Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: ReuqX4KQI0nUcXTS/SYLGRJNjGVm0ZesxH2VtBO7yuE=
Subject key identifier: E5:28:FB:3F:14:9C:10:D3:C0:BA:43:A4:6C:2C:4C:5C:F4:AD:7F:EA
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 019D2A3C054A76133601C3E488492828BD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 06D1
Signing time: Thu 26 Mar 2026 13:01:09 +0000
Manifest this update: Thu 26 Mar 2026 13:01:09 +0000
Manifest next update: Fri 27 Mar 2026 13:01:09 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: pj7LhWiORluDrdVFpt0bxEXGKX2/FBR/U21os11aOJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:05:4a:76:13:36:01:c3:e4:88:49:28:28:bd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Mar 26 13:01:09 2026 GMT
Not After : Mar 27 13:01:09 2026 GMT
Subject: CN=e528fb3f149c10d3c0ba43a46c2c4c5cf4ad7fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:5b:4e:1a:d2:30:95:ff:60:76:dd:3d:f1:
7e:c3:46:cd:61:6b:78:e0:af:13:65:19:cc:88:5f:
4a:5b:0a:15:59:ec:00:9d:85:aa:6d:a1:9e:77:83:
a1:97:07:95:45:d6:2a:2a:56:fe:2c:c5:43:51:ab:
52:39:aa:ff:ef:91:66:97:56:dc:25:ff:08:2b:1c:
23:87:3a:91:8e:69:67:41:24:6b:39:18:f4:b4:ef:
78:1c:ae:62:2b:83:10:97:b3:24:f4:1d:a3:dc:ff:
93:31:58:7b:dc:fb:87:36:18:9f:6f:35:47:b2:3c:
12:cf:3b:e7:bf:f6:b7:c2:86:84:90:38:b5:de:20:
7f:b5:43:a0:bc:b0:69:8b:ea:7a:e1:53:af:38:fa:
1b:16:ba:fa:2b:24:09:ef:e8:78:05:02:d4:17:ad:
49:c8:b8:f4:68:cb:1d:c0:9b:c4:54:7c:29:d6:4f:
38:55:e4:1e:f9:0f:d4:a5:3f:e7:38:9c:ff:cc:b6:
d1:22:06:cf:c3:4f:ad:4c:c7:68:ab:94:55:2e:15:
82:ab:60:cc:de:d5:b2:c8:3a:d1:78:e6:42:f1:50:
39:08:e5:34:ed:50:62:45:87:91:54:03:ca:b6:37:
7f:b6:06:de:a6:be:7a:fc:f0:d3:6c:a7:c4:52:36:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:FB:3F:14:9C:10:D3:C0:BA:43:A4:6C:2C:4C:5C:F4:AD:7F:EA
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f8:aa:96:25:22:22:77:37:d0:79:d4:68:d3:e3:6a:b8:b0:
3a:ee:f9:4b:58:14:53:dd:f2:67:3e:d9:6f:f2:e1:2c:18:17:
06:d9:2d:0b:b5:06:e4:36:69:11:24:fc:cc:e2:b4:7e:9c:60:
59:a9:e6:1e:d5:98:ef:b2:f3:5b:5f:6b:c0:81:09:76:9e:57:
5a:34:a0:a3:3d:f5:09:aa:3e:b8:48:26:5d:97:c5:0a:eb:d6:
e3:4f:79:26:68:ee:07:34:4b:fe:df:25:f5:1e:e0:15:dd:27:
ab:53:77:6b:35:72:90:b0:3f:c7:1d:97:bd:a6:54:44:b0:4a:
6d:69:63:66:6a:c0:c1:75:f5:a8:f9:ef:bf:ad:d6:df:e0:6e:
45:99:fb:d5:0c:60:26:25:f4:0f:5e:01:e7:e5:5c:d1:60:82:
b4:4b:03:d2:1c:da:52:4d:fc:21:6e:25:e7:8d:0c:be:02:ec:
d2:b0:1b:a7:62:b4:ab:1f:15:e3:b5:46:58:23:76:11:c4:52:
f9:4c:19:ea:2c:00:fc:30:99:4e:cc:2b:1f:a6:c4:91:db:6e:
42:a9:0d:12:c9:48:51:ef:5c:77:e8:c0:c4:db:6f:d9:04:04:
e9:42:1b:99:69:5d:cf:90:02:a9:9a:29:3c:c5:41:b7:a4:dc:
48:c9:ef:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:10 2026 by rpki-client