Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json)
Hash identifier: 4eTdLSgamdyk9tTLjGhyxHQ9C3ZscGkOmbQtDCVQDlQ=
Subject key identifier: F3:E7:B6:DC:D5:F5:8F:0E:0B:D7:80:54:D0:CB:52:B0:AD:CB:85:69
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 019D382DF179643FA9B87167610BA89C7DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
Manifest number: 0217
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: a/0QVSvKKWMKGWPemZ6qLwOWTbQ2fuCT6PphPnqHalg=)
2: rHga55Czu_olcqXp1dL1ZJ5IEJs.roa (hash: HvIYhtCsc4ksr8e9YC8iXYnS+/L7IK0zJKHOtTBpT4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f1:79:64:3f:a9:b8:71:67:61:0b:a8:9c:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=f3e7b6dcd5f58f0e0bd78054d0cb52b0adcb8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:72:c0:35:d8:68:56:e8:8e:3c:42:7a:83:
a4:fb:bc:e4:98:a6:31:90:c5:94:5d:3d:06:5c:17:
e7:67:f9:e7:50:ea:90:9b:81:9e:14:8f:3f:63:5f:
7f:a9:f3:25:42:d7:ee:cf:b8:9f:41:52:98:a3:8b:
e0:ba:0d:f5:08:fd:27:b7:3d:9b:4a:88:59:8c:73:
c0:3c:d1:0e:71:46:cf:67:fc:1d:75:3a:e9:2e:2a:
4e:78:07:fb:9c:d8:88:43:c0:80:7e:bc:ec:d3:1f:
0e:a5:10:13:50:11:fc:c9:13:c6:b5:4f:31:78:16:
91:a7:d4:15:05:a6:e0:15:74:d8:c1:8f:c2:5b:15:
11:e1:b0:03:f5:a6:d3:86:06:f6:a2:96:6a:a9:83:
06:11:fd:36:82:7d:7a:67:2a:93:02:70:5e:dd:63:
af:74:a7:df:26:1f:c7:58:46:5d:68:2a:6d:4e:46:
38:6a:e0:64:cf:44:8d:49:f1:85:92:7b:5f:51:ac:
68:a6:cc:f8:90:a3:3d:54:d0:9d:cb:70:90:c1:d0:
30:59:8e:f0:1b:e2:be:a5:22:8e:21:7c:20:f2:ed:
cd:1f:af:a5:de:56:60:5e:14:b8:3d:5f:86:45:1e:
49:b7:1d:90:9f:a3:85:2d:5f:85:14:11:30:e2:d0:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:B6:DC:D5:F5:8F:0E:0B:D7:80:54:D0:CB:52:B0:AD:CB:85:69
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:75:75:1b:a4:af:81:51:73:43:48:c7:b8:df:0c:a4:9b:
f6:58:dd:a7:25:1e:b1:9e:47:52:36:ee:5d:fb:73:0b:5f:ba:
d2:38:1b:a0:d5:ce:85:1c:8a:85:ac:4e:01:17:75:f8:1d:8b:
e3:fd:0d:84:cc:1b:c6:7e:42:7d:90:f1:11:77:49:be:ce:8c:
50:26:d6:69:63:86:92:ee:96:67:fd:d5:77:aa:ab:2f:75:27:
63:75:c6:3d:b0:6c:34:cf:f4:d3:61:12:5f:8e:e9:da:ca:f2:
25:05:cf:76:51:b9:bc:b9:56:a8:85:60:38:de:61:c3:29:5b:
94:3f:45:1b:59:06:a1:48:4c:01:9d:47:a5:22:35:0e:45:1e:
11:0e:68:08:13:c0:81:ff:e0:bb:9d:50:ce:70:8f:d5:7d:27:
a0:e8:70:49:17:76:8d:ea:08:35:b0:1c:a5:3c:0c:af:c4:80:
e6:70:37:40:4c:53:a4:81:0f:c9:e8:c7:90:1e:61:06:10:b7:
42:8c:e3:cc:64:ad:07:2e:ec:c1:7d:a8:e3:72:53:27:ce:9f:
68:73:8b:73:4f:e3:31:b7:cf:cc:35:b1:f7:a7:f3:6b:39:32:
95:4e:19:b5:63:a6:fd:20:ac:a8:5a:3f:2a:75:a0:14:63:af:
c1:4a:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:03 2026 by rpki-client