Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
File: WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft (raw, json)
Hash identifier: JeT0OAIc1NVA27nn4e+vdBgEyatZ8cI15i84kYJJSq8=
Subject key identifier: 53:92:2A:08:F6:E5:BD:F7:B3:B8:FD:54:25:BD:D5:84:F4:70:73:E0
Authority key identifier: 58:0E:49:44:02:95:E5:05:3E:D0:2A:BC:6C:79:9E:8B:59:D4:CE:E0
Certificate issuer: /CN=580e49440295e5053ed02abc6c799e8b59d4cee0
Certificate serial: 019D38D2F0F036BD51627CAFF34AB93365C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
Manifest number: 8B
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl (hash: /dLck9T4pXXDQ28yC0NYlDIz+YEA3PgUssdZkSGTEYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f0:f0:36:bd:51:62:7c:af:f3:4a:b9:33:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580e49440295e5053ed02abc6c799e8b59d4cee0
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=53922a08f6e5bdf7b3b8fd5425bdd584f47073e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:e4:1c:f0:e5:5d:66:52:98:93:1b:98:42:
26:97:3a:0d:eb:e3:c6:8c:e9:d2:fb:7a:38:f5:6b:
04:85:3a:9f:f6:51:70:aa:1a:70:db:7a:cf:1b:de:
a0:90:b4:7a:24:01:0a:b0:c6:d2:81:41:98:1d:5b:
d5:13:87:0b:c1:d2:a9:59:c2:eb:0c:05:7f:d1:dd:
31:0b:d5:bd:1f:ea:b6:2d:5f:77:39:69:b8:81:58:
39:4c:b6:be:d4:13:39:4a:62:2e:86:3a:52:67:b4:
72:e1:b5:be:76:ab:f5:a5:ff:cd:7e:a9:4d:5c:3c:
f4:5b:87:5d:32:e2:06:c0:18:39:df:b0:23:73:b9:
33:b1:65:d4:f1:15:c6:5e:c0:67:76:97:8e:74:cf:
15:8b:18:06:f8:3c:32:cb:82:87:56:75:9f:33:95:
66:68:9f:3b:dc:67:25:65:6a:3a:b8:26:ac:00:94:
cf:5c:24:fe:37:a4:20:b7:02:9e:7e:0b:43:a9:db:
c6:84:42:3f:4f:ee:88:b3:b3:84:cf:20:03:04:db:
10:52:e8:0a:bd:43:e2:35:f6:09:67:96:d0:50:ea:
b8:56:cf:0c:bc:7a:ef:ea:e8:7d:12:8a:1f:64:07:
84:83:b4:83:0b:6d:91:1c:29:78:39:34:a7:d0:40:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:2A:08:F6:E5:BD:F7:B3:B8:FD:54:25:BD:D5:84:F4:70:73:E0
X509v3 Authority Key Identifier:
keyid:58:0E:49:44:02:95:E5:05:3E:D0:2A:BC:6C:79:9E:8B:59:D4:CE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:13:ff:37:40:b0:dd:24:83:33:d4:d3:27:ad:e0:ed:df:
27:9f:a5:fc:3b:f6:3a:38:2e:a4:09:12:7b:42:67:da:05:29:
1d:4e:40:75:aa:b9:de:e9:d9:7d:74:27:7d:73:6d:a5:63:ea:
55:23:ae:d1:18:5f:d9:87:23:f4:30:6a:b0:02:ec:82:ff:73:
ed:36:ea:78:d3:cd:a7:11:ec:a9:1a:b2:63:17:59:2a:d5:d6:
03:de:81:ec:22:1e:9d:53:00:eb:d1:95:a8:ca:e5:39:00:a4:
f5:f3:33:7b:60:74:30:47:ed:4f:6d:83:5a:3a:71:15:e3:0b:
af:71:0b:58:1c:29:f1:df:0c:4b:e2:fe:ef:de:c9:9b:22:3c:
95:e0:e8:3d:02:8e:33:bf:56:0e:33:30:e2:3d:10:b6:ad:e9:
94:5b:6b:96:bf:54:46:3b:9e:8f:71:55:c4:eb:26:17:69:8f:
d3:de:7e:5e:2b:2e:13:29:c3:8d:b5:48:fd:b6:57:0b:7e:1d:
e4:3d:fe:0f:63:5f:b5:d2:51:e2:24:27:ef:82:5c:10:fc:46:
e8:8e:88:e3:2d:26:e1:ae:ad:fe:f9:a8:d5:8a:8d:11:4d:73:
53:fe:71:69:e8:b9:7c:16:d7:e0:4c:c7:36:4e:4b:e8:fa:43:
75:0c:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:01 2026 by rpki-client