Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: PYn6yNE9MY0OZMUQXRA/rjbnr3WNZvWR4/R+0EBVBo8=
Subject key identifier: 5C:EB:14:B9:0B:A2:82:90:6A:A8:7F:71:25:ED:E6:83:F2:35:6F:36
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 019D296198EC14AA63FA677C1B3E6D797F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 042E
Signing time: Thu 26 Mar 2026 09:02:35 +0000
Manifest this update: Thu 26 Mar 2026 09:02:35 +0000
Manifest next update: Fri 27 Mar 2026 09:02:35 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: RHhpP0SSaMi8g4nl0jd4uN07SYNkNp9fSJFVpx0cR/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:98:ec:14:aa:63:fa:67:7c:1b:3e:6d:79:7f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Mar 26 09:02:35 2026 GMT
Not After : Mar 27 09:02:35 2026 GMT
Subject: CN=5ceb14b90ba282906aa87f7125ede683f2356f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a9:90:e1:7c:cc:6b:43:18:72:d7:89:36:75:
68:8f:4f:c8:aa:67:5c:4d:19:c0:cc:7c:22:85:98:
81:49:63:96:9c:be:f9:1a:69:01:b5:65:af:b5:d2:
5a:d9:c7:49:e0:ad:8d:be:26:aa:3a:21:79:16:c5:
92:67:69:1e:48:41:2b:54:22:86:55:3c:fd:fe:3b:
77:dd:c2:3a:8b:75:56:8e:eb:b2:90:b1:64:a2:79:
8e:8b:10:95:6a:ed:3c:69:2f:b0:34:a7:20:fd:a8:
fe:d4:52:61:f1:21:6d:0e:47:76:45:67:d3:ae:46:
f7:db:33:8f:51:3d:02:c3:21:2d:3d:fc:e6:67:ff:
2b:aa:4f:9f:c5:96:73:71:04:c2:6f:83:01:89:bf:
04:20:b7:49:b0:04:e0:82:14:06:d6:36:0e:b2:78:
33:ec:b5:ac:fb:f0:d1:54:a3:32:4e:09:7c:19:a8:
28:18:1e:b3:9c:47:0c:bc:1f:0c:c7:3a:89:99:60:
44:36:f7:8e:1b:25:20:1b:d5:7e:2e:b3:23:60:80:
0b:ce:9b:a4:df:0f:67:ea:39:3f:58:b2:b6:2d:6a:
54:65:ce:c3:2e:d4:78:06:f5:55:cd:90:20:37:f8:
81:48:87:eb:19:d0:1d:e3:ed:46:39:a4:a8:39:7c:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:14:B9:0B:A2:82:90:6A:A8:7F:71:25:ED:E6:83:F2:35:6F:36
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f9:77:27:fa:19:d6:28:9a:58:7b:5b:6b:85:a4:9c:1d:49:
56:b7:20:c9:b5:bc:6e:96:95:7f:d3:74:d7:b2:94:fa:0a:aa:
50:7e:e0:8e:cb:e3:73:e1:61:09:3d:d8:d6:30:d0:3b:84:fd:
9d:ca:f1:9d:2f:eb:0e:2b:40:3b:13:79:33:85:3b:1b:d5:92:
be:9c:ce:c5:65:c6:6b:30:8b:a9:34:98:39:df:bc:72:69:bb:
ce:b2:af:1c:a2:4b:2a:b1:a6:e4:78:06:5f:43:6c:27:b1:9c:
f6:ca:09:7b:b9:78:94:f4:1f:9c:dc:25:5d:96:11:c8:c1:00:
cb:49:1c:0c:72:57:b0:06:ae:44:63:fc:3e:41:94:02:5d:69:
a3:b3:ad:ca:d9:e8:4a:a5:df:57:e4:95:fa:e8:7d:4c:2c:29:
42:c0:87:27:3f:fa:a6:9c:c7:3e:a1:26:dd:08:29:05:80:b8:
57:b9:18:31:87:fa:03:d5:0d:5f:b6:0a:6c:b5:2d:8d:4b:65:
8c:fb:5c:07:2d:a9:ff:4d:0d:c2:5f:c5:05:2b:29:3b:a2:56:
83:46:91:fe:30:82:15:e8:b4:bb:f8:39:d0:f1:44:b7:20:fc:
20:cb:0f:d9:7d:2c:91:df:20:0b:39:91:32:62:7e:a9:40:3c:
b8:d7:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:35 2026 by rpki-client