Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: u64Ei9PPlSFopXrVXGUZyBBSJkJyEIw6hiiY0tZouAE=
Subject key identifier: B6:9A:8C:F4:76:DE:08:0D:D9:E6:47:00:86:88:C2:53:61:91:08:72
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 019D375224EBE1466BDC3F66C82268B6393E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:23 +0000
Manifest this update: Sun 29 Mar 2026 02:00:23 +0000
Manifest next update: Mon 30 Mar 2026 02:00:23 +0000
Files and hashes: 1: PM2xutOtApHOjMCZG4fRaGN19-A.roa (hash: cmOF+MvtNkb0EB47v73B7IdtgsKunZ1G49rR7QDbH58=)
2: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: gUEEtMLdqQdCKgX2x7q4wdAz8/LqPZMXjuXXso3/9YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:24:eb:e1:46:6b:dc:3f:66:c8:22:68:b6:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Mar 29 02:00:23 2026 GMT
Not After : Mar 30 02:00:23 2026 GMT
Subject: CN=b69a8cf476de080dd9e647008688c25361910872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:e5:dc:a0:9e:8d:a9:45:30:0a:cb:4a:c1:
63:75:66:95:9b:1a:61:c6:e7:86:5e:a9:07:5d:7a:
78:33:fb:5e:46:d9:97:7f:e6:db:c2:fe:62:69:b0:
e1:ec:ad:29:c6:75:3b:eb:11:c8:c1:80:70:f8:77:
e7:d6:1f:ad:27:84:af:dc:9e:5b:69:7d:3b:21:92:
94:35:ab:79:c5:41:10:2c:2d:cd:d7:85:a0:f4:af:
fb:0a:fe:ae:9b:b4:c9:ba:f1:a4:0e:63:e5:a5:45:
82:59:52:87:0c:f5:92:e6:ab:c7:f3:72:ad:03:c4:
09:ba:9e:75:27:56:9f:86:6e:57:1e:ae:a7:57:04:
1e:b4:70:94:b8:23:cd:bc:00:69:92:61:8e:60:df:
69:23:4b:ec:3e:c2:e1:ec:a8:59:5e:7c:74:d9:d4:
27:86:85:6f:b1:0d:84:8d:11:b5:f7:bd:0a:34:98:
1f:b4:9a:dd:41:da:0f:5c:54:f4:96:7e:79:cd:1f:
a3:2b:f2:ed:b5:19:25:44:ff:90:f9:4a:fc:47:78:
71:85:bb:de:db:47:17:54:85:d7:cc:62:ee:89:c6:
9a:0b:65:a6:e5:c6:ef:07:7e:08:63:db:58:51:9a:
a0:37:0b:4e:a4:72:55:82:02:63:13:77:c8:93:72:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:8C:F4:76:DE:08:0D:D9:E6:47:00:86:88:C2:53:61:91:08:72
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3d:db:d2:56:43:81:d0:6c:57:39:1b:29:57:ea:df:6e:68:
bc:ef:a7:c7:1d:7a:7f:63:cf:b6:be:e6:5b:27:cd:97:e0:50:
0a:e1:ff:25:c0:63:3d:92:73:df:bb:f4:54:03:d6:f2:b4:50:
2f:a1:86:49:b7:91:04:b2:5b:ec:b9:49:44:60:fd:94:bb:a9:
82:95:43:2f:f4:42:db:a3:61:4b:ca:f8:75:34:57:17:90:70:
7a:73:ef:c9:2e:66:09:36:cd:1d:2e:7b:bf:41:6d:a2:ca:da:
b6:83:cb:0b:ab:7c:b2:25:c8:31:36:1b:4f:6e:7c:a8:7e:5c:
d2:d0:33:02:11:10:6b:db:6d:b6:50:d2:91:92:bc:f2:5f:fb:
5c:18:d0:9b:6d:40:7f:37:34:2c:44:3c:c2:0e:2a:9c:41:3e:
21:c0:83:5b:f5:a7:a8:e3:83:8a:fa:93:93:03:a0:82:2b:b1:
8c:42:c4:41:ea:3b:14:e4:89:ee:ce:56:f0:1a:75:f0:c6:91:
3b:8f:60:d5:29:cf:24:32:7c:74:76:9e:8d:0b:f9:57:78:8d:
32:83:6f:9a:de:3c:89:23:2d:e1:ac:44:da:02:dc:25:f2:f6:
e3:0e:c2:3f:5a:5f:a7:f1:21:c0:1e:8a:e9:f0:4d:80:16:5d:
b0:57:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:57 2026 by rpki-client