Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: HtH49YMnlIrr4J/Sw7MQxsjbHyuwEXAKKjEnbrf5Hh8=
Subject key identifier: AF:5C:DA:D4:1F:03:14:6E:DA:9D:90:C3:F3:B3:69:09:48:DD:69:9B
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 01A1938D509BBE376761B4B01023A5B82745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 1AD8
Signing time: Sat 31 Oct 2026 20:01:14 +0000
Manifest this update: Sat 31 Oct 2026 20:01:14 +0000
Manifest next update: Sun 01 Nov 2026 20:01:14 +0000
Files and hashes: 1: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (hash: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4=)
2: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: rI7r0hg44xJyamKXibstdzVQFj9f8BAi7DiAOXlVJKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8d:50:9b:be:37:67:61:b4:b0:10:23:a5:b8:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Oct 31 20:01:14 2026 GMT
Not After : Nov 1 20:01:14 2026 GMT
Subject: CN=af5cdad41f03146eda9d90c3f3b3690948dd699b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:29:ff:32:c5:bd:34:95:25:61:b9:5c:5e:
64:19:b7:70:50:54:36:b1:ce:25:f0:f2:92:d6:f6:
f0:be:b9:ec:21:0b:6e:e2:52:51:28:30:bb:9f:fd:
1b:84:cf:34:66:1a:55:f6:fb:72:24:e7:6a:ad:81:
80:13:59:88:c0:23:0b:23:92:b5:79:2b:6d:c0:fa:
ac:fe:8c:bf:ab:0b:9a:16:df:67:1a:21:43:b8:30:
b4:b5:42:3b:2a:7e:eb:6c:00:ce:79:e0:7b:aa:a6:
6e:33:c8:c6:e8:0d:05:20:7e:ff:91:87:80:c0:8a:
ed:9d:d5:2f:a7:99:ce:fe:7a:c3:a1:58:b9:3f:28:
9b:e7:f6:60:ad:a7:d8:92:dc:4b:90:9e:27:df:59:
d6:61:06:5f:12:83:b9:b4:14:5f:3c:3b:04:e0:fd:
20:2e:d9:38:ea:d3:a8:c8:69:e0:3d:8b:80:29:18:
9f:18:5d:c0:c3:f1:6f:54:15:a4:18:84:ae:25:07:
aa:21:ad:77:78:49:3f:58:58:e3:cc:72:a5:4d:d9:
86:12:9f:d1:44:ba:9a:30:44:68:ae:1f:5e:52:2b:
20:7a:36:d4:c3:70:c7:a0:31:ff:24:d8:1a:10:06:
9e:c0:68:9c:00:b8:49:21:54:94:9c:00:47:38:6f:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:DA:D4:1F:03:14:6E:DA:9D:90:C3:F3:B3:69:09:48:DD:69:9B
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:15:78:8c:22:a2:5c:23:ff:40:52:41:2b:04:71:b0:92:8a:
f3:90:18:d1:ca:33:8c:1c:50:de:31:ac:52:08:44:16:6f:34:
33:c7:a9:59:78:5a:04:5e:e0:22:0d:7b:5d:93:e1:42:f3:2a:
5a:7f:08:ef:35:6a:2d:97:5c:e0:4d:f8:ff:c6:f8:52:ca:f1:
f3:5b:be:bb:34:20:1c:0b:e5:a2:32:36:c3:b3:ce:1a:ef:56:
6c:77:d7:81:88:3e:75:c0:cb:2c:fe:d3:b2:44:dc:c8:c4:69:
a2:de:e9:ea:66:e7:e0:96:16:2c:2b:7b:4f:7a:a5:be:ed:50:
81:79:0c:cc:ca:37:cf:ab:b1:32:8e:48:0e:94:55:c7:e6:f0:
b2:7c:7c:c8:6f:3c:fb:6e:d1:e5:fc:26:1a:bd:a1:6c:60:3f:
fd:07:eb:30:55:f7:14:cb:56:d3:2b:42:59:90:2d:79:89:27:
72:a4:4c:b8:2d:f8:18:34:d9:16:4a:d9:2c:6b:1e:7e:cc:3c:
74:98:69:99:1e:9f:c7:14:54:b1:a2:f1:49:cc:00:54:85:cb:
88:ce:8f:5a:e9:66:a8:c6:99:f6:5b:66:e8:8a:aa:95:e4:77:
9f:19:31:e5:8e:af:e8:93:16:e5:b1:e5:ba:98:e3:16:2e:c1:
de:7d:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:54:27 2026 by rpki-client