Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: MuU+GrMoxe35VL9KPG/xK/OD/yAp5FcX/tzy07hCu2g=
Subject key identifier: CB:AF:E4:97:E6:E9:C4:FB:7A:86:08:89:7E:75:DA:4B:AE:E9:58:F6
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 019D39409646FF669E1B2C535ADF34F43909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (hash: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4=)
2: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: nSXQM5Oq31Trj0vzFOsa+vd3qGDoN1RiGjXd1Fd7bbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:96:46:ff:66:9e:1b:2c:53:5a:df:34:f4:39:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=cbafe497e6e9c4fb7a8608897e75da4baee958f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:0e:6a:4c:89:10:b1:49:c8:e1:a8:49:30:
ee:af:d4:75:de:85:26:c3:3d:3f:b5:c5:4d:32:1c:
96:c0:fa:ab:3f:82:c6:53:75:e9:cc:b0:8f:15:ed:
cf:36:70:02:d8:ef:c9:26:84:b1:8a:c0:2c:87:c2:
1c:a3:d1:84:b4:09:4b:90:f0:d7:9c:26:43:e5:28:
ef:f1:cf:fa:65:36:bc:09:fb:01:a7:ad:b1:c3:7e:
67:bb:63:62:ba:d6:76:b0:68:84:eb:16:27:78:8e:
13:cf:a3:c1:07:30:75:64:ca:2f:80:d3:7f:31:2d:
c0:16:3b:46:27:96:bb:79:ba:f0:b1:3e:ca:11:5c:
c6:24:d5:b1:79:b8:86:01:eb:a0:ad:e2:c8:7b:d4:
dd:60:a6:78:2e:26:79:bc:42:f6:b4:26:45:53:5f:
40:3a:ab:fc:ae:c1:f8:c7:5b:8b:98:be:a6:1b:9b:
fa:32:0e:f7:92:ec:79:34:79:b5:e2:9d:0d:0e:49:
e9:4d:89:30:83:61:97:80:52:3d:57:a6:3a:bd:a0:
04:83:1e:82:2a:af:f2:c6:04:03:10:b1:f1:85:ea:
3b:4f:41:9f:ea:b7:e3:6f:88:fd:7e:24:5e:e7:d6:
97:da:76:5d:6f:f2:23:5f:6f:ea:59:63:e9:e9:40:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:E4:97:E6:E9:C4:FB:7A:86:08:89:7E:75:DA:4B:AE:E9:58:F6
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:d3:da:0d:54:6a:0d:24:e2:54:93:38:1c:a6:0a:86:ed:
66:cc:cb:b2:27:ab:31:4a:49:61:36:d2:86:08:6d:73:00:df:
e8:84:bc:66:d0:87:0e:0e:4d:18:06:59:97:0a:35:15:93:a5:
e2:19:b8:d8:5d:55:91:29:66:25:dc:67:db:8e:30:25:0c:de:
8f:56:26:66:d8:22:a1:56:31:29:0d:81:42:28:27:91:0d:3d:
94:7b:62:f3:52:91:66:f2:5a:fc:7f:2f:c5:c4:4a:07:3c:7d:
38:31:19:1e:01:eb:e5:1d:be:64:45:ce:92:e0:5c:de:9d:03:
d3:d8:f9:dc:89:e3:80:6f:e6:7f:f1:9a:12:41:76:5b:a7:0b:
67:62:08:fc:cb:54:be:e7:73:50:f5:1d:57:bc:74:f8:7b:a8:
7f:13:8f:91:9d:bb:56:79:27:c2:66:81:f1:ee:ac:b1:fa:ec:
69:d2:cd:9c:40:08:4c:c4:2a:41:12:ed:db:30:fd:de:27:42:
35:44:03:a0:7d:be:57:4f:57:31:00:52:65:11:95:03:3c:f8:
9d:02:8c:e5:1c:2a:7a:d6:44:39:a1:7f:5a:9f:6b:3c:03:d8:
a1:5d:1b:63:ec:ba:93:08:5b:00:e2:38:21:fc:88:b9:d4:be:
43:36:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:45 2026 by rpki-client