBpsZAUmF03VFwQ7+zbG1JY=
Subject key identifier: DB:DA:A5:3E:9E:2D:2D:42:7A:51:52:AF:7B:1A:E1:56:09:B8:3C:B0
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019D273B39AA52D2D0B80196D1ED3CEA625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 17F5
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
2: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: BXZnDVzsk1L8nQnG2bv0Vrg82yEiYHwX0GyGm2ru7bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:39:aa:52:d2:d0:b8:01:96:d1:ed:3c:ea:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=dbdaa53e9e2d2d427a5152af7b1ae15609b83cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:7f:5e:9c:0f:5c:01:77:5c:ac:f2:57:3c:
b9:7a:1e:7c:1d:ca:7f:6c:22:d6:2b:f3:72:8d:85:
19:e8:23:e7:69:e1:71:64:87:e2:26:f9:c4:af:e3:
0b:60:15:3f:10:6e:3a:96:01:30:9b:87:a6:00:11:
ff:be:62:ad:fc:1b:98:fd:76:6f:cf:11:9c:7f:fc:
a8:16:87:67:c5:15:0c:5c:54:b7:49:14:c2:e9:12:
fd:0d:a5:75:a3:cd:cb:20:e3:ca:0e:f9:38:3e:bb:
bb:fe:34:6a:59:c1:b9:f3:54:ae:d5:74:8a:90:0b:
62:cb:01:b8:11:31:41:ee:bc:e6:68:49:65:fe:8b:
7f:19:95:2b:65:cf:73:76:17:09:fe:d5:18:d3:23:
ba:ed:4d:79:05:14:50:d2:da:35:17:3f:cd:67:9e:
30:a4:48:93:73:20:84:ce:54:f1:11:e8:e4:ea:cd:
6f:40:96:4c:3d:a1:34:64:34:80:61:f8:bd:1a:ee:
23:41:c7:f0:80:c4:49:2b:81:86:af:40:6d:37:9f:
ea:72:d8:0e:4d:46:e2:d3:c5:79:d5:2a:0e:f8:6c:
2d:5f:eb:ba:8d:34:2d:03:cf:ec:98:5b:7e:23:6c:
d0:f2:a0:75:56:b7:a7:f7:ff:c7:bd:c6:18:7d:55:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:A5:3E:9E:2D:2D:42:7A:51:52:AF:7B:1A:E1:56:09:B8:3C:B0
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b9:7f:6e:82:f5:81:d4:dc:ce:fc:54:07:29:a2:2d:b5:e0:
00:68:ab:9f:94:48:11:dc:5c:82:7b:67:98:5c:93:d1:70:62:
7b:c2:a6:97:e3:4d:3d:48:2f:5f:a7:20:61:69:e1:10:a4:23:
dc:5c:06:a1:e2:b6:85:7a:d8:0d:b3:92:22:ce:83:a0:bd:fc:
9f:61:3a:d8:df:f7:64:56:33:cb:c4:e0:9b:6b:93:27:e2:1c:
91:f8:ab:16:b4:40:67:dd:3f:3e:c5:86:1c:68:a2:96:62:b2:
52:c8:57:4e:58:6a:67:66:54:b5:0f:95:12:16:38:40:74:97:
d4:0f:f0:49:1e:91:5c:c3:fa:cd:90:75:e8:a3:68:11:40:1f:
f2:f9:d5:2c:fc:8e:c5:a0:fd:ea:57:7a:c3:2a:c8:6e:7a:40:
96:63:29:b3:7d:8f:63:aa:c0:98:33:96:3a:32:03:18:4a:6f:
0d:6e:ac:d3:eb:9e:43:e6:e5:18:72:e7:fc:bf:3f:bf:e6:3e:
d4:fd:2a:36:6e:c3:a1:0f:4e:7f:e1:40:e8:0f:63:52:e8:7d:
1e:f5:7f:b0:cc:79:a6:d2:30:3f:f9:e1:bb:b9:6c:6c:85:53:
26:ad:3d:49:a5:47:d6:4a:57:0f:cf:be:ba:6b:74:25:1e:08:
fe:80:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:58 2026 by rpki-client