Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: ltCGvxo9dLAkHb3glSAC8TEA7VN9qmtlOlYUDKoB6c4=
Subject key identifier: 40:07:7D:1E:B4:E3:23:82:CA:D3:62:51:E4:A4:68:8B:3A:57:C4:73
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 019D371BC0F05CD882BCA04A21A51A0D6E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 15D0
Signing time: Sun 29 Mar 2026 01:00:58 +0000
Manifest this update: Sun 29 Mar 2026 01:00:58 +0000
Manifest next update: Mon 30 Mar 2026 01:00:58 +0000
Files and hashes: 1: KPL6HnKyx2luB1t4vC0aqcZr0wg.roa (hash: M92XreNchoU/EBvexvOOBUg8UdW9cGPr/5RO0h4uYb8=)
2: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: sCK/BbhojuKTP5ncnIAncyZ+e1M+lyaJ3/oS3f4uwnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c0:f0:5c:d8:82:bc:a0:4a:21:a5:1a:0d:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Mar 29 01:00:58 2026 GMT
Not After : Mar 30 01:00:58 2026 GMT
Subject: CN=40077d1eb4e32382cad36251e4a4688b3a57c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:da:c1:aa:13:74:0e:54:fc:71:3b:d0:ff:
21:fa:72:7c:4a:14:4e:58:68:84:32:b3:1b:7d:d8:
33:7e:d6:c8:f5:92:c6:7f:d7:69:25:bb:19:8e:84:
3f:2d:ae:88:03:c6:ef:d3:3f:19:96:b3:84:d8:3d:
36:e6:d3:d9:28:6d:d2:24:f2:b0:3c:4e:aa:98:a3:
d0:95:74:90:2b:80:13:03:56:30:1a:93:13:5f:b7:
18:6d:82:7b:82:14:f5:65:33:50:10:97:99:d0:99:
70:91:1b:40:55:5d:b4:4c:0d:e8:74:65:2b:34:17:
16:a6:90:6f:b9:de:f5:b6:de:36:59:a3:bb:02:e4:
49:98:23:4a:ea:70:7a:3f:db:35:6d:2c:8f:b6:85:
32:3a:cb:35:70:e5:a6:c4:54:32:c6:34:ec:a2:66:
6c:eb:4f:e1:c0:cb:8a:d3:24:9c:7b:b4:11:b7:8a:
09:cd:f9:04:5f:74:60:34:52:e4:c7:18:1b:35:fc:
f0:bf:24:c0:c1:16:f5:d7:f1:f3:47:8e:af:88:a8:
2c:e1:6e:f2:30:15:ed:6b:dc:6a:0a:5b:e6:e4:81:
4b:bd:d0:d0:28:3b:b0:9f:28:f9:95:30:63:88:39:
59:5e:b1:19:5b:c7:3a:0d:7c:57:d8:d1:f1:aa:47:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:7D:1E:B4:E3:23:82:CA:D3:62:51:E4:A4:68:8B:3A:57:C4:73
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8a:3b:5f:e7:51:5c:28:0a:d3:27:f5:cf:11:1b:4a:9c:03:
38:31:35:db:b5:f4:78:04:24:18:6f:c7:2f:c7:21:16:a5:8e:
6d:0d:e6:9d:1d:e5:2e:76:81:bc:52:d9:45:60:fc:79:42:60:
7f:f4:9f:be:2b:f6:86:eb:86:c7:d7:5e:6d:bb:97:f7:5e:01:
4d:8b:e0:0e:06:b4:78:7c:9b:e0:b2:e1:5e:ae:d4:0f:4e:18:
5a:0f:cc:f0:63:d1:fc:17:47:ca:77:f0:f2:63:e8:a5:0d:0e:
37:c6:7d:df:7e:8d:6a:e4:9f:63:72:bf:7b:17:ea:2f:4d:91:
ae:bd:a5:81:5b:45:10:b1:4e:b0:56:b7:85:53:26:f4:e2:f7:
a4:73:4e:99:b6:82:30:20:9b:f7:81:6c:8a:a4:33:cf:fd:7c:
ef:f0:da:76:1c:2f:d3:32:b2:e7:ca:fb:3a:aa:61:67:40:b4:
93:0d:8a:79:22:22:9b:aa:1d:71:da:50:c0:f7:a5:d1:57:c8:
72:0f:f2:46:79:87:11:d9:7a:26:d2:d3:6e:c2:62:12:3e:9b:
7f:96:e7:48:cc:56:08:ca:17:34:4d:11:3e:2b:00:36:56:b7:
ae:45:06:22:55:70:84:f1:17:9d:a2:ed:89:4b:02:6f:94:61:
01:b6:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client