Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: r/hdBQTILuZllGXMYLkS1lqyrHnkujSVjJHiR+/4lSw=
Subject key identifier: 81:24:D0:CD:0E:C4:40:A5:29:61:57:EF:3A:F5:59:44:9A:56:B5:67
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 019D397777B683693148E7F9BF02AA3325B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 12:00:23 +0000
Manifest this update: Sun 29 Mar 2026 12:00:23 +0000
Manifest next update: Mon 30 Mar 2026 12:00:23 +0000
Files and hashes: 1: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: WvifsJZ1zqYgscUqKyYewf77pbOuhde6/iRCryKp1tk=)
2: XWKWcGwWuxK442AqUwQOJoI0Riw.roa (hash: lPCDTJoNAlTYjYOQxRc8IFp9k2/Nouu3lyu3633P8Ys=)
3: vaTMXsKj9s2mYu4jK85sAAqXJgk.roa (hash: 9Sx8ua7dYYmRjEMlZOB1LM5xRgfZw4Tr41DAQH+beRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:77:b6:83:69:31:48:e7:f9:bf:02:aa:33:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Mar 29 12:00:23 2026 GMT
Not After : Mar 30 12:00:23 2026 GMT
Subject: CN=8124d0cd0ec440a5296157ef3af559449a56b567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:96:5b:a4:e4:9d:43:36:7a:90:00:d3:8d:
6c:46:31:d6:37:d1:00:c0:83:62:95:e4:1a:f6:d9:
47:23:14:5b:28:bf:df:2b:e1:89:db:a3:92:e8:7f:
2f:3d:e6:29:ed:b6:45:be:a4:9b:f6:6d:31:61:f3:
99:20:09:04:8c:58:71:80:29:b6:c2:4a:85:5e:26:
af:24:c2:e4:8f:2a:54:b9:97:77:9e:c6:8b:02:34:
03:3c:2e:89:0f:84:4c:89:02:b1:4a:0f:20:ed:9c:
7b:89:4a:ee:6b:5b:c3:4a:03:7b:e5:7b:74:4f:37:
44:09:c1:c7:f8:35:93:55:e1:24:a2:98:db:20:5d:
d1:80:ac:c6:dd:a4:fa:60:46:ca:bc:0d:8e:f5:69:
51:f2:e7:18:b7:f3:cb:30:5e:16:31:13:be:8d:0e:
e7:1a:ac:e3:95:a6:cb:d6:1e:f9:fe:a7:bd:34:e9:
a1:8b:a9:89:87:07:ce:1f:93:e1:44:38:94:a9:3a:
64:54:b8:d3:e3:2a:2f:f4:bc:90:13:7f:83:86:0a:
0f:49:fc:c9:58:87:e6:b6:9d:a6:16:01:05:86:88:
9d:fa:68:42:0d:71:08:2f:18:f3:14:e2:1e:95:eb:
dc:ed:dd:79:00:00:30:ba:ff:34:8d:70:53:a5:e0:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:D0:CD:0E:C4:40:A5:29:61:57:EF:3A:F5:59:44:9A:56:B5:67
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:42:8d:2a:f3:3b:a8:68:a6:90:46:a9:7b:78:11:6c:83:2f:
0d:f8:67:6f:aa:ac:ad:4f:3d:ce:93:0e:48:38:19:96:2f:45:
e4:33:ee:43:1d:35:78:55:b1:8d:b3:bf:de:9b:2f:b8:9d:1b:
2d:3a:2b:6b:bf:4d:57:0a:db:86:20:37:8f:1f:9d:75:08:14:
2b:f1:20:bf:50:95:f3:16:1e:16:8f:f4:e2:f5:56:ed:f9:3b:
66:6f:cd:1d:44:0e:30:0e:d0:03:56:cd:87:cf:09:62:b8:70:
0d:de:8a:f1:62:71:6b:18:bd:f5:39:4d:4c:a0:3b:5c:90:86:
3d:19:43:cc:a8:9f:b9:1d:81:39:13:1a:35:31:ca:7f:d2:9f:
66:d7:55:8d:b2:ce:c8:ac:46:92:e3:c8:9c:5b:da:47:ba:f4:
8c:55:f4:40:4a:91:e0:10:cc:a9:d6:0c:af:65:bf:83:00:d2:
17:e2:1d:25:ea:78:df:29:fc:91:e6:5e:fc:48:a3:f4:f2:0b:
d7:1a:02:ae:78:90:e1:5e:83:8a:b8:c2:da:cc:6e:d0:e2:a4:
7c:a2:51:b4:5b:de:ac:27:b4:da:f5:23:5c:f6:0d:54:9c:a5:
5d:d7:1f:8d:19:2c:4c:fb:4c:a6:ea:54:87:9a:42:c7:0e:bb:
95:60:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:16 2026 by rpki-client