Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: nnEsvJZMJEzQ+MH6eSMmtCaBzyeOWK9ctYLVHA/tLp8=
Subject key identifier: 60:96:EF:77:3F:54:E7:F7:4D:B1:2A:AF:FF:E7:0E:79:92:E0:F3:43
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 019D26963065FA99769922F5747F9891B3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 1505
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: 460gpbF1-qqCopVmVYv6L3kkHt4.roa (hash: T/5gkOOg36xYZYGhY1BSI/Kds4ykDu2qme4aoQekPvU=)
2: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: +ckCCGbLc1qP1UqibwuBZLU+HXUk4POT5KPBEs6+QBc=)
3: jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa (hash: oupHuMBn+1iVvBy7YaBgSuAcJ/Oc6Y8+7+ZsGW3A7Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:30:65:fa:99:76:99:22:f5:74:7f:98:91:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=6096ef773f54e7f74db12aafffe70e7992e0f343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:d2:36:bd:f6:ac:96:70:b3:57:14:29:a5:
e6:79:61:89:c9:09:ae:6a:b9:f0:83:ea:8b:75:00:
55:23:1c:e4:49:f2:b1:c2:15:1a:79:1c:81:49:da:
64:9b:77:88:26:4f:c0:2d:76:ac:fc:8d:6f:5b:87:
f9:76:bf:19:e1:7e:a7:aa:1b:17:e4:4c:2f:09:17:
bc:95:f4:9e:74:cc:e1:52:90:9c:2b:22:63:bd:ce:
2e:d7:88:35:d1:ca:8c:f0:ff:33:4e:62:9d:9b:2c:
57:d3:58:f6:fb:98:5a:0f:b5:ec:1b:df:f6:67:bd:
46:7b:d5:2e:68:13:73:41:e5:bb:ac:13:5d:11:c0:
8f:4f:75:cc:29:d2:b6:47:c2:42:10:24:e9:be:83:
3e:9a:32:06:4d:8b:63:06:29:a2:90:49:f6:ff:58:
1f:e2:3e:24:7e:93:4d:c8:e0:79:0c:da:59:47:79:
b8:30:1e:ac:3a:0f:35:95:6b:38:2f:e4:ad:d8:da:
f3:c1:8d:87:ee:5c:16:e3:81:94:1b:03:77:78:6d:
1a:59:b1:51:ce:42:fc:c1:80:3d:a0:49:c6:30:ab:
f0:17:78:91:54:63:87:19:ad:a9:e5:c7:29:58:d4:
b1:45:6b:25:84:e1:f3:b1:eb:53:fb:33:f9:d4:58:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:EF:77:3F:54:E7:F7:4D:B1:2A:AF:FF:E7:0E:79:92:E0:F3:43
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:15:ea:fe:8f:47:7c:94:e9:3a:4c:55:55:05:bd:82:59:
0f:ce:4b:b6:09:27:6c:42:cb:e6:cc:2c:bc:60:8f:42:8e:ee:
72:40:ad:48:1d:30:48:5e:f7:32:1e:5a:38:bb:1b:6a:6c:ac:
a0:e9:2e:51:4d:f6:8d:44:d2:a4:dd:51:96:ba:69:1f:1c:18:
2a:cb:53:60:95:6b:5e:05:d6:60:76:28:c4:df:50:d6:85:b5:
f2:16:88:82:46:88:f0:ac:c5:34:5d:70:f3:ba:37:22:72:1c:
18:e2:dc:36:36:61:6f:80:68:2e:ce:70:da:0c:64:12:a1:84:
6f:f4:7c:e1:89:0b:2f:3c:38:b0:37:1c:54:d5:32:09:60:bf:
50:15:e4:44:f5:2f:c6:f8:cb:bb:07:d5:e1:19:b6:d4:4e:db:
d2:6a:dd:a9:0f:49:60:c9:7e:9d:91:6e:4e:ce:2e:ad:9e:d5:
87:62:a6:48:ff:b9:e5:49:4d:62:2a:f8:01:00:c0:e1:df:f2:
82:f4:a6:95:52:85:76:8d:0c:db:bf:ac:3c:ea:40:4e:f0:f8:
17:4e:d9:d2:01:40:4d:30:5a:ca:67:1c:60:61:78:d3:3a:5c:
40:be:9b:6c:a0:3c:1e:44:1b:11:dd:d9:67:a5:70:c1:3a:76:
0f:1c:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:31 2026 by rpki-client