Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: 47j1CTxqmNVGTJMkl9hxkcxemeVPAKt1cvh+ZnpoLms=
Subject key identifier: CA:B6:03:05:06:23:9C:73:06:DA:A8:92:B8:F0:71:D0:10:7A:5E:47
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019D28BB9EBDDFC26374B371ADBCF379171C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0E87
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: HIzGjXvjBVk2sopu447c4kAkz9+1l5cMwd3tLnJY4MM=)
2: h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa (hash: lIFIr7IW4fJHhWCQmREyv0ZLQpwRC/atkqoeOTTCLNA=)
3: oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa (hash: thUeFABDpIEkTpbKZW+FpdsviA9MqeC7/Ij0qsHenC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9e:bd:df:c2:63:74:b3:71:ad:bc:f3:79:17:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=cab6030506239c7306daa892b8f071d0107a5e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:94:df:cb:22:d1:f6:a2:4a:38:11:30:4d:
3b:a3:49:b2:9a:65:2a:cd:6f:56:ab:8e:ab:2a:90:
d3:60:47:d8:6f:4f:ff:e4:97:a6:9f:a9:73:22:36:
34:2f:70:dd:d1:ec:63:6d:a2:2d:18:87:a3:27:98:
7f:5d:60:4e:26:db:3f:83:5c:56:29:97:0d:81:be:
5e:3f:8a:25:89:c8:28:b0:dd:fd:f6:c2:44:dd:81:
4d:02:d8:ac:9e:35:94:89:e1:b2:58:b6:bd:05:b5:
85:53:44:2b:20:c2:98:23:b0:7a:ed:b2:71:a8:b0:
33:08:5c:62:e3:82:a2:34:af:7d:4b:ad:6d:53:a8:
e9:20:fc:3d:96:28:95:2e:93:96:2e:dd:90:87:1c:
57:5a:3a:03:e2:07:9f:6a:94:45:12:e6:fa:45:76:
cd:3c:2a:ab:77:9a:41:f6:8e:e4:38:ec:3b:d9:9d:
8c:6e:ca:fe:fd:a3:1d:07:69:0c:8c:b5:27:de:a3:
c0:51:b6:b1:fc:73:7a:76:97:2c:cf:98:31:2a:9b:
93:bd:1c:af:c7:79:6d:cd:31:a0:df:1a:81:15:47:
d1:87:65:22:4a:3f:54:e9:7e:aa:c2:76:3c:76:f8:
5b:75:36:de:16:ef:a0:23:eb:e7:5f:f8:78:bf:74:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:03:05:06:23:9C:73:06:DA:A8:92:B8:F0:71:D0:10:7A:5E:47
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c3:c6:3c:1d:ea:17:d1:ca:30:14:9f:5d:88:c5:64:a5:65:
6e:88:80:41:ad:39:48:b3:2b:02:46:83:5c:86:e7:81:89:ba:
e8:18:b7:97:d4:74:f0:50:6c:d7:57:e6:d1:4a:03:f3:e3:cd:
87:fe:66:75:c2:ec:01:f4:75:a6:59:1e:5b:ca:f2:28:96:b9:
bc:ef:9c:89:82:f1:bd:cd:1d:4c:8d:8e:d7:6c:e1:60:cf:37:
6b:bc:d7:62:71:dd:fd:ab:18:07:ad:82:17:2b:ae:b1:68:8d:
91:1f:e7:54:5a:eb:83:38:65:77:ef:ea:c8:e2:3e:d8:2e:87:
3e:09:91:26:a4:7e:2b:68:f3:d6:1c:2d:0b:0f:8f:16:be:5e:
39:62:fc:7c:57:51:e3:72:61:75:91:ee:0f:aa:82:2a:25:e7:
ab:0b:2b:ed:12:ce:1f:67:0f:bc:30:7d:8b:11:f0:71:13:19:
46:20:fa:9a:de:a2:f9:7e:5a:23:4c:75:33:c9:05:0f:c7:bd:
08:38:02:db:a6:3d:9a:09:70:cf:1a:a7:bc:e8:a8:bf:41:92:
7a:cb:36:67:56:04:38:dd:7d:dc:1c:b9:cb:2e:f2:aa:d0:ec:
0d:b2:81:29:49:83:1f:bf:41:c2:af:2e:36:c9:a1:c3:3b:01:
1a:c4:19:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:18 2026 by rpki-client