Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier: tyPaF1k0lao2Q2wi0rZTK3mXDySxbTuR6MLYLjkyaAQ=
Subject key identifier: 72:B9:4D:91:54:E3:BA:54:41:65:B1:00:34:11:FE:CB:EF:1D:37:10
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial: 019D375228893FB8EBAA5F520D12E454FE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number: 0342
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: swT73SH/bWJgLze07/sXJgrQekZZngrMWVDvv2mbJG0=)
2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:28:89:3f:b8:eb:aa:5f:52:0d:12:e4:54:fe:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=72b94d9154e3ba544165b1003411fecbef1d3710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:0b:4c:ef:36:9d:28:61:a9:79:5a:ce:06:
29:c4:35:c1:bc:d9:d0:a7:3f:23:d4:ca:7f:6d:ab:
8e:b8:f7:13:ff:a1:25:81:54:1d:8f:88:3e:a8:90:
8f:af:6c:e4:9b:cd:43:bb:9f:b1:c7:e2:48:ec:9a:
d1:cf:b8:dc:5b:00:39:fe:b2:57:fd:1b:7a:4c:c1:
e6:d8:f5:3f:16:5b:26:cb:21:09:cb:02:dc:75:41:
63:1b:99:f4:0c:b3:66:92:f6:f2:a0:e0:1b:6a:04:
73:ad:8e:e6:0b:bf:45:be:69:b0:1f:90:3b:4d:af:
93:d5:90:0c:f8:ba:fe:5a:4e:0b:8c:12:a6:07:15:
0a:af:fb:60:fb:75:ed:a2:76:98:a6:9b:49:1d:ac:
84:bf:6a:b7:ec:c4:4e:f2:ee:98:4a:19:69:65:3a:
3d:cb:bb:d7:7d:5b:f9:d4:2f:85:4a:15:62:e1:4a:
6b:d5:21:b6:38:73:b9:0f:ec:8c:30:d5:6a:7f:3e:
8d:32:0f:d0:3e:d4:a3:21:fa:03:b9:df:0a:ef:f4:
c7:7f:f7:13:8b:39:11:b4:dd:15:52:18:a2:d6:63:
20:d0:30:42:1e:bb:d6:9b:7f:4c:87:c7:4e:00:2a:
4c:ce:c0:e3:ee:8c:63:96:fa:a3:73:3e:2d:6d:dd:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:4D:91:54:E3:BA:54:41:65:B1:00:34:11:FE:CB:EF:1D:37:10
X509v3 Authority Key Identifier:
keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6b:a4:7f:a9:89:ea:f7:a6:9e:40:71:50:d4:32:99:15:a0:
01:8d:31:13:ab:2e:47:ac:a5:98:5b:ec:f6:8b:5d:2f:2b:06:
68:59:b4:a4:d7:2d:c7:d1:5e:e1:b0:9f:80:a5:96:30:68:b7:
e2:40:3e:bb:10:e9:d2:d5:23:82:1b:41:54:d4:59:ae:ab:ca:
6c:61:51:89:84:51:ec:1a:e8:2a:7d:95:f8:66:d5:0f:e1:2a:
27:3b:7d:04:c5:6a:7e:fd:42:36:8c:20:ca:b3:74:d6:a3:3a:
ad:33:ec:e7:0c:8d:79:e5:63:bf:b5:c1:a7:69:bc:2a:be:2f:
2c:6f:b8:52:57:9b:70:3c:72:ad:94:df:b3:d7:7d:75:17:a7:
f3:01:94:36:46:15:55:4c:ec:9b:56:e5:c3:1f:45:9a:75:3b:
9e:08:be:81:e8:05:93:26:31:20:2b:dd:06:16:5e:6f:85:2e:
3c:5c:96:3a:1b:8d:da:f1:83:57:9d:d3:95:9b:60:26:08:f6:
43:0f:02:e1:99:99:c0:2a:8b:87:ba:af:2e:8a:75:66:6d:05:
d6:ad:4e:94:62:3e:e9:ed:89:4d:29:1c:10:fb:6f:c6:11:2b:
39:0b:a8:d5:4c:4d:77:f4:e2:40:ec:df:99:c2:ae:3b:67:b6:
ff:91:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:46 2026 by rpki-client