Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: Mdb4PxESogOyA7eNw22oOspMQdWkuOW9xjvj0lKG8uI=
Subject key identifier: 78:56:CC:34:20:66:E7:D7:FC:DE:3C:91:0E:23:49:A0:7A:38:88:AC
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 019D386578E930E009F4B18EAACE6793D8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 04DB
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: m2K1Wdt669MTqmadjEw57IXV8zJnBZ2wYe3h+6g0jiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:78:e9:30:e0:09:f4:b1:8e:aa:ce:67:93:d8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=7856cc342066e7d7fcde3c910e2349a07a3888ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:2d:94:dd:15:69:4e:2b:3b:de:ea:26:32:
c4:10:55:a1:4d:ae:0d:40:fb:48:0b:51:07:bd:0d:
29:50:0e:9b:60:cf:3e:4d:58:2b:d1:fa:b3:63:11:
20:4c:df:a6:c0:d9:73:34:da:5f:05:62:fb:e3:44:
8e:fb:19:5c:32:1e:a6:85:53:fc:37:f5:12:07:13:
06:37:88:0d:1b:fe:8e:35:25:22:92:29:48:d0:2a:
c6:d5:81:51:b1:02:3a:06:64:a2:cc:0f:80:a5:04:
bb:bf:85:73:40:67:51:1b:14:68:e7:77:97:12:05:
13:69:91:d6:64:86:18:88:c8:da:16:db:52:cb:82:
64:66:8d:7e:46:5f:d0:24:88:8e:bf:18:eb:61:7a:
9e:dc:51:dc:ee:c8:ca:7e:a7:78:d5:e8:e9:c7:24:
a2:a0:4f:a8:9e:75:b9:af:9e:7f:91:71:6e:c0:03:
6c:b8:9a:8d:1d:6f:be:68:d8:9c:3c:ee:fa:8b:7d:
c7:0d:21:cf:71:93:a7:56:a5:a2:5f:b9:bd:47:08:
d9:34:9a:02:98:ee:03:cb:31:2f:76:53:86:2b:90:
9c:bd:8c:33:6b:c6:84:3a:98:82:2c:98:18:b4:33:
d8:0f:e2:16:85:d8:4c:e5:78:ee:bb:4e:32:00:4a:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:CC:34:20:66:E7:D7:FC:DE:3C:91:0E:23:49:A0:7A:38:88:AC
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:0c:4f:2e:0d:91:ba:52:89:49:a0:a9:3d:69:d5:a0:3b:
20:86:3c:02:fa:96:85:1c:a3:5c:a5:14:f4:7c:4f:d3:ee:55:
ae:12:8c:e4:e2:e1:66:7e:8c:39:cf:5e:05:01:ad:b6:53:1b:
6c:5d:06:30:fd:6c:10:ef:31:4e:f4:41:45:95:28:a3:e2:ba:
c6:27:dc:3b:7b:e0:ae:9d:f2:3c:8c:aa:e6:bc:11:bf:f7:6d:
66:09:85:a1:a6:96:21:be:38:86:96:bb:ee:87:ba:0b:bd:13:
6c:49:8d:86:8f:1f:37:68:17:c7:3c:c7:6b:26:7e:b1:d6:a6:
20:76:c2:40:73:6b:40:7d:85:4d:c3:05:f6:8e:4d:c2:cd:db:
40:87:0f:e4:cb:21:1e:f6:d8:97:0d:d7:dd:d3:2b:79:c1:4a:
41:e2:f3:3b:a3:a3:40:7f:c5:40:24:2e:3e:72:2e:2d:41:7a:
06:a7:86:06:d3:7e:9d:68:6c:e6:74:1c:36:f4:a6:5d:47:3a:
ef:ba:0f:79:3f:51:97:2f:f1:12:2a:97:e7:90:8a:e4:ff:6b:
aa:79:32:4e:b6:1c:c9:72:db:d3:87:59:23:55:11:f9:b3:7d:
60:c6:a3:16:bd:a7:9a:b8:bc:fe:eb:1e:61:14:44:01:31:89:
f2:cf:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:11 2026 by rpki-client