Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
File: W0ShsaCcqepQ5aW9W3d737XzVls.mft (raw, json)
Hash identifier: ZBwm+6pqO1PmexWn/Vwu0uQTk7GSHc3EiVhtQlGkwfc=
Subject key identifier: 5A:A3:36:41:AA:A4:C3:33:EF:59:D0:CA:D8:8C:6B:86:ED:12:32:C2
Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
Certificate issuer: /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Certificate serial: 019F8E6C1FDC1F6C96D76D2E1D0BC651EF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
Manifest number: 01FE
Signing time: Thu 23 Jul 2026 10:01:18 +0000
Manifest this update: Thu 23 Jul 2026 10:01:18 +0000
Manifest next update: Fri 24 Jul 2026 10:01:18 +0000
Files and hashes: 1: W0ShsaCcqepQ5aW9W3d737XzVls.crl (hash: nRIxX2u2AFtzDZ2CcPovIQBBO+U7bVMJihYRhEOBT8Y=)
2: y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (hash: w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:1f:dc:1f:6c:96:d7:6d:2e:1d:0b:c6:51:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Validity
Not Before: Jul 23 10:01:18 2026 GMT
Not After : Jul 24 10:01:18 2026 GMT
Subject: CN=5aa33641aaa4c333ef59d0cad88c6b86ed1232c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:29:fd:d1:c3:8c:8c:3c:d1:ae:ef:0b:9b:
5b:57:ef:1f:1a:61:2b:67:48:b5:96:d3:84:4b:61:
68:b8:5b:10:3e:d6:b2:58:87:dc:8b:6a:32:53:ce:
2e:ce:b3:5b:dd:a9:f7:4f:0a:09:24:f6:8d:af:6e:
e6:37:2d:97:a8:ca:1c:06:90:83:89:fe:f9:b2:bb:
3c:33:54:5d:13:81:fd:12:cd:45:a8:99:23:62:a8:
64:3e:ee:53:b8:39:cd:6a:cc:c0:cc:fa:a4:0e:1f:
d8:93:6f:73:05:b8:80:e6:38:37:8f:23:a5:e1:1d:
39:0b:63:aa:35:53:2a:0e:d7:27:79:c7:44:39:5a:
3c:5d:7d:3c:b2:2a:7e:5e:b3:ae:0a:ae:65:d2:b1:
d3:8a:af:2b:db:70:fa:2b:5b:a9:09:c7:0b:d8:44:
c7:0e:46:b1:c0:24:c1:23:94:a1:1a:b9:83:77:e4:
7f:98:a3:be:a1:c0:a2:94:ce:44:f5:cb:14:21:f3:
6b:16:81:87:8a:d7:e7:37:a2:7c:5c:b5:8b:32:9a:
b9:71:4a:38:fe:b8:7f:43:82:86:92:3b:ec:4c:fe:
ba:d3:7b:48:d8:2a:d9:1a:64:f9:c4:b2:d0:43:2d:
a6:3e:0f:2e:52:d5:0a:50:69:91:f4:20:76:f2:7c:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:36:41:AA:A4:C3:33:EF:59:D0:CA:D8:8C:6B:86:ED:12:32:C2
X509v3 Authority Key Identifier:
keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:13:ce:97:0d:34:77:79:81:b6:d6:d7:7a:09:dc:78:2e:
e2:9c:a2:88:fe:fe:0a:94:79:12:f0:ef:8c:d2:e0:49:24:6d:
5e:e2:37:f8:9c:3b:96:43:05:74:cc:54:87:2a:af:24:0c:9d:
92:5a:c3:66:a5:58:9f:77:1a:cf:69:d7:ee:18:65:d0:01:44:
eb:2d:5d:8e:97:dd:a3:d9:19:3a:83:fb:ec:b5:d5:c0:dd:c6:
c2:4e:44:72:63:ec:53:f7:75:a9:42:c9:ec:65:fc:58:c9:f4:
1f:b6:d0:71:28:71:d5:45:a5:f8:70:88:fa:75:ea:7d:b9:aa:
9d:9a:51:a2:62:11:c1:cc:2d:12:c5:6c:8e:4c:c6:06:2e:cd:
09:2b:32:9b:4f:74:11:1d:b9:62:f4:da:f5:b8:54:8b:aa:66:
f0:11:51:cf:85:34:41:15:d2:f3:63:2f:33:7e:f1:e6:84:e5:
e1:76:44:c2:d5:f1:8f:99:dd:ce:08:99:39:58:a4:f0:ff:02:
3d:48:98:b7:d0:36:65:53:07:98:ea:98:2e:11:be:1d:eb:55:
17:e3:27:7f:b0:c2:d9:8c:6a:6b:6a:cc:48:c9:83:0b:b3:dc:
e9:01:34:93:5b:20:80:ce:6e:c4:49:22:db:3b:6b:ad:c7:1c:
de:31:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:58 2026 by rpki-client