Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: 7ZaRB28ke2dhQZstqVHdqHHLv4roGE4jzrok9VlRkdk=
Subject key identifier: 7A:2A:45:23:AE:90:C4:CF:D0:92:18:63:92:78:E0:1E:D1:8B:80:F0
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 019D26CD61AEF050B3B75CCCD6E4360E298B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 130A
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: sdks8TCsvDa1jYkE0cZ1sXdA91U.roa (hash: 0MDGve+WYhOqia0+8JPSj/YzTSmHLemKWZ32TZAhSqQ=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: ll5ElghBxU+xbOBiRYju5+pDPJcOn7M30wcdoTDQgiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:61:ae:f0:50:b3:b7:5c:cc:d6:e4:36:0e:29:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=7a2a4523ae90c4cfd09218639278e01ed18b80f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:3a:3e:a0:76:45:38:e5:80:ce:7f:e4:49:
7f:90:16:c6:f8:13:34:de:85:3e:c1:f9:40:77:ed:
37:9a:ef:d6:82:17:5f:68:97:b2:7b:09:ae:9c:c4:
fd:f9:29:0b:8e:9c:1d:60:54:ac:91:19:51:4f:20:
d8:70:77:c4:35:05:ca:cc:37:cd:ee:f2:fb:e9:c6:
bd:1f:13:e5:24:63:99:ec:50:0b:8c:fb:ce:1e:f1:
d4:ea:a1:b2:80:5d:f0:5d:eb:85:84:9f:2e:33:fe:
9a:d6:cd:fc:53:d3:38:f2:7c:2b:8a:b1:d6:dc:9e:
bd:3c:3e:38:8f:f3:7f:2f:27:68:4c:73:93:b6:0b:
c3:4f:54:b1:2f:4c:d5:c4:cb:e0:d4:4b:e7:06:cb:
ca:7a:de:a8:ea:28:41:76:8c:a4:d2:20:24:a6:b6:
5c:08:a2:27:2d:5a:2e:44:3a:26:7d:0f:a9:e5:71:
7c:30:73:c9:56:7d:fb:e0:76:d1:08:38:b3:2b:82:
ab:8f:bd:2c:34:25:e1:43:7c:af:74:23:d8:c2:d9:
cc:7c:79:af:18:24:67:79:01:40:ce:4b:c1:99:ba:
88:61:91:8f:14:ca:18:0e:29:a6:f9:5e:c6:74:ae:
c1:ba:d7:3a:a1:0f:bd:e3:94:8d:6a:f4:e4:52:2c:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:45:23:AE:90:C4:CF:D0:92:18:63:92:78:E0:1E:D1:8B:80:F0
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:eb:23:e0:db:88:32:42:ff:04:d6:c6:a5:60:9f:9c:0b:
06:26:0a:28:51:fb:f1:40:11:3a:08:53:86:bd:2c:6e:43:35:
ac:fe:cc:32:6b:e7:37:34:e9:48:7e:7e:ef:5a:c8:dd:48:8f:
42:12:a6:cb:a5:ab:8e:78:b4:7c:69:32:3d:5c:8b:7d:b7:03:
a7:82:4a:1f:83:2e:46:44:e7:1f:99:5e:d5:e4:95:c6:c4:64:
2a:84:7c:47:83:1f:17:c2:d4:eb:55:0f:25:7c:6f:6c:34:82:
fd:5f:7b:87:c7:60:16:f9:c8:ad:bb:f5:93:3f:63:3a:80:78:
42:ae:a9:10:13:3e:bf:c7:a3:ea:91:12:da:11:15:7b:43:20:
0f:7b:63:b0:92:0a:9b:ca:ce:f3:c7:73:51:e3:eb:ff:4f:e0:
76:19:59:e7:0c:88:ca:71:9b:37:42:17:ef:b4:89:45:ca:b6:
f6:6e:86:a9:a7:46:d5:21:98:7e:de:84:1c:cb:5c:b8:b8:45:
d5:3b:fb:72:b5:12:bc:64:75:7b:06:3a:e4:13:32:e0:35:9c:
b1:a3:30:f3:39:f9:81:f9:54:79:21:61:cb:b0:84:7d:6f:32:
87:f9:29:18:1d:74:e6:98:0c:47:44:ae:22:a9:94:49:e2:f6:
f1:93:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:28 2026 by rpki-client