Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
File: W3Vj2-xwud00kXPXp3mNRDSg08Y.mft (raw, json)
Hash identifier: +Mwn/48QKxtFVHwBba3ky5GlZHFq7R1d4uUp9N8O6Yc=
Subject key identifier: EC:F8:EC:18:EF:1F:9A:DF:D6:D6:86:36:4C:67:12:FC:07:39:98:6D
Authority key identifier: 5B:75:63:DB:EC:70:B9:DD:34:91:73:D7:A7:79:8D:44:34:A0:D3:C6
Certificate issuer: /CN=5b7563dbec70b9dd349173d7a7798d4434a0d3c6
Certificate serial: 019D3941837EC178BD5CBF2AA54ECC5A5DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
Manifest number: 02E1
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: W3Vj2-xwud00kXPXp3mNRDSg08Y.crl (hash: 6pTgWgPN0Cn34DoDu9nK3rS7/5DyrfCt2bBlkV1+j1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:83:7e:c1:78:bd:5c:bf:2a:a5:4e:cc:5a:5d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7563dbec70b9dd349173d7a7798d4434a0d3c6
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=ecf8ec18ef1f9adfd6d686364c6712fc0739986d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:67:57:c2:de:a8:07:22:5b:b5:86:c6:3f:
7a:6b:a6:2a:7f:25:82:2c:2a:23:63:80:e9:24:33:
d1:4e:5d:d3:de:7a:5e:12:e8:af:93:1d:0e:71:7d:
15:a2:f5:3d:56:ff:35:ec:1f:5c:ef:db:3d:7e:6f:
a4:86:c8:4b:9c:b3:53:5a:35:1b:90:cb:94:43:e1:
46:5f:e1:27:56:4d:f6:1b:4a:62:9a:d9:b3:a6:cc:
ef:52:cd:cf:75:96:2e:39:d8:fe:f6:47:c1:eb:25:
54:1e:6d:fa:68:ff:3c:54:40:6a:d2:85:28:3c:ef:
01:12:52:6a:59:9e:e8:32:91:d7:f7:2f:70:1e:3b:
1f:63:fe:d6:37:a0:a9:f0:df:32:f2:9f:1a:9e:ef:
5a:f4:bf:52:f5:90:ba:2e:9f:9b:7c:6b:8a:8d:a6:
47:31:a1:63:af:d0:d3:89:06:03:e6:6b:6f:d8:14:
42:81:70:96:3c:d6:3b:c4:59:8b:ac:fb:73:c1:a7:
8f:55:b9:e8:6d:2c:59:ce:14:39:39:29:ef:84:f0:
7e:60:dc:8e:8a:b7:cc:63:52:5d:1f:f8:18:95:0b:
41:4b:df:3d:29:ec:2e:09:46:8b:12:96:de:44:5f:
69:86:2e:ee:22:1f:6f:db:e3:7a:8d:9a:bd:19:ed:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:EC:18:EF:1F:9A:DF:D6:D6:86:36:4C:67:12:FC:07:39:98:6D
X509v3 Authority Key Identifier:
keyid:5B:75:63:DB:EC:70:B9:DD:34:91:73:D7:A7:79:8D:44:34:A0:D3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:1e:25:ba:5f:83:08:fa:aa:f0:2d:a0:de:c2:80:61:96:
15:d2:1a:35:09:e7:bc:ae:67:e0:a7:0b:c5:3e:1d:b0:ae:74:
62:41:7f:49:a1:02:17:ae:be:a7:4f:6e:2e:ab:a8:aa:b0:cd:
18:60:26:c5:b2:f4:5b:0d:8d:7a:5a:0a:ac:2a:0b:70:90:7a:
1a:c6:cb:a5:3a:1b:83:45:8c:d2:44:6b:f8:b3:be:db:dc:dc:
76:bd:79:7f:36:0d:fd:e9:ef:f9:01:57:79:d5:b8:7d:02:ae:
8b:c8:8c:25:0a:23:36:67:f0:68:68:10:5d:f7:5e:80:b1:78:
e7:72:ea:9b:e8:45:8a:46:7d:1a:c9:a2:6e:bb:ce:00:4d:1e:
57:b0:cd:33:1d:60:a0:78:b1:e1:03:21:85:f0:59:98:25:eb:
97:dc:86:8f:0e:bd:17:e3:14:c9:e3:af:13:10:7a:6c:d5:3a:
5c:5d:3a:89:0d:a4:73:c2:6c:4d:36:a1:9b:50:c7:6d:c5:18:
9c:b6:1d:19:c1:41:7c:0b:ec:6b:07:09:db:db:1f:50:df:c7:
b0:8a:d6:5c:1a:17:41:4f:65:ef:58:6c:a1:f4:ef:87:55:34:
c7:03:6d:cb:e0:e7:30:70:37:97:72:55:61:2a:1d:dc:be:86:
cb:fc:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:00 2026 by rpki-client