Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File: W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier: NzLES7I6AS4jeyAncGpmbQYztnOa8SjxKh68fmdFkQg=
Subject key identifier: E7:9B:43:9B:33:9C:F2:EF:05:04:50:5B:FE:E8:9D:8A:6B:5F:FB:70
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 019D3909BA6DAD8B01E7F01DD3985D95DAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number: 0CCC
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: 5xtr+O7mhfRPN0YknPuR1qgDRwxWDMa/iBbuGfvKr04=)
2: WOuvyP9Ru77CyyJtiwhA1HRONs4.roa (hash: DGYz+wXrRKUUvRHVz1HMcW0FlBydsx065+6uwjHzCuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ba:6d:ad:8b:01:e7:f0:1d:d3:98:5d:95:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=e79b439b339cf2ef0504505bfee89d8a6b5ffb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:7a:e6:cf:47:69:a9:0c:ec:20:70:54:6d:
fc:a5:47:d6:f6:eb:cd:99:da:07:63:00:5d:01:3a:
f2:19:1c:df:13:92:1c:57:32:08:53:d9:a8:91:9e:
15:c4:bc:fb:29:30:7f:0c:13:ed:1c:b5:98:b5:d9:
a0:1c:f2:1b:38:6a:8c:13:f8:a5:b6:81:18:e9:b2:
ae:56:b9:a0:d2:d0:48:bd:33:b8:48:e4:74:b7:7a:
36:41:85:35:6b:ef:94:24:57:3a:f7:bc:e7:f2:37:
7b:7c:ea:75:29:17:86:28:a4:ae:48:92:e6:af:42:
78:e7:6e:a8:e0:93:16:75:21:15:17:65:a2:f4:da:
84:3a:09:e7:9a:92:c6:8d:df:10:07:2f:28:30:a7:
fb:f4:be:e3:d2:9c:5d:45:d0:50:ad:c6:8d:4f:15:
5a:26:6a:fc:22:50:1b:2a:39:9b:8f:80:f5:70:3b:
5a:1e:07:d7:cf:fc:68:c3:29:e8:bb:f6:91:5c:06:
49:fc:9b:05:e3:10:21:78:4d:50:4f:cf:4d:e9:b7:
fc:9d:57:1d:fe:b5:de:1b:d3:75:bd:2f:ea:06:4e:
43:f6:4d:7d:8c:27:1e:c1:6c:c7:2c:08:7c:34:91:
1a:ea:d9:e9:41:ea:d6:f2:b7:a8:1a:bd:30:01:39:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:43:9B:33:9C:F2:EF:05:04:50:5B:FE:E8:9D:8A:6B:5F:FB:70
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:49:f5:5e:6d:26:72:e8:67:b2:b8:b6:8d:23:5f:79:0f:c6:
01:5f:0c:5a:9f:0e:31:ae:6a:47:bc:ac:70:93:97:b6:53:b8:
d7:ca:fc:13:01:4a:ff:a2:16:e4:ce:2b:ea:dc:f4:d7:3c:08:
89:3e:bb:8c:96:b7:96:44:87:e3:c5:d7:4a:8e:34:f9:cd:88:
c1:1d:59:8c:15:bd:99:7e:b1:75:4a:a6:d3:7d:63:39:18:0f:
23:91:7e:35:b6:4d:b7:d5:ce:af:24:14:a8:1c:d8:f0:9c:02:
bb:7c:f0:f1:b4:0a:b1:b7:6d:c7:5e:53:17:a3:d0:34:4e:9a:
5a:a9:db:f7:50:1d:36:96:71:24:8b:af:53:ee:97:c1:8c:87:
d3:0a:5a:73:13:bb:d8:df:c8:a2:63:92:2c:61:50:ac:fd:99:
0a:e1:db:cf:b0:0a:6b:bc:7e:e9:79:ac:1d:d2:f4:20:8f:1a:
37:e3:12:44:6e:7f:95:e3:41:91:17:4c:88:e7:30:89:cc:8b:
af:af:7a:93:68:ac:41:c5:c0:f8:9a:fa:72:37:5a:5f:de:17:
03:c0:56:69:14:f3:b9:ed:41:bc:93:e1:92:72:78:76:bf:37:
53:6e:a7:78:d2:a1:9e:6e:db:76:4e:00:26:7e:f2:f4:c9:bc:
d2:6c:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:10 2026 by rpki-client