Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: GCEiAFRdrZDRcRgkY0qby7Dj1Tb5VALL/iRFRa7LXFQ=
Subject key identifier: 3F:DB:8F:8D:B2:9A:22:79:BF:56:50:4C:17:24:33:7E:92:3A:6B:0A
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 019CC862DB15F552D0F415ADAC9EA18A987A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 0E
Signing time: Sat 07 Mar 2026 13:00:47 +0000
Manifest this update: Sat 07 Mar 2026 13:00:47 +0000
Manifest next update: Sun 08 Mar 2026 13:00:47 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: oz43Ga7dEbGZ78L+VB2/Ne2IuHC9/zk9+5REvmCM5jk=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:62:db:15:f5:52:d0:f4:15:ad:ac:9e:a1:8a:98:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Mar 7 13:00:47 2026 GMT
Not After : Mar 8 13:00:47 2026 GMT
Subject: CN=3fdb8f8db29a2279bf56504c1724337e923a6b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:7f:c9:79:7b:09:6b:76:ab:e5:c5:3f:8e:
09:c2:73:ad:95:40:bc:55:55:de:d4:ab:fb:84:90:
39:1d:cb:5b:ab:62:8e:8e:b1:03:9b:8b:56:2c:e6:
a6:05:d7:95:0b:c5:5d:18:72:b1:63:fe:18:4c:97:
bb:1f:a9:06:c7:4c:ea:92:9d:75:4c:f2:53:57:8d:
e0:cf:35:b6:1b:84:d0:d5:08:dc:f1:66:dc:e4:e8:
f2:34:f6:ee:4f:66:83:dd:0f:0d:62:8e:e7:5e:66:
b1:98:d8:e8:85:3b:56:95:3a:5e:63:08:00:81:f6:
7e:ff:34:4e:8c:5c:c3:fc:6a:00:e9:d8:7a:d6:4f:
dc:05:18:a0:31:0e:93:c7:98:5a:16:e5:e2:8e:4a:
29:7f:04:fb:5b:92:29:92:14:b9:68:a0:14:94:c7:
b6:08:d6:35:df:25:0c:3b:d1:25:95:46:66:3d:d4:
10:62:94:25:54:46:e1:1b:4c:f3:4c:d0:8b:04:9a:
55:0c:fa:da:c5:4f:fc:e3:b7:11:56:41:d7:c9:66:
61:4d:c7:dd:9a:6f:dc:db:c2:38:92:93:bc:bf:12:
95:15:09:ba:ff:4e:37:c7:d1:f7:68:19:02:88:4d:
5a:0c:84:83:a9:96:93:36:84:78:b1:f3:8f:c0:5c:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:8F:8D:B2:9A:22:79:BF:56:50:4C:17:24:33:7E:92:3A:6B:0A
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:17:78:a4:09:2e:83:f3:f7:7a:c5:59:3f:9a:82:08:f9:84:
c0:03:f1:e7:6a:b7:a3:e9:79:7a:d0:43:8e:18:d2:dc:c7:9d:
8a:40:78:6d:14:b0:2a:7a:31:e7:8a:6c:d2:a9:45:22:5e:5c:
ae:d9:fe:6e:b1:b1:ed:3a:a1:66:c1:3a:49:bf:ed:da:47:18:
00:ff:17:77:1a:78:56:69:0c:f6:1f:72:7a:1d:ee:07:d8:cd:
fd:94:c4:1e:e3:84:0c:6a:34:3e:85:45:4d:47:86:96:ea:75:
9e:4c:c8:21:39:be:e3:a1:73:6e:c6:95:80:cf:73:09:f4:40:
df:3f:64:eb:d2:8b:b0:05:8d:b9:ba:a1:4a:82:17:04:ea:4b:
ca:ad:c6:3b:9a:03:3d:ab:60:c4:b3:c2:c0:6e:6f:97:1d:cf:
f8:f3:5c:e3:be:16:0f:1d:d8:6f:ac:76:96:21:1d:ed:b2:e9:
e7:68:17:76:48:dd:2b:e1:40:3f:1f:a6:dc:de:55:84:4b:ae:
19:2d:35:68:08:4e:fe:d9:77:d6:79:e0:03:10:f2:3a:de:d4:
09:a8:f3:57:06:bc:ea:ea:cb:c5:9d:90:e3:0d:15:bb:ef:f9:
30:20:77:9b:56:b2:e3:a4:90:cc:27:24:39:5d:49:7f:7a:e1:
01:03:3b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 18:58:10 2026 by rpki-client