Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: jxfn3i1YDo/plztDprU3gTGIdUaaVD8GPFY3w9dD1FI=
Subject key identifier: F2:63:49:11:6C:F1:D9:E5:EF:08:31:2A:FF:88:71:77:E7:95:2E:E7
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 019D38D35EE976405C7D4687197D7B9CA238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 14AE
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: TlfmAzV7GWwY3rXMRpeYUl7aKdw.roa (hash: 5eOHO+lm41+VyItnXbH9JnN/kNKtBVpRjgRNWcBchwM=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: 0lRsYqQpsS9FvNooX7/Tz7ZxjTu/3ya0RpnaAke/rAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5e:e9:76:40:5c:7d:46:87:19:7d:7b:9c:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=f26349116cf1d9e5ef08312aff887177e7952ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:7f:a2:bb:2b:eb:69:ca:3d:23:ff:cd:b4:
bf:76:ec:4d:84:6b:c6:2e:a6:34:e4:a6:86:1a:0a:
a7:3d:37:77:b5:c4:0c:19:ec:9c:1d:97:a7:33:2e:
ae:21:53:76:12:f4:7f:7e:4e:1d:95:e4:2b:fb:74:
3a:a9:d6:7c:52:51:0f:20:82:64:78:f4:ef:1b:80:
28:41:62:d0:7e:fe:3d:44:1c:4a:9f:0c:82:30:3a:
1f:7e:38:f9:f8:75:52:ea:46:4d:57:2a:db:a5:08:
79:4b:31:03:06:11:15:b2:d4:ce:4e:7a:fa:53:e4:
38:72:ff:25:65:14:84:9b:d0:9b:69:9b:f8:29:a8:
e6:5c:db:ca:55:bf:a8:4e:1d:69:8e:5a:79:4d:96:
80:07:52:5e:ca:b3:c6:27:31:ba:fb:01:cf:fb:94:
16:b7:13:33:76:a6:16:a4:23:15:2d:4c:df:bb:53:
ee:22:96:4e:df:42:62:20:72:39:1d:ef:7d:d1:5f:
f4:16:d1:9d:7b:4e:6f:99:6c:e7:7d:f9:53:1f:d9:
31:45:95:6f:36:ed:e3:6b:57:47:f8:ac:cc:5d:3b:
43:21:52:f5:44:e6:9b:29:13:81:97:37:e5:1e:17:
7e:6f:28:ac:09:06:c5:cf:bc:0e:3b:27:d0:82:bd:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:63:49:11:6C:F1:D9:E5:EF:08:31:2A:FF:88:71:77:E7:95:2E:E7
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:34:27:4e:1c:77:b2:72:02:6b:cb:ea:91:9e:86:e8:f0:
d5:7d:5d:be:82:fd:05:8f:92:db:32:6f:e9:6b:6b:10:60:28:
30:b1:af:5e:ba:4b:03:93:81:52:f2:82:ae:36:88:71:0c:23:
2d:e0:f5:6b:37:74:88:0a:90:8f:58:34:63:90:7b:ce:8e:25:
15:f1:40:19:b5:7b:ac:ca:37:6a:ad:96:f9:e0:bc:c4:78:ea:
67:79:23:ef:24:43:55:27:00:36:dd:59:1e:6a:17:b9:55:8a:
ad:c5:b5:57:3b:34:ef:d9:96:87:5e:12:1b:6f:7b:f3:84:f8:
14:c0:c7:69:d8:d7:c4:72:88:6e:3c:67:7e:45:60:30:06:08:
9a:ef:46:ab:d0:f6:54:6e:70:45:ce:49:40:fe:1b:e0:f9:3c:
5a:4f:41:af:b0:d3:35:63:06:90:10:41:dc:11:23:39:ad:30:
03:10:ba:84:41:fe:21:7c:a7:d8:d2:b4:9f:0c:00:f8:e4:59:
31:e4:64:31:30:5b:0f:46:39:6d:d1:08:91:d2:e5:62:4d:94:
af:c3:9f:ab:5b:88:e2:63:ff:01:c7:39:02:73:56:88:8e:c4:
6b:9e:60:52:41:21:d8:f1:f0:89:95:49:aa:78:bb:c9:d9:5f:
82:e9:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client