Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: 893QWY0/1Qr+xM4sZwNoKLCMRqjLeFg5Nn2sQZzPV84=
Subject key identifier: 6F:BD:35:67:A7:42:4D:7D:B8:26:1F:64:83:06:C8:46:9F:F7:F3:AA
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 019DB3FE9A65EF78A119CA3A0704EFC7626A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 88
Signing time: Wed 22 Apr 2026 07:01:40 +0000
Manifest this update: Wed 22 Apr 2026 07:01:40 +0000
Manifest next update: Thu 23 Apr 2026 07:01:40 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: CTp7r4qZbVYPrrMNUD/QU3nWMohSMn8YRKaat5KCh3M=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:fe:9a:65:ef:78:a1:19:ca:3a:07:04:ef:c7:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Apr 22 07:01:40 2026 GMT
Not After : Apr 23 07:01:40 2026 GMT
Subject: CN=6fbd3567a7424d7db8261f648306c8469ff7f3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:4b:6b:de:70:3f:d2:23:10:69:b7:93:e3:
d4:4f:56:0c:be:8f:e9:3c:1d:21:75:c5:82:86:27:
a0:dd:8d:cc:7a:b3:97:05:cd:5b:3f:6f:94:c3:ae:
bc:2d:9c:69:8a:1d:36:7b:6e:33:f0:93:a9:07:09:
86:82:a4:c4:fe:19:ed:f3:52:b1:66:a8:4f:2d:9c:
b5:8e:6b:7c:36:f5:c7:72:b9:7b:38:c9:18:75:c0:
25:32:4a:23:7a:28:3b:2c:6f:44:b1:03:fc:4a:63:
88:74:6e:e0:41:a5:8c:8d:67:84:65:91:e7:07:48:
94:7b:74:2b:fa:02:a4:a6:d8:5c:b3:73:83:ae:91:
78:61:ae:c1:57:3a:77:06:a7:c2:47:43:2f:ef:cb:
fb:74:f8:aa:ec:e9:b4:58:85:4c:36:3a:c2:3e:7f:
e0:d5:f1:6c:d2:b6:dd:26:fa:41:9b:a0:d9:87:24:
b0:00:a9:3a:55:9d:17:87:8e:d5:5e:8b:20:b9:ed:
67:22:8f:95:a7:04:cf:2d:45:f3:fd:b8:e2:f3:00:
28:25:64:89:17:a2:50:26:0f:1b:a9:86:8a:a6:04:
21:04:77:d0:aa:68:aa:f3:6d:f4:cd:a3:a1:26:5f:
83:aa:19:4d:c2:34:8b:ca:44:30:a9:a9:e3:1d:ef:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:35:67:A7:42:4D:7D:B8:26:1F:64:83:06:C8:46:9F:F7:F3:AA
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:33:04:df:a2:b8:72:73:f8:77:a1:e2:7c:ff:53:f6:ac:
f6:72:6b:47:58:ab:8b:c0:7b:bf:aa:43:88:c7:7b:c1:de:4b:
de:c9:93:f1:ec:80:83:79:55:76:6f:f7:be:bc:a4:eb:0c:69:
59:91:c1:b3:93:bd:ac:44:47:a0:d1:fe:2f:69:b9:22:99:78:
9f:7f:3b:26:36:6e:34:c8:60:b8:c8:b9:65:a5:64:df:b1:a8:
19:99:dc:b5:27:7f:65:a2:5b:2d:0d:39:42:22:11:b1:3e:0e:
b1:a4:a0:fc:18:83:e2:65:27:7c:a8:06:d0:03:0b:c1:7f:df:
d6:68:b8:02:bb:10:ce:4f:09:cd:fb:f9:3b:20:f1:9f:bc:c0:
21:56:26:e3:b6:94:30:ce:5c:d9:03:88:6e:86:e0:d4:2f:e7:
f3:68:42:ec:9f:8d:8a:27:39:4a:fb:da:be:e2:27:9d:7c:21:
b4:6e:69:4b:cb:67:55:73:b6:35:f6:5c:2b:88:c8:85:72:17:
7b:80:12:d2:b4:e4:2d:48:a7:4a:1c:1f:01:4d:1a:2d:7e:cc:
d3:fa:c8:93:c0:b5:04:6b:76:cf:aa:31:a9:d2:fb:01:ce:fa:
77:2c:92:10:09:48:04:7d:fc:85:92:91:d3:c2:bc:37:49:17:
a5:f8:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:12:07 2026 by rpki-client