Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: xrcJCz3WwjwDdUoQzsGZJhEyHnGgCtkqagZLaE/Ex9E=
Subject key identifier: EB:24:F7:0B:36:9B:67:9E:4F:95:99:AF:AD:FE:DE:51:E7:59:44:7B
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 019DB20FC7EE72946DF3A2612A386028996C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 87
Signing time: Tue 21 Apr 2026 22:01:11 +0000
Manifest this update: Tue 21 Apr 2026 22:01:11 +0000
Manifest next update: Wed 22 Apr 2026 22:01:11 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: 8pXhBxSdhNH+MgiVpm+yzRX5GjPtziQlQuicyAr5wu0=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:c7:ee:72:94:6d:f3:a2:61:2a:38:60:28:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Apr 21 22:01:11 2026 GMT
Not After : Apr 22 22:01:11 2026 GMT
Subject: CN=eb24f70b369b679e4f9599afadfede51e759447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:c4:5d:ca:9b:a9:be:db:98:aa:55:d3:61:
5d:16:73:f6:86:a7:00:ba:84:88:f8:45:03:d8:0d:
e5:ef:ff:27:97:29:33:f2:8d:4f:47:46:01:66:c2:
b7:3a:ee:e8:7a:8b:26:e3:32:ca:3f:a1:3a:9e:7d:
2d:73:6e:dd:27:9d:9b:b7:7f:a9:23:58:ec:40:c7:
0d:b8:42:18:90:ba:f6:9a:74:5b:18:5d:fe:ce:98:
f8:14:8d:9d:25:37:46:bb:c1:e5:3f:19:5f:12:77:
e7:8b:5e:57:18:50:e3:1b:c8:cb:e3:fe:71:ec:bc:
9e:d3:f7:60:f6:a4:a4:86:39:b4:42:fd:6d:db:13:
f3:30:1f:94:ad:a2:3d:40:dc:10:ca:7d:d3:59:04:
4d:dc:dd:cc:16:ac:f1:f2:51:9d:62:45:5b:2d:44:
53:0d:e6:33:32:da:ec:df:3d:7a:54:19:f6:16:50:
2e:ed:14:65:2e:64:28:be:12:49:05:66:9f:a7:9a:
e2:1f:17:7d:8c:13:87:c4:78:f4:12:5d:59:0a:a6:
8b:d7:ed:39:f1:e9:42:54:b1:bc:b0:02:73:0e:4b:
02:b0:bb:9c:fe:11:5f:0a:2c:a6:bc:7f:9f:d0:3d:
40:ce:5d:4c:8e:8c:9a:94:0a:72:db:a2:ca:de:2e:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:24:F7:0B:36:9B:67:9E:4F:95:99:AF:AD:FE:DE:51:E7:59:44:7B
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b7:f5:9c:a3:bb:e9:c5:64:fa:8e:c0:63:36:52:bb:ff:be:
79:b8:b9:b8:d7:5c:d1:9a:d2:8c:33:81:c2:d2:31:14:ad:c3:
7b:48:7e:7e:9b:ce:82:44:b4:20:10:70:81:17:c4:93:c1:7f:
c4:cc:ed:c7:36:43:89:91:8d:c2:88:9a:67:09:81:ef:3f:58:
ce:60:35:4d:1e:df:da:c9:83:41:38:c1:07:8b:ab:90:93:9d:
fe:cb:d7:22:e5:49:f5:2b:94:8a:34:dd:82:62:51:d1:13:3b:
fa:2f:e5:93:23:40:c6:f7:be:4f:29:5f:99:28:29:6d:53:c8:
f3:bf:bf:65:dc:8d:a9:46:a3:f7:9d:66:26:5d:eb:f8:8e:22:
35:58:2a:8c:bb:96:4a:a0:34:07:ec:e0:0c:ca:59:f5:d5:2d:
6e:f8:9a:19:59:12:4d:13:14:7e:b9:78:05:b3:67:7e:73:f9:
de:5f:eb:ba:a4:76:bd:e2:bd:e0:fa:98:00:13:d6:c8:b8:1e:
9b:07:e0:41:9c:cc:17:0c:7d:b6:ca:31:b3:70:c0:49:6c:8b:
e1:8d:17:01:a5:61:09:46:a9:a8:39:fa:ef:f6:77:4c:18:be:
54:4c:e3:b0:c1:65:fe:30:b4:2b:aa:2e:fb:ae:b3:0d:f9:b1:
a4:36:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:31:56 2026 by rpki-client