Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: rZIzifCS2O8fSXBj6nG6TS7BlMBDVTPJrkEg3dHGoRY=
Subject key identifier: E6:8D:2A:23:7E:27:57:73:39:12:AD:54:3E:84:02:DC:A1:FF:C1:FD
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 019D27DFE83D8A5865AB969A2E4A635B9EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 1771
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: OcEOgOkbxi/2VMjlYzls6HHIxmGQhWIf2cDhTgJj5lU=)
2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e8:3d:8a:58:65:ab:96:9a:2e:4a:63:5b:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=e68d2a237e2757733912ad543e8402dca1ffc1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:da:c2:cd:d1:44:e4:6a:30:f2:95:6b:61:
ca:3c:9b:b3:84:3b:66:00:e1:5e:90:5f:d0:34:d4:
ee:24:e4:17:b8:bf:77:18:7f:3b:1f:27:6c:82:97:
5f:86:fc:05:d4:da:89:72:d7:27:82:fb:ca:4d:0c:
4b:72:ed:31:27:3c:9e:db:96:31:e6:56:aa:40:27:
d5:42:ce:3b:71:b5:74:bd:99:2e:15:6f:9e:16:ca:
17:84:6f:d6:47:82:85:fd:d9:00:b8:a5:4e:cc:89:
bb:03:68:20:7d:8a:dc:1a:f6:6f:8f:14:d8:f9:0d:
61:91:cb:3d:92:01:01:dd:de:54:bc:b6:6d:88:b5:
13:58:44:aa:73:2c:5b:20:ff:8c:c4:ae:b7:e0:a4:
d4:aa:6a:e7:ed:f1:48:20:e3:5e:19:21:0c:39:a9:
be:42:3e:b0:a4:07:29:d2:09:ec:f9:38:c1:1a:b7:
e8:6d:1d:a4:7e:55:20:bf:1e:bd:5e:b1:13:1b:25:
35:31:43:be:fa:98:f0:03:db:35:99:ff:55:8e:27:
46:65:f5:2a:7d:2e:e6:fa:0b:b7:c3:4b:be:d8:83:
52:f4:84:2a:a3:2f:b2:4c:f4:39:fc:76:f4:1a:63:
f2:41:2d:cf:3e:77:ac:bf:3e:b3:13:e8:9c:10:26:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:2A:23:7E:27:57:73:39:12:AD:54:3E:84:02:DC:A1:FF:C1:FD
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:09:cc:7b:81:64:18:59:3f:27:08:28:d9:95:c9:5b:c1:
76:2d:77:94:aa:de:9a:14:13:94:f4:75:54:7e:93:1c:b8:2b:
5b:d8:aa:cd:2f:75:c1:e4:21:45:67:45:e2:61:4f:77:8a:39:
d3:bc:f7:84:f6:4c:79:84:5d:e2:33:59:1e:95:25:ef:25:95:
64:e9:a0:6b:62:07:15:67:63:a1:c4:f0:f3:a0:59:e3:1f:4c:
4a:b9:fe:03:74:83:ae:91:31:a4:9a:1a:f4:fe:8a:fb:f5:f0:
2c:b8:d6:1f:3f:df:02:29:7a:99:3e:51:ed:66:34:d8:88:19:
9e:9b:e8:4d:6d:bf:a8:ee:71:c4:e5:f1:ed:18:ad:d2:b5:c2:
10:9e:10:48:87:8f:ca:62:34:27:4c:a4:30:fc:35:b8:67:91:
db:f7:ee:62:6a:7f:54:0d:fc:90:74:65:b1:96:07:da:80:48:
e0:1b:e6:9e:34:3c:77:1a:89:4a:aa:96:eb:a2:ed:1a:58:17:
d1:f3:f8:b9:3a:e5:ae:65:a6:05:be:d3:f4:f8:42:6a:cc:b4:
9f:a1:04:19:c1:d1:6f:58:d1:25:11:6e:04:2a:21:a8:82:32:
a0:32:43:a3:09:9a:b2:c1:40:1d:c1:da:91:7a:36:da:f5:09:
f9:20:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:50 2026 by rpki-client