Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
File: W5Mah05ojyfJWsrY29Md9pjyEX0.mft (raw, json)
Hash identifier: 89bkzwBeGNgZCwlJW+MK2qcEz7ht21FkHkcwpRRbUh4=
Subject key identifier: 8D:30:2D:71:C1:E6:54:AE:92:45:65:19:3E:01:A6:73:C4:F8:A7:4A
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Certificate issuer: /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial: 019D39AEA8E15C49878F4E2F9138E7640FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
Manifest number: 02A0
Signing time: Sun 29 Mar 2026 13:00:40 +0000
Manifest this update: Sun 29 Mar 2026 13:00:40 +0000
Manifest next update: Mon 30 Mar 2026 13:00:40 +0000
Files and hashes: 1: 2Ndf1GB--RcVTegC6zPQAxJQe4g.roa (hash: 0L8O9kiu2xZ+X6I/3EY4idZtFO0i4I4ns+3oUeMchLU=)
2: W5Mah05ojyfJWsrY29Md9pjyEX0.crl (hash: c6FKGZ2fgdk0iOThmgAAk4pPdDeWaxkWcNCkzRMouVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a8:e1:5c:49:87:8f:4e:2f:91:38:e7:64:0f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
Validity
Not Before: Mar 29 13:00:40 2026 GMT
Not After : Mar 30 13:00:40 2026 GMT
Subject: CN=8d302d71c1e654ae924565193e01a673c4f8a74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:02:c4:d4:db:26:de:ce:c8:9c:1e:49:1a:
7c:29:6e:c2:58:c2:3d:a8:31:f4:7c:59:60:40:dd:
0a:ef:99:2b:54:72:8d:6f:e0:db:b5:40:4e:78:66:
d2:a0:97:c7:3f:26:e7:7a:d3:b0:55:ba:c4:0b:65:
e6:85:c1:b6:29:b1:bd:3e:0f:48:18:f7:b0:05:c3:
75:29:61:3a:13:97:39:e8:53:9f:15:01:8d:2c:26:
66:4a:95:1f:b2:26:b0:bf:53:c2:5f:cc:bf:c3:6a:
d2:31:31:39:02:5a:cf:7f:7b:33:f1:1a:b9:ef:1e:
2f:12:92:10:d9:31:87:d8:38:69:22:a3:4c:10:85:
2b:aa:26:1c:7e:3a:d6:fe:50:c8:92:24:72:8a:df:
34:b1:ec:42:e5:00:53:89:8e:26:3c:ea:b1:52:6e:
ef:0d:2c:96:b4:21:46:4f:d4:95:5f:2b:ed:02:5c:
88:74:84:1a:5c:76:91:8d:ef:3d:92:a0:cd:dd:5c:
f5:6f:15:3a:83:2f:5a:0c:7d:b8:b2:09:67:ff:62:
15:5b:8a:56:ad:c1:c3:51:1e:ff:0c:15:e8:fe:d0:
c3:45:3f:4a:ba:cd:d0:39:cc:89:db:65:da:c4:a5:
35:46:39:64:22:db:b3:c7:01:89:f5:3b:75:f8:50:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:2D:71:C1:E6:54:AE:92:45:65:19:3E:01:A6:73:C4:F8:A7:4A
X509v3 Authority Key Identifier:
keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:b5:ed:f9:9f:32:30:71:ff:22:df:2f:c7:f8:f6:c2:88:
1f:7b:d5:7b:0e:eb:b8:ae:be:64:9e:a5:ba:7e:fd:66:7d:8e:
46:08:a6:57:91:f8:ea:03:c6:cf:3e:56:77:30:cf:61:7d:ed:
fe:6b:c6:76:cb:c5:3c:a4:25:e5:25:2c:69:28:7f:92:93:74:
8a:13:16:e8:c6:20:97:4d:0d:d5:b0:90:5a:bf:c5:6e:c2:ba:
bb:77:22:24:ea:a2:4a:61:66:0d:14:fc:52:67:e8:92:2c:7d:
ab:79:e1:02:f2:c0:de:c3:36:9e:5a:fc:c7:d3:bd:38:df:06:
1c:2d:ad:3e:b3:66:a1:91:4f:bd:05:72:18:65:e6:c8:bc:08:
75:ed:be:4b:91:b3:35:2f:f7:cf:58:bb:59:da:27:96:08:bf:
8f:8f:20:2c:7d:79:c2:30:43:93:0f:1c:f2:11:e8:2f:27:26:
9a:77:43:8b:5c:e4:8c:a7:4b:b3:0f:3b:1c:1f:59:9f:00:d4:
8d:1f:b7:d3:b6:31:10:a5:70:9c:ec:21:39:6a:0f:df:1b:b7:
12:bb:ae:77:7a:5a:c9:c4:75:17:30:0e:3c:7c:cd:65:21:58:
3d:26:cc:64:68:0b:c9:9d:42:81:5f:d3:e5:ff:31:4f:73:fc:
3a:2d:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:12 2026 by rpki-client