Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: Sy9JwXPL/39XNBHUiaw2CQ2MBQ/Qz2WZ5PYjM4A6gMc=
Subject key identifier: 1E:8B:66:A1:0D:50:34:F6:D5:5B:4A:A5:D7:11:DB:09:78:EF:7D:51
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 019D0E1FDB3E2DC737A3C6514B3A3B333153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 0624
Signing time: Sat 21 Mar 2026 02:01:01 +0000
Manifest this update: Sat 21 Mar 2026 02:01:01 +0000
Manifest next update: Sun 22 Mar 2026 02:01:01 +0000
Files and hashes: 1: 39VInJLJ3qnhvx5iqjcKdFwEBpE.roa (hash: 6TDRzvB/lwrBZbsPGcbo4Dm9ksXI0q4yNjFzox4eAaA=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: Y6mv566CIk2rIMqK/Pz5tlJR5pH3bTkYTKoL1eJIh+I=)
3: ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa (hash: 1K2JkD0zvoEdDQMkDBZtkD/kPzcmNeVAmBs9rlyU3HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:1f:db:3e:2d:c7:37:a3:c6:51:4b:3a:3b:33:31:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Mar 21 02:01:01 2026 GMT
Not After : Mar 22 02:01:01 2026 GMT
Subject: CN=1e8b66a10d5034f6d55b4aa5d711db0978ef7d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:77:f7:41:ad:a7:d3:ac:7c:c6:42:ce:0b:
06:43:24:7c:a9:c6:b4:5f:0a:79:3b:30:c8:70:d6:
24:da:ad:e6:d9:15:a2:a5:81:21:0c:b9:79:a8:b3:
1d:9d:c9:ad:5e:58:a7:78:55:c5:c1:2f:53:c0:e8:
79:3e:d2:df:2c:be:34:1e:91:b3:b6:12:e7:c7:58:
37:81:39:a7:e0:d8:80:f7:5d:86:f0:2b:5f:2d:b0:
38:6b:4c:d4:db:0e:69:e8:0c:c4:34:5e:4f:13:60:
8c:b3:f8:d5:1a:d8:d9:46:ce:07:f6:4a:b6:a7:dd:
dc:76:74:0e:3b:e4:f1:ab:f8:6c:05:a1:cf:68:93:
af:87:87:d1:b2:89:c1:13:cd:ac:b0:5b:45:de:06:
47:8a:f7:44:94:c4:d5:45:b9:59:1d:38:84:57:f3:
14:41:65:50:bd:d0:fe:a2:d7:3c:07:2c:6f:55:ae:
43:c5:98:04:95:24:11:c1:0a:1e:64:c2:7c:e8:db:
6f:e8:a6:d3:d6:2a:69:86:2e:34:40:31:02:44:70:
af:ef:c7:60:6b:6d:d5:77:1e:8a:be:34:d6:94:38:
2d:3d:77:68:f2:01:eb:77:2d:a2:52:da:16:9f:2b:
3f:5c:5b:60:5e:2f:1d:a1:99:45:a8:8f:ac:ce:1a:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:66:A1:0D:50:34:F6:D5:5B:4A:A5:D7:11:DB:09:78:EF:7D:51
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ac:02:cf:95:dd:7f:9c:3c:6c:cc:f6:1f:92:65:1d:ed:6f:
b6:27:95:52:eb:0b:a9:c6:87:ac:ca:3e:f4:0b:57:a6:f0:94:
c0:91:d9:a0:3a:fc:7e:58:4e:06:58:0a:40:35:2b:f6:df:d4:
1e:c1:c6:e7:dc:65:1d:3c:e7:3b:70:49:4d:85:1e:0d:87:51:
95:80:33:21:aa:01:a3:e0:91:27:e2:69:e9:55:b1:27:56:ea:
3e:e0:a8:70:0d:09:45:14:b3:4a:ad:b6:7c:22:c4:9e:bb:e8:
2a:36:df:81:80:32:04:61:ab:d7:fb:d9:d0:a6:3a:6a:d3:0e:
ae:4f:5c:a6:d2:5b:00:34:4d:36:8e:30:7a:d1:4e:d8:52:16:
11:9f:12:d2:6c:cc:d6:83:ee:43:9f:33:87:23:af:be:0f:66:
c0:10:6f:8a:1e:14:f5:da:fd:9b:fd:b4:9e:95:c4:24:9c:11:
ad:59:35:cd:e9:d8:e4:1b:1a:85:46:b4:db:b8:07:c0:84:24:
4c:99:a8:23:f2:3f:f1:4a:c3:4e:16:b2:bb:10:3b:58:6b:19:
53:22:98:56:71:ed:cb:01:4b:a1:4d:75:d3:b0:df:59:5c:bc:
26:67:ca:02:aa:c0:08:38:ed:1e:5f:9a:82:d1:cb:02:6b:0b:
fd:c1:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:07:15 2026 by rpki-client