Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json)
Hash identifier: 7lIZerJjYUtddBwczyMA92PGI0ESN1bXn0wDASfdVsE=
Subject key identifier: 5E:58:9C:F1:EB:47:5C:B1:2C:21:0B:22:12:A0:A6:4F:47:7D:36:0E
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 019D420D96E9D2B85BD187632623CEAC1444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
Manifest number: 043A
Signing time: Tue 31 Mar 2026 04:01:19 +0000
Manifest this update: Tue 31 Mar 2026 04:01:19 +0000
Manifest next update: Wed 01 Apr 2026 04:01:19 +0000
Files and hashes: 1: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: 4IYtcDTh2xmdtrbL7uxpkruG4B1z5NwNnG8WOtzoM9M=)
2: cml9YHU_ypax2ib4maFPoihbh6U.roa (hash: Y6I1JN/k3woFsSnAPG7GyjDBJmIyx7fHnaeAcHVvkC4=)
3: vBMtviwzR2kVgzmNNYo_Vafp9LM.roa (hash: lNCNgMYzNrricpFi/DIzZBh14EOt1NtDvwmLx+z5MvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:0d:96:e9:d2:b8:5b:d1:87:63:26:23:ce:ac:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Mar 31 04:01:19 2026 GMT
Not After : Apr 1 04:01:19 2026 GMT
Subject: CN=5e589cf1eb475cb12c210b2212a0a64f477d360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:eb:83:b4:18:67:3e:ec:4e:35:42:ba:fa:
f3:07:2d:2e:52:3e:39:80:1a:47:af:aa:9f:dd:a4:
f5:64:9b:bc:95:c5:bc:43:fa:92:92:fd:76:62:59:
07:c5:3d:1e:2e:0c:e6:1a:15:cb:4f:d4:fe:53:66:
35:28:ac:bb:03:c3:54:20:ee:3a:77:0e:cc:f4:40:
af:9d:1a:a6:ca:59:a7:50:c4:a9:d0:e9:7e:fa:3b:
0f:9d:f1:b3:ae:4e:58:7d:de:2f:70:fe:9d:c7:4d:
17:f7:7f:82:66:71:ef:e4:38:45:d7:0c:1d:f0:c9:
8a:73:eb:a9:5c:90:28:5b:2e:2a:53:43:44:a4:be:
30:1b:f7:bf:50:1b:cf:80:79:a2:f0:5f:57:04:2d:
8b:d5:65:72:15:36:00:19:55:51:0d:c2:9c:0b:b7:
71:4b:fc:3f:97:c3:10:c5:6e:b4:e9:cb:21:e5:30:
da:36:b8:d4:ff:1d:77:4e:19:db:81:ee:72:ae:fc:
79:78:b3:4e:3c:52:ab:90:75:14:2f:db:1b:72:17:
64:15:63:1d:9f:c8:b9:d7:2d:13:d7:ee:7a:4c:b8:
74:e3:bb:36:b0:a1:43:62:ae:c4:f3:90:df:ee:0e:
ce:dd:d7:ba:eb:40:9b:ef:6e:be:47:aa:d6:46:00:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:9C:F1:EB:47:5C:B1:2C:21:0B:22:12:A0:A6:4F:47:7D:36:0E
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:af:f1:3a:2e:b6:12:ae:56:dc:89:71:bf:d5:97:51:f4:
82:4f:ce:57:1d:40:95:ae:6d:9c:66:ff:29:ea:9d:fd:00:f4:
19:ae:e2:47:b2:ce:5e:0f:da:96:b5:62:3a:13:b0:a9:69:d6:
f4:d6:43:c5:1d:28:a3:27:a2:d6:65:34:af:aa:c0:c1:4e:6f:
20:37:a8:b8:42:b6:87:37:6a:35:11:eb:55:91:99:9d:d2:bb:
48:f0:59:05:0f:98:1d:bc:26:6a:84:59:4f:5f:b1:da:9a:86:
45:dd:af:17:e7:ab:fb:61:1a:d8:3c:64:bf:af:b8:cb:47:9c:
6f:60:e6:1a:30:6e:f8:04:ab:10:36:48:44:81:71:5e:a9:40:
67:c2:0c:9b:77:12:01:1b:06:4b:48:ac:78:a8:16:e2:ec:b6:
4a:f3:e5:c7:ef:a1:95:2b:fa:b1:c0:c8:d8:47:53:b6:96:2d:
57:ec:dc:c2:a8:5c:da:33:50:d6:27:ec:88:4b:98:cf:ed:24:
b2:23:1f:8b:b6:4c:5e:b3:5d:67:f7:b8:93:c4:64:75:df:1f:
40:2c:24:eb:f1:f0:79:b9:45:ea:63:45:ff:3e:5a:69:c3:99:
be:a5:fe:6f:31:5c:21:99:34:a6:44:c0:35:b2:c4:69:4c:7f:
88:54:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 08:06:58 2026 by rpki-client