Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File: W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier: MbEqCLiVN8yM22ha1tlcMOLd3FEKxNK6hSjVWMCHfBM=
Subject key identifier: 86:3B:6E:4E:7D:EC:2A:B9:38:05:99:8A:38:C0:9E:ED:97:BB:70:43
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer: /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial: 019D25F190B93FAE8A6BBC7C751E903BCC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number: 34
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: Y68mFGhxhPMfLSwYUPfWqeEjKbSslR5n8LDptjqxe/k=)
2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:90:b9:3f:ae:8a:6b:bc:7c:75:1e:90:3b:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=863b6e4e7dec2ab93805998a38c09eed97bb7043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:9d:98:b5:f7:cb:04:00:8c:fc:bd:1f:e7:
58:5a:49:96:b8:5b:71:5a:6e:05:d4:6c:59:4a:4e:
7f:4c:9b:32:08:6a:8c:23:d1:b6:04:05:25:2a:6b:
7e:f5:3e:90:f5:7d:f1:31:e6:0b:e8:45:01:4b:9f:
1c:2c:5c:c6:08:5b:1e:55:c4:c9:bf:ca:0b:9b:fd:
2f:a0:37:ef:a5:41:ac:35:6c:24:f4:8e:2c:72:ce:
6a:2c:67:d7:3c:1f:59:45:39:73:37:cc:c8:99:7d:
d5:4d:90:d1:41:90:57:34:1b:a3:e6:ec:16:f9:71:
54:a0:6b:95:03:08:23:82:a7:1c:8b:f5:18:c5:f2:
f5:4e:d9:7a:5d:2c:f4:a7:d8:20:84:f2:fb:5f:f5:
c2:e5:be:57:02:2c:a9:8a:14:a1:64:a1:39:0d:9a:
ec:99:97:e4:7f:62:fb:d4:e7:1e:36:f8:3e:10:67:
fa:3e:03:0a:cb:33:f5:a5:89:0b:fa:40:70:bf:62:
8d:75:57:5a:7b:b8:5e:66:ab:1e:32:9b:17:c2:f3:
be:74:d9:d4:d1:a4:c9:d9:e6:af:af:68:7f:40:d6:
f9:59:08:9e:6d:97:b3:c8:65:3c:20:4d:bc:11:d2:
dd:43:0f:f3:10:c1:29:40:4c:31:a2:19:2a:0e:9d:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:6E:4E:7D:EC:2A:B9:38:05:99:8A:38:C0:9E:ED:97:BB:70:43
X509v3 Authority Key Identifier:
keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:21:71:1c:5e:f8:3a:2a:d6:6a:eb:97:f2:40:34:52:1d:97:
a1:4e:f7:c0:4a:99:cc:4b:4c:cb:df:e2:57:b3:b1:61:64:23:
b1:c0:71:f1:8c:4f:b2:93:63:9e:ce:12:80:5f:ef:db:3b:88:
45:7b:fe:a7:7e:10:83:9b:12:9c:8d:09:4e:1c:d7:2b:36:7f:
08:8b:fe:40:c9:8e:78:2d:29:2c:f5:b8:7d:43:c0:45:08:ab:
d7:93:a5:2b:bc:7d:15:d4:fa:59:fc:92:96:0c:88:53:ef:b7:
07:08:6a:85:b9:70:7b:28:b2:ba:bf:ee:2a:e9:af:26:73:7b:
86:dd:5a:24:4c:5d:9a:b7:1a:66:9f:ae:a2:57:a2:e9:ac:c8:
cb:0c:0c:50:ac:90:00:8d:6e:46:23:3f:d3:02:22:b2:53:f4:
49:9c:3e:a1:f6:34:1b:63:38:70:d6:a0:83:e8:0b:94:61:64:
e6:ac:b1:ba:76:3b:ec:01:be:4f:e8:b9:3d:01:d2:9a:9c:5c:
c3:a9:aa:d2:e2:a1:16:11:7a:f4:95:0f:38:87:d3:c3:6c:76:
3c:47:5a:5f:14:d8:6d:68:5e:dd:15:b6:56:48:63:0f:52:6a:
6f:f9:3d:12:ea:dd:90:96:37:6e:c4:f6:34:0f:72:91:5b:cc:
20:e2:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:59 2026 by rpki-client