Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: AxGiBF1CZBGU8XNr/h5DjjbjcgBfaKTR30ntEv67kao=
Subject key identifier: 25:30:EB:06:9E:1C:CF:D8:C0:5D:75:7C:8F:57:81:E0:BC:5F:F0:4B
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019D38D300CD06CEF9D2DB996B5C8079F44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 159F
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: +wygjqX/mtHpwfI/+hMsivSX+BENMdwUDEj0zmUWsDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:00:cd:06:ce:f9:d2:db:99:6b:5c:80:79:f4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=2530eb069e1ccfd8c05d757c8f5781e0bc5ff04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:6d:20:92:5f:c2:09:9c:3f:1e:42:8b:da:
ef:99:59:9b:c2:b4:a5:c3:50:bc:15:ed:c2:b4:16:
04:f2:2b:0f:2e:43:a1:76:40:f4:ac:f7:f1:cb:21:
cd:db:c8:46:8c:97:9a:18:15:ad:33:c7:3d:e0:a9:
03:4f:15:c3:ee:25:09:7e:ff:b2:64:af:3b:82:c0:
92:bb:c1:ed:b7:c4:57:f2:33:da:3a:aa:e7:df:14:
5e:cc:48:73:6a:ea:e0:6d:be:22:dc:9a:ff:59:50:
0b:20:92:4f:8d:f4:f1:7c:59:3f:db:93:e9:81:74:
80:19:f3:a5:e7:c4:1d:f8:d5:06:bc:f5:bd:71:3c:
21:42:aa:49:7c:b1:49:fd:bd:ba:db:99:54:3b:30:
ac:ce:f8:69:b2:49:2f:07:92:db:3a:87:c5:9f:ac:
7d:8f:3c:e9:64:55:51:ff:10:f2:6d:d2:c4:46:cc:
2b:bf:1d:d5:c3:0d:71:02:b1:1f:12:a5:11:60:68:
e7:f8:e5:e0:fa:f0:62:25:91:05:5f:4d:f8:ef:d0:
d9:93:72:e7:f0:5b:7a:66:10:b7:cb:48:2b:22:fa:
97:64:7b:62:ee:91:3d:92:f7:5f:48:ae:b5:2f:d7:
80:95:05:ba:ec:b0:32:49:3c:0e:ec:1c:a9:30:08:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:EB:06:9E:1C:CF:D8:C0:5D:75:7C:8F:57:81:E0:BC:5F:F0:4B
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:ce:1f:08:d8:76:5a:83:9a:9a:de:43:32:bb:07:5e:52:
f7:8a:84:ef:8a:f0:d1:8a:d6:44:f1:1c:11:d0:d6:bc:f3:eb:
8d:64:d4:a0:2e:55:66:b8:f9:b5:96:25:63:fc:15:b6:c8:48:
6b:53:6e:c0:c7:84:0b:e4:c1:a4:8d:2b:00:c7:cd:23:23:1f:
54:86:0e:db:26:0e:02:da:aa:c1:ef:a2:68:94:7d:13:bd:e4:
ee:86:6f:bb:b5:e6:ac:c8:6d:32:4d:7a:a4:49:14:fb:f9:98:
4b:a7:91:1c:8f:1c:ca:6b:a1:aa:5e:f0:89:10:b3:c3:73:89:
9b:c3:c4:a3:fe:3a:c6:92:fc:e9:21:b2:96:5f:9b:af:08:ab:
9f:91:b3:47:8e:ed:24:2e:ce:f6:bf:0c:5c:86:22:ca:81:e5:
c4:2c:35:48:94:03:2d:01:06:7d:ee:02:07:88:58:6d:c5:0d:
e1:76:71:45:22:a9:d8:64:fb:5d:f7:34:34:41:48:75:3e:1d:
1e:9f:61:e8:8c:fc:46:35:bd:ac:c1:b2:2d:6e:56:73:4c:27:
b1:d4:a5:78:17:62:5b:45:60:bd:ba:84:ec:79:a9:9d:27:81:
a7:e3:d0:7a:74:e9:77:8c:ff:b2:a5:4d:ff:ef:ea:b4:8a:8a:
bc:b5:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:31 2026 by rpki-client