Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: +3VItuQ887ZDd3CFnvebSNYc/jted0rucOQ6L3MtHhk=
Subject key identifier: 81:AC:03:96:98:02:18:AA:32:1A:5B:97:67:D7:77:DB:A6:4B:D9:E0
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 019D37C0C45AAF5AE0813BE0D8EA8FDB2F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: rKFmFcN1xmsEb9IjWjsLl+p8whvxDLcQXsljNFmzFd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c4:5a:af:5a:e0:81:3b:e0:d8:ea:8f:db:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=81ac0396980218aa321a5b9767d777dba64bd9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:cf:59:18:77:32:55:86:66:6f:df:ba:3c:
55:28:f0:53:e0:da:e7:08:c2:5a:e0:32:c1:38:34:
a6:70:6f:de:ef:e0:28:33:b0:79:6c:d6:bf:cf:8b:
3c:25:aa:31:98:82:72:5d:9a:ba:eb:27:c9:8b:b1:
c9:8e:d6:2a:3b:e7:f9:90:c0:5a:0f:09:93:b9:86:
bf:36:c8:26:00:8a:85:f8:7e:37:b3:bd:6a:d3:f9:
72:c9:cf:a6:8f:bb:c5:ec:b0:ea:b6:2f:e4:6b:7a:
10:d7:56:bb:d3:71:da:b1:e8:bd:0c:87:82:11:c6:
62:f9:30:2b:4e:04:45:2c:33:e9:bb:4a:87:13:ea:
8c:ba:38:e0:57:8a:c5:88:f4:54:17:5a:72:36:13:
aa:fd:c9:ee:2c:9d:41:3b:5e:cb:22:67:98:3f:e0:
b4:23:d9:8b:e4:89:c9:e6:c0:fc:70:35:a2:9f:14:
7b:b1:bb:14:36:04:ca:53:49:ab:d0:1e:a3:42:fc:
f9:cf:f0:b4:c5:8d:e5:0a:4d:56:fd:6c:0a:81:69:
f9:e0:b6:d2:04:f0:6f:5c:b7:4a:03:a8:da:79:ba:
e1:8c:c1:5c:a3:0c:ac:3b:04:82:f4:4b:20:57:09:
4b:59:4f:e7:0e:f3:4e:ed:00:38:93:12:38:72:6a:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:03:96:98:02:18:AA:32:1A:5B:97:67:D7:77:DB:A6:4B:D9:E0
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:b5:d0:b4:4b:10:3b:82:43:b8:4f:0f:3f:27:1b:4e:e8:
0f:f2:b8:e8:97:08:5b:8b:c5:17:21:5d:b9:6c:16:45:1e:fe:
e4:6f:f8:48:24:80:49:ad:53:09:ed:18:82:72:cb:a2:17:c1:
83:aa:85:d7:aa:5e:e0:b5:1c:67:9b:99:40:4f:92:de:bc:e6:
1e:07:2e:d0:08:13:90:89:42:a4:a4:f2:85:5c:37:7f:30:b7:
80:16:12:2a:c8:66:40:7d:84:bb:5f:47:9d:3b:6f:c8:93:90:
d6:5f:d7:e2:a7:64:7f:6e:ad:03:fd:44:ae:e5:eb:5b:8e:da:
fa:22:3f:d2:92:89:b6:68:dd:22:9c:64:91:38:46:27:72:25:
c5:8d:ac:8a:cc:89:ae:f9:7b:44:ca:3e:9d:88:00:c4:da:92:
c3:d1:55:c0:4b:dc:94:18:9d:f7:58:40:10:c8:ec:c9:98:cb:
ac:b3:ef:e0:4b:2e:96:43:ea:39:cf:5b:5c:bb:9e:df:32:65:
49:3e:49:5b:03:8e:fe:68:04:02:55:c6:41:53:a1:50:2d:c6:
43:67:ca:41:f5:aa:7d:4d:d1:6b:35:23:20:ae:13:0c:8e:fb:
e6:c9:49:66:2a:86:e5:c5:f3:b7:35:61:52:6c:38:ec:99:3a:
cc:57:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:28 2026 by rpki-client