Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
File: W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json)
Hash identifier: 4tddjGqDl/KBvb5hkkHVXc0ID/R6L4J04VXwYtY9Kf8=
Subject key identifier: BC:F8:08:F3:23:19:4E:3B:4C:7C:B0:5D:80:5F:B6:70:28:9B:1E:8E
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 019D22F0AEE69E9215A34F115B96FCC4B854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
Manifest number: 1631
Signing time: Wed 25 Mar 2026 03:01:31 +0000
Manifest this update: Wed 25 Mar 2026 03:01:31 +0000
Manifest next update: Thu 26 Mar 2026 03:01:31 +0000
Files and hashes: 1: 64UrNhO-yhL_6jtEq_sOPTQqUvc.roa (hash: +CPphRjKF0mGtBaISMxsgnOh0Y9eRFrzJ9s0lpnBfdM=)
2: 9W-sVvMy13GLR4bbPPLCQvrGLHo.roa (hash: EJwwxWojl4w/mIha2WIBg+zVGwGxcfT99iGNUwoFXk0=)
3: NCqlkqIGFzrndqpB8YVxVNI4IxU.roa (hash: i1ZWD83oqkyY29wCd2f8eqlgp7kieNaGZPaKStI96uI=)
4: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: hyKsOcPgm9RqkHjFVEopRUJtoue+ADnb0V6zmxSOSqg=)
5: a5s-gMpktaLGZlzOxR33lFo6dOo.roa (hash: mXjJlbND9S4u74dBiV73zdpj+RxHFakUZvkXy0yG2t8=)
6: b5VYobcNABOZ3pZpzr_Z2VMIJQg.roa (hash: 3z9pFcvlvHR8WeaMomT0XyypusVaLwrNb+iTXt458xE=)
7: dwN1ES-e_dzEpA_B5HNXTPN2H7o.roa (hash: 7mqKzDtZCBpy6SjmOuWOhasnbkifwwXKeh+byniPaMA=)
8: oiozD2e9K7oF6d0dsqEIt1wRmUs.roa (hash: 4Bkg0miagTFlr1mUr9BPWElNFeQdQ0Ya6nOjCsn7J9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:f0:ae:e6:9e:92:15:a3:4f:11:5b:96:fc:c4:b8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Mar 25 03:01:31 2026 GMT
Not After : Mar 26 03:01:31 2026 GMT
Subject: CN=bcf808f323194e3b4c7cb05d805fb670289b1e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:4f:99:ee:85:62:62:3e:0d:5d:fa:89:3d:
08:29:2c:20:b7:f4:b1:cf:d7:c1:86:bd:3c:18:32:
77:a6:14:03:a3:0d:c0:84:2e:d1:58:3f:c7:96:5a:
f8:b4:0a:54:39:bb:ec:ec:57:a9:73:35:e4:0e:0e:
a6:7c:24:06:14:ce:84:3a:1e:93:b9:b8:6d:39:7f:
0f:47:59:86:f0:a2:3e:d7:c0:b5:3a:b7:fa:6f:db:
e9:bc:5a:00:ac:36:b1:fe:4c:f6:0b:5f:69:57:0f:
58:63:da:f5:31:ed:1c:10:81:f3:05:4a:5b:15:fd:
99:ca:1b:3f:53:d8:77:e1:80:d7:34:12:f8:a5:67:
85:7a:07:7e:d8:89:cf:a0:be:93:70:67:93:8e:53:
95:5a:83:85:63:9a:39:b5:c7:97:7d:9b:f6:04:08:
c8:a0:82:96:75:0a:53:03:04:4c:03:6e:b4:db:83:
93:71:c3:85:3a:5d:7f:06:bb:9a:b5:f6:bb:45:01:
5a:4f:e9:61:1e:2b:b6:47:7d:04:95:90:0c:c4:d7:
21:cd:41:83:2a:f7:24:c7:22:85:6b:f0:f7:fd:f8:
34:fa:37:e2:b2:13:83:76:23:37:af:36:35:d6:74:
7c:e4:2f:0a:2e:a1:e9:43:80:7d:10:93:56:f1:72:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:08:F3:23:19:4E:3B:4C:7C:B0:5D:80:5F:B6:70:28:9B:1E:8E
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7d:39:93:e5:07:7c:0a:93:92:d2:f9:a5:d8:16:2b:27:04:
36:03:d8:04:d5:88:d1:d0:93:ee:75:51:3e:c7:a7:fa:68:6e:
6e:db:33:3d:a6:b8:da:07:bf:c5:f6:1f:29:7a:ab:a0:bd:b2:
c9:f7:f6:91:73:0a:a6:a3:a8:92:cb:b7:f9:9b:48:4f:b6:38:
e4:78:ad:e2:d0:f5:4d:f7:46:d1:b5:2d:39:86:ce:7a:1c:a4:
c0:b6:52:2c:bc:5b:bb:81:5e:e7:6f:3d:97:81:79:4c:ba:09:
d0:d3:3d:7b:15:58:5f:5d:58:75:5d:85:5e:96:9b:69:6e:0e:
db:bb:0b:22:0c:0c:df:df:86:88:be:be:23:d8:f8:b2:02:d7:
97:5a:7e:17:29:8b:b7:2b:25:96:e6:e4:42:0f:76:90:18:16:
15:f4:f0:36:7b:f2:52:8d:39:92:38:9a:33:60:bb:a7:5e:e3:
83:cc:f3:64:17:2e:dc:02:47:30:bb:70:fc:27:27:46:da:03:
e5:ee:e8:68:09:fd:ad:27:1a:1f:1b:65:08:e6:50:8c:4e:9c:
68:b2:de:23:72:cf:0b:d3:41:12:4b:0b:84:17:c9:2e:6e:10:
5d:5c:5e:2e:79:0a:00:79:bc:c4:e8:8f:33:a4:ab:12:50:92:
ff:2b:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 13:25:59 2026 by rpki-client