Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft (raw, json)
Hash identifier: ddoGyrTwOT3W085SxE8XkrqXnV7rUuybsdea+F6uGBo=
Subject key identifier: 29:51:8A:77:51:D7:21:04:DC:9D:66:EB:54:91:3E:A9:6D:14:2C:51
Authority key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
Certificate issuer: /CN=590bbeab48842a41afac4921d1357838b6fe6c87
Certificate serial: 019D37C00B3D9D706648D63FA0098FD956AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
Manifest number: 0184
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 2fY4hZsSdTh_WzyCJONWuTPYXgI.roa (hash: jMpz0IEZreqrZP5N9+pawfm7cQg+jdhrHzZuUi3cLOw=)
2: WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl (hash: oyDDdacpE8RLpVsdr7g101J5W9JwLr0Ywnoc0YLM2R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0b:3d:9d:70:66:48:d6:3f:a0:09:8f:d9:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590bbeab48842a41afac4921d1357838b6fe6c87
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=29518a7751d72104dc9d66eb54913ea96d142c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:33:71:19:2a:72:ea:49:a1:06:e9:25:4e:
ee:91:fb:64:ba:43:25:5b:13:b7:4a:e3:53:0e:5a:
1a:7c:88:ff:53:fd:93:bb:bf:2b:df:48:45:19:77:
d5:82:a2:79:68:49:24:31:33:3c:b9:56:2c:a2:7d:
55:20:10:48:40:c8:5c:28:b1:31:32:5c:eb:34:61:
60:75:d2:10:c0:f3:74:49:76:4a:dd:4b:bd:0b:ad:
64:2b:e2:f3:f5:a9:62:d6:2d:ba:6d:10:ba:6d:4b:
77:6d:f6:53:e7:10:c9:c8:51:c6:42:d0:18:74:e6:
41:b3:db:7a:04:7e:8c:5e:dd:33:fa:5a:8c:3e:b0:
3a:73:c0:48:83:1d:8f:dd:83:5c:68:c1:ea:c5:2e:
24:e6:e8:03:43:df:01:2d:fb:e3:dd:e7:6c:96:3e:
35:7e:9d:9e:c7:7f:28:9d:fb:bd:58:22:bd:b3:0b:
29:83:6a:71:11:6c:88:32:18:2a:ee:c1:36:ac:dd:
56:62:1f:9f:2b:11:04:4c:30:eb:ba:1c:e2:83:03:
1a:7d:85:85:45:50:87:05:43:e9:42:6a:4b:4b:b5:
dc:c8:56:1f:3c:16:80:79:0c:60:f6:fc:a7:85:2c:
fd:fd:21:c2:65:dd:ae:c2:41:f4:28:a8:91:80:dc:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:8A:77:51:D7:21:04:DC:9D:66:EB:54:91:3E:A9:6D:14:2C:51
X509v3 Authority Key Identifier:
keyid:59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0a:52:32:e2:9b:62:1a:2f:63:27:a7:06:28:6d:28:98:cc:
31:62:d0:ee:04:16:16:47:f4:ee:9a:f7:bc:71:27:55:71:57:
79:5c:94:e6:1d:a1:95:84:90:6c:26:a1:c7:8e:c4:cd:1a:3e:
ab:23:c2:af:4c:ee:14:4d:60:69:12:37:df:76:fa:0d:c5:56:
db:26:4a:d8:09:04:93:bc:28:db:8a:69:d8:fb:f1:80:98:31:
10:b9:7a:30:9b:77:d1:a1:eb:31:66:27:e8:d2:d4:89:35:04:
5b:60:89:e1:0a:21:61:c9:2c:d1:ed:d1:1a:82:9f:0c:bf:19:
f5:98:15:bf:92:bb:dd:ae:4c:0a:35:06:a3:63:1e:14:83:a0:
f6:9d:7d:97:e9:f1:75:7c:79:b9:6f:0e:e0:20:35:e2:84:6e:
5e:2d:43:1a:4c:ec:ca:32:93:6f:b4:29:65:33:94:08:19:c8:
68:b3:06:da:03:ff:ee:19:bc:96:51:78:bd:bf:9b:95:f1:f1:
b2:8b:e9:60:06:5e:7f:c8:44:98:0c:98:63:f3:c0:22:16:c9:
2c:15:98:3a:75:2e:5a:90:6e:f5:0a:6a:1a:5c:49:29:a3:43:
38:78:0d:7f:d5:c8:b6:ad:14:f2:2c:29:35:e8:69:6d:dc:13:
a9:9d:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:06 2026 by rpki-client