Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File: WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier: sLkwN+PaPYP7ShYAt4svEtlT/5S8K/+vFCdFioRpc9U=
Subject key identifier: 66:59:E4:0A:1A:76:9E:2A:5C:44:57:F4:96:68:BC:FB:A0:A1:B8:8D
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial: 019D39E5436BBB356EFE40E71A92292B4AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:19 +0000
Manifest this update: Sun 29 Mar 2026 14:00:19 +0000
Manifest next update: Mon 30 Mar 2026 14:00:19 +0000
Files and hashes: 1: HWYj0Yf7UI2v4SI2DFohqiF03TQ.roa (hash: 161NIRovwk7K/08FGjsTUbLJAR0H5vgFaLSQ618AUbc=)
2: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: PgXIuR9mhuWtcHNeIMYX9k8UPHiHBsdngQjZCec7L1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:43:6b:bb:35:6e:fe:40:e7:1a:92:29:2b:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Validity
Not Before: Mar 29 14:00:19 2026 GMT
Not After : Mar 30 14:00:19 2026 GMT
Subject: CN=6659e40a1a769e2a5c4457f49668bcfba0a1b88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:4e:2a:ab:19:d2:15:39:1c:0d:74:e9:13:
06:73:01:93:41:8e:99:45:4e:cc:6a:80:39:25:8b:
ea:9e:8e:93:84:47:ef:2c:a6:df:30:fc:c8:aa:5f:
a4:ac:47:e2:6c:28:19:cb:a1:77:e5:ca:55:81:fd:
ce:dc:8e:e5:90:b7:21:69:c0:ff:b3:65:33:5d:e8:
23:99:04:cc:cc:28:8a:96:56:79:e1:a7:18:be:6e:
ec:02:72:53:09:4e:de:e9:0c:f4:62:4f:8e:65:9c:
2a:0f:8c:4a:88:94:0b:c2:56:ad:39:7e:e8:5f:95:
9b:c4:5d:27:86:1a:43:de:5e:3d:60:c1:20:27:13:
1f:21:fb:bf:04:bc:9d:29:13:ac:81:0e:09:6d:00:
16:71:c7:03:6c:98:52:a9:8d:5c:41:5d:f9:2f:84:
63:69:51:b3:e1:6d:f3:ff:92:75:f9:7c:8c:80:d4:
de:18:67:38:ec:bf:1d:31:4a:c6:44:8e:96:7c:cb:
a0:76:f3:c4:63:7c:61:35:0a:86:78:51:b9:44:8f:
32:47:01:01:58:3f:3e:68:d8:66:5e:82:4e:8b:0c:
32:e2:7c:5b:bb:53:cd:62:ed:f5:20:c7:88:dc:9b:
52:32:48:87:08:be:1a:90:9c:2c:75:3b:33:c1:a2:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:E4:0A:1A:76:9E:2A:5C:44:57:F4:96:68:BC:FB:A0:A1:B8:8D
X509v3 Authority Key Identifier:
keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6c:b7:8f:79:96:fb:ef:3c:f1:b5:7f:40:bb:49:f8:81:8d:
fa:15:e6:e7:d9:c7:e5:8c:d1:9d:4d:ab:fa:37:48:03:0f:06:
b6:4c:9e:ae:1f:a6:0f:9b:3c:53:8f:39:57:d5:55:5c:19:82:
a4:0f:8c:44:c5:df:fd:05:49:e4:24:f8:43:8a:af:b4:60:8f:
91:42:36:48:42:67:bd:2f:da:36:fe:61:e9:d3:e7:ab:35:05:
85:89:9e:9b:c8:ee:8f:00:d3:3d:26:2a:83:34:f0:a6:25:23:
a9:45:18:c1:c5:e5:cf:74:d2:07:9b:9b:e1:7c:a8:0d:ba:b8:
80:f9:18:56:59:a8:67:99:b6:bb:59:2f:01:a4:b9:d5:59:61:
02:cc:4d:da:89:59:2f:23:e5:56:7b:cf:a1:cb:ef:8c:81:95:
49:bc:d5:e2:ab:0c:f1:68:2e:18:55:e2:3b:6c:f3:b1:fa:90:
6d:c4:68:63:93:dc:ac:88:41:4e:07:80:e6:7a:9e:db:e5:a8:
c7:06:b2:ee:4b:6f:59:47:ed:fa:00:c2:c7:b4:80:9a:4f:e5:
64:54:86:d8:8d:e1:8a:a7:45:2c:89:9d:e3:f2:54:a3:b4:41:
4e:e0:e0:48:8e:55:5b:18:62:1b:d4:b0:fd:cd:66:9e:65:d5:
d6:de:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:50 2026 by rpki-client