Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
File: WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft (raw, json)
Hash identifier: 4h9EO3sFiVEdxgK37dEopGtyA453CxM/QfiZ9fqyEr8=
Subject key identifier: 27:03:63:13:26:92:66:15:50:E6:5B:8A:00:AC:FA:F5:1B:B5:E4:9D
Authority key identifier: 59:4E:72:50:8C:06:71:83:22:C0:FD:DC:5F:67:30:9C:BC:89:14:F4
Certificate issuer: /CN=594e72508c06718322c0fddc5f67309cbc8914f4
Certificate serial: 019D3A53AD278F60A0279DDA6A91C11BB28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
Manifest number: 1F
Signing time: Sun 29 Mar 2026 16:00:55 +0000
Manifest this update: Sun 29 Mar 2026 16:00:55 +0000
Manifest next update: Mon 30 Mar 2026 16:00:55 +0000
Files and hashes: 1: WU5yUIwGcYMiwP3cX2cwnLyJFPQ.crl (hash: +bjTLjCBGnS+kvOKEQ4feUaQLChrCoIxWYIiclqaSio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:ad:27:8f:60:a0:27:9d:da:6a:91:c1:1b:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594e72508c06718322c0fddc5f67309cbc8914f4
Validity
Not Before: Mar 29 16:00:55 2026 GMT
Not After : Mar 30 16:00:55 2026 GMT
Subject: CN=270363132692661550e65b8a00acfaf51bb5e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:a6:6d:54:fc:af:7a:08:ed:08:c0:9c:ba:
af:41:6e:d9:59:5a:f5:70:c7:a2:a1:24:dc:ab:14:
7f:41:79:02:d6:a9:c6:6e:4e:44:60:44:aa:9c:f5:
94:e3:34:ba:33:b8:48:9a:f8:ca:ae:5c:19:3d:2b:
dc:9d:c5:7f:bf:e7:62:1b:f1:74:11:30:e2:2b:90:
70:c2:16:7d:62:c8:63:c2:ec:25:c5:bc:c6:1f:78:
09:58:df:a2:a5:9d:6d:90:25:d2:c5:95:db:15:86:
53:46:a5:53:cc:60:f2:fb:af:28:e6:59:19:1d:82:
a1:ed:38:59:a3:8d:83:71:93:5f:8f:6c:5f:b3:2f:
a8:f9:db:7d:5b:0f:96:ce:2f:13:46:e7:09:eb:7a:
6b:46:7a:a3:7b:26:d3:30:19:b6:9b:5d:d3:11:9c:
ac:8e:e3:29:5e:04:b8:5d:b7:e4:11:f4:5e:05:f5:
e8:f4:a3:22:18:73:f3:7e:e8:fa:37:4b:84:a2:40:
db:91:81:f2:72:b8:24:84:1f:3b:d4:3f:6e:b2:09:
80:79:dc:2a:7c:48:02:50:cd:58:61:aa:c7:f1:de:
09:aa:bd:a9:2c:53:51:95:64:09:38:03:f3:f6:3a:
16:16:10:ff:d8:8b:28:43:6d:0b:e7:3b:53:fb:b3:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:63:13:26:92:66:15:50:E6:5B:8A:00:AC:FA:F5:1B:B5:E4:9D
X509v3 Authority Key Identifier:
keyid:59:4E:72:50:8C:06:71:83:22:C0:FD:DC:5F:67:30:9C:BC:89:14:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e720d3-cd1e-4c2a-a0f5-e3adfe2f951e/1/WU5yUIwGcYMiwP3cX2cwnLyJFPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:9f:22:44:9c:5b:31:49:34:69:0f:55:a4:c2:5c:a0:fe:
51:b4:60:c2:58:83:49:57:11:e7:ea:2c:4e:09:34:f6:c9:46:
b2:e0:a3:21:6f:06:30:45:95:94:e3:cf:63:f4:4c:30:e2:bf:
f1:a5:f7:e5:39:fa:da:74:7d:3a:1a:44:f3:db:d1:b1:10:23:
14:b0:5d:b5:56:3c:24:4e:59:0c:14:d0:89:98:3f:92:04:a5:
bb:26:60:44:a1:20:a5:8c:78:d2:44:9e:13:11:9f:c8:09:51:
b0:e6:f0:b7:e6:8d:a5:7d:df:18:3f:78:c8:64:75:59:c8:07:
6a:6c:2e:30:5b:fa:ac:8c:95:5b:e3:11:5d:56:33:7d:ae:ea:
39:69:e7:7a:ba:6a:80:ed:32:ac:cb:10:07:f4:88:16:5b:8d:
8c:8b:2e:d8:cf:53:40:ff:f0:4c:45:35:6c:cf:d1:e0:8c:73:
ad:2b:2f:d6:90:56:12:d3:b3:61:58:cc:11:35:94:c7:06:8b:
c4:25:02:fe:f3:19:21:78:08:ea:10:9e:3a:39:fa:ad:bd:92:
00:53:54:e2:cf:15:80:33:13:d5:5a:f7:3c:d7:3e:4d:9d:87:
4f:ba:d2:38:6c:1e:34:9c:93:10:60:b0:82:2a:d9:cf:a0:f4:
e2:b8:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:14 2026 by rpki-client