Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: j1QdsUvW/F+at1lAssgGJ53XmlKa8hU+WYCuLY7VnZ0=
Subject key identifier: 22:57:AA:92:73:B6:23:29:8B:66:39:56:95:0E:CD:AD:0D:C0:35:D6
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 01A0F00C1D0D287A87550B080EF157B03CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 16FB
Signing time: Wed 30 Sep 2026 02:02:00 +0000
Manifest this update: Wed 30 Sep 2026 02:02:00 +0000
Manifest next update: Thu 01 Oct 2026 02:02:00 +0000
Files and hashes: 1: 460gpbF1-qqCopVmVYv6L3kkHt4.roa (hash: T/5gkOOg36xYZYGhY1BSI/Kds4ykDu2qme4aoQekPvU=)
2: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: G0hS/8ODFy9un+gukynUTcCfMbhhi0a5XMS0V0POv9g=)
3: jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa (hash: oupHuMBn+1iVvBy7YaBgSuAcJ/Oc6Y8+7+ZsGW3A7Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0c:1d:0d:28:7a:87:55:0b:08:0e:f1:57:b0:3c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Sep 30 02:02:00 2026 GMT
Not After : Oct 1 02:02:00 2026 GMT
Subject: CN=2257aa9273b623298b663956950ecdad0dc035d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:dc:ba:46:b2:a5:b8:56:2f:6e:7a:df:19:
4d:ac:28:f8:e1:36:07:92:bd:6b:1e:6b:06:30:23:
29:19:34:9f:74:8c:52:17:b4:e5:d0:01:21:c0:b5:
93:04:f0:5c:e8:72:5b:51:14:54:88:f6:6b:2b:a6:
bd:3e:98:84:ad:a7:e1:b7:70:f8:69:e5:8a:db:90:
1f:f3:16:b1:bc:9d:da:47:cd:a8:a8:9d:d3:a9:41:
3a:df:33:a2:9b:e6:ec:d2:0a:fb:ef:ad:86:f5:63:
2f:5a:73:20:ab:be:77:01:68:af:ec:40:6d:b4:b0:
e5:71:7b:18:38:30:1a:10:02:ff:80:fc:9a:8a:c0:
35:23:53:f0:a6:c6:38:0d:21:6c:96:b3:6b:fd:72:
6f:9a:83:e2:f3:a1:44:1d:cf:9b:7a:bc:b1:3c:63:
68:c6:9d:62:ab:fe:cd:cf:22:1e:47:4f:93:6e:98:
7a:a4:f5:a6:ce:af:b0:64:12:80:03:ee:95:52:e2:
9d:9d:5f:ce:c5:0c:20:06:64:9f:50:98:f4:9f:89:
46:d2:a7:5b:6d:fb:f7:71:d9:f3:fb:cb:94:5f:87:
1d:31:c5:d9:f2:ea:69:1e:76:18:a4:d2:78:8f:ec:
f8:84:d9:f2:cd:47:66:8c:3c:2a:c2:72:48:0b:19:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:57:AA:92:73:B6:23:29:8B:66:39:56:95:0E:CD:AD:0D:C0:35:D6
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:38:0c:bb:07:01:34:90:aa:48:e1:27:a5:d9:43:66:dc:
7c:c0:6a:a6:a5:7b:6f:5d:68:ae:bd:07:92:2a:0b:c1:03:9d:
5f:d9:5d:1c:78:45:4f:17:95:a9:f4:98:6d:8d:af:09:18:0b:
37:1b:1d:44:c8:1f:da:0c:d8:1d:79:9e:20:ef:ef:72:86:d5:
bc:b0:ef:99:bb:50:49:e7:20:b5:df:fc:ec:39:43:7d:f2:60:
2c:a3:a3:5b:18:7b:8b:a5:eb:06:c6:47:30:b2:79:27:54:dd:
fd:3d:52:ed:c7:0b:2c:a6:0e:fd:af:a7:f1:57:6b:1a:88:fd:
82:cb:2c:13:72:b2:b6:72:f3:1e:26:ca:d0:0e:5c:cb:df:08:
f4:dc:13:34:5f:1f:48:b0:0e:e1:5d:37:e6:75:6a:3e:71:9f:
29:6e:44:1c:04:b8:4a:70:9a:94:a5:fc:36:70:aa:0b:05:e3:
e4:e9:84:54:5f:bd:48:51:82:85:45:c8:e9:84:7e:e9:31:81:
d1:9d:99:8e:33:ca:5c:d2:e7:e0:7b:b7:47:40:e5:06:d2:04:
e1:b8:95:67:0c:4c:0c:e3:72:3c:63:05:99:ad:00:e4:d3:d9:
b4:6a:e9:90:c6:d9:d7:73:a8:cd:54:43:ea:84:76:54:73:47:
24:be:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:31 2026 by rpki-client