Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
File: W2fkuRJYp4VpukUKXno0e0MR1FE.mft (raw, json)
Hash identifier: p4t8UNH8T99dPGWu7Ci+pduCMbbVLxVCgN7dLgl8VtQ=
Subject key identifier: 0D:05:34:C6:1C:9F:F6:9C:E5:02:20:3B:6F:19:27:9E:ED:7C:5E:E8
Authority key identifier: 5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
Certificate issuer: /CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Certificate serial: 01A0E7096BDB462E5EF506FCD090A9BA9290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
Manifest number: 0136
Signing time: Mon 28 Sep 2026 08:02:29 +0000
Manifest this update: Mon 28 Sep 2026 08:02:29 +0000
Manifest next update: Tue 29 Sep 2026 08:02:29 +0000
Files and hashes: 1: W2fkuRJYp4VpukUKXno0e0MR1FE.crl (hash: cQ5u53nFyFnUpvYwoH+8lcEYRuD1OD1o3mYl6bC4T4A=)
2: yBxwaW11AdzCtD2abIPzlUZyrb0.asa (hash: sgvoWb8Eg0fLOeE4h8rR/2GP62YHBrZ5DZ553gmHgZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:6b:db:46:2e:5e:f5:06:fc:d0:90:a9:ba:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Validity
Not Before: Sep 28 08:02:29 2026 GMT
Not After : Sep 29 08:02:29 2026 GMT
Subject: CN=0d0534c61c9ff69ce502203b6f19279eed7c5ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:ef:7b:fc:0c:0f:27:2c:c3:5c:3d:bb:ab:
3c:a2:a1:3b:d1:d0:4f:6f:33:c4:9a:f1:ef:49:b7:
08:6f:99:6c:4a:17:46:8f:52:28:0b:bb:4c:fb:50:
e8:4a:04:92:07:d8:3a:c3:a2:76:0b:93:0b:d1:52:
b3:0d:50:81:37:62:41:e3:dc:63:fe:b5:63:34:2d:
63:18:c6:d2:ce:23:91:8e:f4:ee:bf:67:f0:7f:7e:
46:15:b1:f2:ac:c5:18:65:20:f2:af:5b:f1:7e:17:
79:33:dc:f1:b2:4f:a1:5f:97:6a:be:71:ee:22:18:
bc:4d:4d:46:5f:d9:8a:18:6e:f8:3b:10:03:04:15:
ca:e2:70:a9:4f:a4:33:e3:0a:2d:be:ce:1e:2f:c4:
5b:3b:3a:d9:1b:67:ed:a4:6a:91:d5:22:21:99:95:
4d:43:10:c7:e7:6c:fd:b5:5c:a3:53:a9:19:d8:4c:
54:c6:6a:d3:ea:f8:ea:be:19:03:1b:a8:db:14:71:
80:b9:bd:d1:fc:70:28:c9:73:84:fc:4d:85:35:d2:
44:78:d5:97:a2:1c:7b:12:d0:15:32:96:78:34:d1:
39:93:25:1d:b9:74:b9:05:a2:1d:42:9a:07:ba:2b:
3a:23:27:fc:cd:bd:96:67:2a:e1:f8:5d:9a:14:82:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:34:C6:1C:9F:F6:9C:E5:02:20:3B:6F:19:27:9E:ED:7C:5E:E8
X509v3 Authority Key Identifier:
keyid:5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:4f:0e:e5:13:ff:83:6c:1a:2d:86:ba:a4:f9:a8:ef:46:
44:9c:6c:13:52:b5:67:93:38:83:54:e3:c4:36:9e:38:08:79:
1c:48:60:36:35:d9:df:70:d0:8c:ce:0f:9f:b5:ed:39:cb:c3:
47:c2:f7:0b:dd:e4:aa:21:e3:38:46:18:76:5c:77:fb:d4:50:
e7:82:90:41:b8:48:fb:70:8f:37:25:4e:f1:7e:1a:42:a1:0a:
39:1a:67:55:e5:9b:72:74:ec:10:3f:24:f1:c1:43:16:58:25:
43:2d:e1:fe:cc:e9:6c:fc:30:fc:27:fc:14:f2:e2:2b:c4:48:
f8:82:25:b8:3b:80:14:ac:89:57:7c:2e:36:49:bd:7e:bf:35:
58:fa:88:7a:d3:b9:9f:0b:49:59:2f:c2:93:c3:54:17:78:7b:
0e:ab:47:a7:ea:4d:9e:16:f8:67:ba:c6:ba:5b:ef:ed:a6:f5:
6f:ba:0d:21:67:ea:25:35:ae:18:1c:5c:09:a6:d5:2c:00:43:
b2:3a:a8:63:68:87:d4:a7:36:7e:2e:70:75:1e:ac:0b:fc:55:
39:8f:c2:61:5c:31:d2:98:07:6b:ea:56:35:79:d9:57:e3:75:
b1:cf:d3:e7:9d:71:ee:43:11:46:e1:1c:63:cc:54:40:24:cb:
14:36:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:46:38 2026 by rpki-client