Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: cvze6jRS5BA3meIM9Mxbdh7KgU4yLvt0OaGj3VOI0zw=
Subject key identifier: 9A:8D:63:1C:7A:7C:CD:A2:BD:70:AC:16:7B:3D:03:89:E1:1A:D2:36
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 019E1DC7834EC1FC7FED2E3671E1CC21D18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 1585
Signing time: Tue 12 May 2026 20:01:14 +0000
Manifest this update: Tue 12 May 2026 20:01:14 +0000
Manifest next update: Wed 13 May 2026 20:01:14 +0000
Files and hashes: 1: 460gpbF1-qqCopVmVYv6L3kkHt4.roa (hash: T/5gkOOg36xYZYGhY1BSI/Kds4ykDu2qme4aoQekPvU=)
2: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: ufgGawpTAfl6q00epU00Hpe8idhh811xfdOv15KqKsU=)
3: jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa (hash: oupHuMBn+1iVvBy7YaBgSuAcJ/Oc6Y8+7+ZsGW3A7Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:83:4e:c1:fc:7f:ed:2e:36:71:e1:cc:21:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: May 12 20:01:14 2026 GMT
Not After : May 13 20:01:14 2026 GMT
Subject: CN=9a8d631c7a7ccda2bd70ac167b3d0389e11ad236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:d5:be:0b:23:dc:63:2c:c0:98:7f:42:3b:
55:2b:83:6e:d4:d0:74:7c:97:fd:39:69:f1:52:a5:
bd:ce:4d:3e:61:d2:43:d4:bc:d9:0e:b7:93:c4:ce:
13:09:d2:e3:52:d4:3b:66:0b:eb:59:5c:fa:71:3c:
5a:83:13:04:dd:63:e7:3f:8f:ce:24:20:d3:c1:ac:
4f:f1:6e:ca:44:9f:96:e2:0b:7f:27:01:b7:af:5a:
c2:0d:78:72:a8:23:24:30:49:38:9a:04:2b:53:59:
80:2b:83:c3:eb:ec:f2:68:fa:b0:f1:d0:bd:ab:be:
c6:27:8f:d8:8d:98:86:be:ae:44:19:ff:d6:a6:c0:
a3:28:97:5c:f7:12:8d:8e:fe:5a:20:46:0a:31:f3:
d1:c2:a6:aa:16:34:af:cc:7b:80:bb:e7:d7:61:1b:
d6:b2:ec:c2:96:87:aa:d6:44:54:83:0a:85:83:3a:
41:17:3d:ab:79:ad:15:91:c7:40:33:8e:db:ec:f3:
ec:62:bd:f5:7f:3e:40:34:2f:e2:d9:b8:56:33:bb:
05:44:03:50:c7:46:b1:63:81:a3:f7:de:1e:78:e5:
f5:39:01:00:52:30:f0:57:b9:9a:ba:3a:ea:f3:f8:
85:d7:8b:11:74:71:1e:5a:4a:07:06:f8:b7:d8:c8:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:63:1C:7A:7C:CD:A2:BD:70:AC:16:7B:3D:03:89:E1:1A:D2:36
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3a:b7:1c:c9:23:28:3c:ac:1a:04:9b:80:eb:3e:65:c9:c0:
65:f5:6d:82:bd:35:81:fc:f3:c5:85:4c:d5:7b:30:37:07:7b:
cf:1b:52:b2:bf:9e:39:3e:95:92:a5:e5:f4:e5:f2:84:9c:8e:
3a:01:99:cf:51:7a:c4:7c:3f:09:b8:dc:8f:e5:b0:eb:87:40:
95:ce:72:e0:e5:58:d0:96:a8:87:53:96:97:e4:21:cb:5e:2b:
a3:08:45:a8:54:36:41:a9:a0:f6:03:06:f3:fc:a0:f7:df:09:
09:90:73:51:9f:ff:95:00:4b:55:d5:ab:67:f0:ad:3d:cc:05:
ce:c4:4d:62:7b:af:fb:86:bd:93:21:80:22:8e:fe:33:07:08:
1b:34:99:1c:0a:c4:6a:a8:4d:59:c7:72:36:d8:af:16:c5:b9:
bb:20:e0:61:df:8b:32:f8:fc:e2:74:b1:ea:65:bb:bd:7c:f7:
cd:ce:7e:17:d1:68:27:0b:48:f0:ba:3a:32:90:6d:17:fc:0d:
d1:c3:0d:34:70:ba:80:af:c6:9e:29:8e:f2:75:a7:f5:88:e7:
33:d4:2d:aa:26:a9:cb:6a:9f:a1:b6:ef:9f:7c:3f:c9:1f:64:
c0:52:90:a9:45:ad:43:8a:de:ae:e4:a3:3b:e7:95:10:7b:46:
dd:29:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:59 2026 by rpki-client