Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: qoEmzfxqNXBj5tGEdxkgJ5KeTZc7aHM6VpewXdXvGWo=
Subject key identifier: 3F:62:DC:D7:9A:3B:2E:BB:28:B3:D4:F8:30:F3:3F:78:67:73:9B:36
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 019D389C14FED3CB0B7278C977AECF4310C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 04A1
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: g4LySpJn+1RaTKLlpUBxDLbnMIpENGNsIFKCZFClBlU=)
2: fph5gTuLwd2OWoh3SrvtX0TJ1jU.roa (hash: SKuyO2n0G10edipOcdvCUjjKqC8VGVks6CgzeewLwB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:14:fe:d3:cb:0b:72:78:c9:77:ae:cf:43:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=3f62dcd79a3b2ebb28b3d4f830f33f7867739b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:c9:0a:61:6a:80:6b:ed:4b:56:5e:36:8b:
87:ef:45:d4:48:0e:9d:ba:a7:39:61:e7:62:fb:14:
eb:b8:c3:28:27:c9:a7:54:fc:83:b2:70:55:21:b1:
65:61:09:9e:54:20:6f:77:cf:85:bc:a9:48:24:83:
01:29:e2:66:aa:22:36:1f:69:a1:75:d7:05:62:e9:
db:39:63:fa:bd:54:26:97:d9:fd:b6:d7:47:dc:b5:
fd:b9:a5:22:30:2e:fd:62:02:e5:ea:fb:28:ab:9a:
47:6a:90:dd:94:7a:0e:b2:e5:53:99:06:9e:f2:9c:
b2:9c:d7:a6:ad:06:0a:43:16:86:3e:02:5a:ea:1e:
2f:c1:f8:12:31:6c:3c:87:42:a3:09:ca:0d:ac:f5:
a4:a0:71:e8:2d:3a:be:20:d7:ee:e1:00:bc:1d:03:
de:30:0e:4b:29:6c:e1:96:ff:5a:d2:22:2f:a7:c9:
61:4c:36:2e:92:2d:cb:47:44:84:5a:8c:a0:cf:c8:
2b:29:74:93:b4:e2:ce:7f:5e:7f:82:4d:bf:57:ea:
ab:33:50:39:a1:fa:91:6c:ba:36:6b:c4:45:a8:bc:
e9:af:df:08:b5:e3:fe:7e:b2:b5:db:f1:b5:86:34:
d8:02:4d:3c:b6:62:65:82:6c:66:bd:3b:e3:b6:a0:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:DC:D7:9A:3B:2E:BB:28:B3:D4:F8:30:F3:3F:78:67:73:9B:36
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:22:56:34:f3:52:7d:89:02:42:bd:62:d0:01:a2:d9:b4:a3:
f8:31:0b:f5:2f:be:e2:c5:ee:7c:7d:dc:41:03:e3:28:b1:fe:
73:fe:f7:5f:f2:1b:f3:1e:49:1e:23:43:59:f7:13:07:17:84:
7c:1e:4d:c2:35:ea:c6:41:cb:ba:4f:52:92:01:46:58:4a:c8:
8a:82:39:2b:28:34:33:46:ac:15:23:be:b4:b7:06:b6:ab:18:
bd:5f:4f:1f:6c:d2:82:5e:24:89:5a:42:1d:5b:f1:90:bb:0e:
0d:49:42:37:50:80:fc:88:b6:bc:61:97:3b:30:f1:d4:ae:86:
bf:6f:2f:bd:3c:a3:47:f7:75:15:a9:a1:87:6e:1d:50:82:ba:
ed:5e:7f:4e:f2:f2:02:5e:5c:18:7e:00:4e:38:7f:21:7d:59:
a0:a0:0d:61:d8:b7:b5:c7:c4:6c:66:e5:c4:ca:ff:fa:5b:89:
c7:b9:df:b3:a2:dc:45:6f:fd:05:08:33:b8:c5:96:62:cc:c4:
32:c0:cb:97:5f:dc:72:cb:1b:7b:cf:b4:f1:27:f2:31:85:c6:
43:a5:55:94:46:58:68:98:92:f9:9f:64:3c:57:65:d7:49:bf:
17:68:aa:a5:8b:16:5f:ed:42:0c:e1:82:c6:08:f0:f8:e8:12:
60:02:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:12 2026 by rpki-client