Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
File: WqMimeK05SO32u82O36srTLFxkk.mft (raw, json)
Hash identifier: k6dVHwJ43oN0pgtauRIHNgaR33b/Kl5lHy2zfyTqCp0=
Subject key identifier: CE:51:98:C4:E8:D4:F2:1E:BF:7E:B5:08:A9:AB:B5:25:44:1B:0A:E0
Authority key identifier: 5A:A3:22:99:E2:B4:E5:23:B7:DA:EF:36:3B:7E:AC:AD:32:C5:C6:49
Certificate issuer: /CN=5aa32299e2b4e523b7daef363b7eacad32c5c649
Certificate serial: 019D33079BFD2294B37F20116C0C1BC8F504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
Manifest number: 42
Signing time: Sat 28 Mar 2026 06:00:29 +0000
Manifest this update: Sat 28 Mar 2026 06:00:29 +0000
Manifest next update: Sun 29 Mar 2026 06:00:29 +0000
Files and hashes: 1: WqMimeK05SO32u82O36srTLFxkk.crl (hash: sqEJhlyNU45Z3kXSUftMjU1hUFO9kzDNXNvuTNoDGQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:9b:fd:22:94:b3:7f:20:11:6c:0c:1b:c8:f5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa32299e2b4e523b7daef363b7eacad32c5c649
Validity
Not Before: Mar 28 06:00:29 2026 GMT
Not After : Mar 29 06:00:29 2026 GMT
Subject: CN=ce5198c4e8d4f21ebf7eb508a9abb525441b0ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:be:df:53:fd:f0:d2:76:6b:96:d2:c4:70:
b9:82:97:f5:49:25:c7:aa:4b:81:65:1e:11:3b:03:
81:99:fe:43:fc:0d:0d:2e:85:e1:5a:51:55:cc:16:
a8:e9:4f:a7:42:b9:11:a4:f0:05:62:9e:44:57:dd:
a5:95:68:d8:d4:ec:59:05:5d:76:4c:f3:f7:fa:d4:
8c:5f:b6:8d:00:dc:b7:23:a2:6a:11:dc:98:fa:33:
f8:90:2e:1d:2a:8a:10:7a:b0:9b:c8:89:24:bc:b7:
95:73:fa:21:a8:3a:37:d3:a1:cd:61:32:9a:51:4e:
95:f0:73:d0:b0:2a:04:b0:3f:01:76:59:e5:28:84:
89:73:a7:58:f2:ee:3e:91:d5:1f:ff:88:0d:f3:bc:
14:a9:84:ef:34:73:fe:4f:56:c2:4d:25:4b:51:96:
cd:00:00:5c:d9:0b:ba:d5:c2:5f:d6:fd:2e:53:4f:
d3:ae:ba:dc:b6:36:ae:67:ed:29:9f:49:50:2a:7b:
6a:7d:0f:54:55:cc:11:cc:8b:da:af:3e:27:5e:16:
be:42:e2:35:38:3b:00:29:f4:4b:6d:1c:71:04:9d:
c7:17:e7:18:ae:b6:a0:1c:47:d7:16:bc:8c:56:87:
93:52:54:ea:d4:da:e1:8e:14:9a:c7:4a:79:97:89:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:98:C4:E8:D4:F2:1E:BF:7E:B5:08:A9:AB:B5:25:44:1B:0A:E0
X509v3 Authority Key Identifier:
keyid:5A:A3:22:99:E2:B4:E5:23:B7:DA:EF:36:3B:7E:AC:AD:32:C5:C6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:05:b1:dd:0e:06:4d:f1:fc:a9:41:78:89:81:4a:dc:5d:d1:
9f:c4:17:ed:68:28:af:c8:a2:20:a4:ee:21:c8:4c:61:2f:52:
37:fc:44:0e:77:c2:28:ae:e7:cb:8a:1d:d5:cf:fa:d7:89:f2:
92:18:5d:38:60:a3:5d:e1:bc:17:4c:00:61:94:0a:4e:8c:f6:
0b:95:b5:95:12:c2:99:f0:5f:7d:c0:c1:29:19:73:24:b7:9d:
f1:e8:63:a2:e1:86:75:c8:f9:73:1b:32:80:fb:79:a1:97:13:
30:e4:34:9d:8b:85:a1:e5:96:19:3c:ec:bf:cd:00:69:c1:ea:
5f:5c:36:38:0a:f6:da:c9:76:41:89:d5:da:31:d1:3e:b7:f2:
5d:a4:ff:e6:0e:c4:a6:ba:b8:7e:da:ee:c9:0a:d0:14:b5:21:
1f:66:b2:2b:19:02:a8:35:3b:a8:2f:94:0e:97:d4:4e:f7:c5:
08:65:03:de:bd:55:b2:bb:b8:13:50:cb:0b:4f:c2:cb:e0:c0:
bf:2c:3f:24:33:02:28:71:aa:2c:b3:64:db:0b:00:6d:c9:d1:
b1:4a:01:f2:f2:33:4b:d6:55:41:93:c0:a2:36:3d:3f:99:68:
91:bb:f3:24:92:d9:f2:b0:3f:0e:1c:ac:b4:fe:2d:b6:73:2f:
ed:55:7c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:28:06 2026 by rpki-client