Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: Dv8RObSJ44Pk5olYo/1AdlvmFN6tkCcLya7gqqom6mc=
Subject key identifier: 7B:BF:3B:AB:81:CF:F0:2B:5B:44:11:A6:10:E5:2B:C5:29:E2:FF:20
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 019D389C155030FBA4640D83C39D047E17EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: It63EF+XX7NumlYuWn4C1L9xUMgbO8k+v3t6PsRz2Ek=)
2: hjtitcU8d-FLJ62seFiGxMChEI0.roa (hash: zPnqOgCOOliYSlkJeU3JzTfIehQxkqyATNcPPm5JpBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:50:30:fb:a4:64:0d:83:c3:9d:04:7e:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=7bbf3bab81cff02b5b4411a610e52bc529e2ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:1f:5e:dc:ff:8b:45:c0:35:c1:5f:c8:26:
9d:e3:d8:f3:a0:1b:ae:57:91:6c:ff:92:23:63:a0:
57:ee:36:1a:c2:67:a8:b3:b8:29:98:2f:68:45:e7:
24:34:73:b5:cf:a0:95:fe:97:81:2e:56:a1:35:39:
ea:96:83:c1:1c:be:2c:c0:47:7e:cf:1b:dc:72:c1:
20:4a:6e:45:10:4d:b5:8b:f5:54:ea:88:61:6e:73:
10:d5:85:6b:cd:12:5c:92:bd:b6:90:5c:44:b7:b4:
9f:92:58:0c:64:e5:dc:5b:e4:5f:68:45:6e:59:f5:
86:fa:64:15:24:54:a3:82:6c:b6:af:91:e3:97:56:
5e:96:64:c5:48:d9:19:e1:b4:55:a1:bf:91:14:ec:
4d:40:ca:c3:c9:09:0c:ae:66:79:57:c4:cf:76:ab:
8b:9d:25:76:4a:b4:31:a6:eb:15:e6:a8:55:dd:ed:
70:44:85:b7:6d:20:32:89:58:b1:7e:21:e9:ac:66:
b9:9c:ad:b2:1b:ec:a7:43:f0:fc:2a:ac:ed:98:08:
5d:55:8f:2f:ee:fd:50:97:59:f7:10:f5:dd:fb:29:
20:16:9a:83:16:f0:95:a1:5e:ea:91:b9:ba:f9:e1:
18:3e:b6:e1:53:b4:e0:fd:c1:46:c3:98:f4:9b:eb:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:3B:AB:81:CF:F0:2B:5B:44:11:A6:10:E5:2B:C5:29:E2:FF:20
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:af:b2:e2:4e:02:51:56:b4:a2:83:26:98:e4:e6:06:42:
b8:3a:25:1f:31:32:c5:70:38:0f:d2:34:f9:83:98:b9:80:96:
04:60:0a:7a:c6:59:f2:a9:f0:4f:65:1e:11:e2:37:96:cc:f0:
45:50:b6:63:52:b7:46:e6:1b:17:8b:41:ef:79:42:d2:e6:5a:
00:53:90:a7:8d:0f:83:ce:f1:48:ec:04:22:f8:15:a4:89:d4:
e9:2f:c4:aa:84:94:01:bc:c5:87:17:ed:49:f7:68:2b:56:0a:
cd:fc:03:39:38:e9:2b:a5:43:50:fe:ef:a2:f2:84:a2:21:ca:
58:d7:47:0d:e6:74:20:59:0a:35:e1:41:a2:a4:59:aa:cf:5a:
ad:7e:7d:15:e6:a2:10:33:bc:82:93:56:e2:03:1d:40:3e:17:
39:da:ea:f4:d2:a3:d7:88:65:46:e5:87:05:6b:ae:ee:44:ab:
52:67:7b:4b:46:1d:1a:58:40:01:e9:d8:09:fe:c5:49:7f:c9:
eb:b7:0e:7d:ec:67:54:c9:f0:80:d2:70:6c:bd:e9:05:26:90:
38:88:cf:05:26:37:03:4b:3e:55:f6:cb:72:e9:e2:1c:41:cc:
16:c6:b6:63:28:ef:05:4d:82:fb:9f:22:e0:45:33:9c:f9:1f:
f5:b1:03:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBVQMPukZA2Dw50EfhfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGFkNDJjNjRjNGY1NWZlY2U3OGIyNDI3MDcxZmU2Njg0
YzIwYzkwHhcNMjYwMzI5MDgwMDQ2WhcNMjYwMzMwMDgwMDQ2WjAzMTEwLwYDVQQD
Eyg3YmJmM2JhYjgxY2ZmMDJiNWI0NDExYTYxMGU1MmJjNTI5ZTJmZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj28fXtz/i0XANcFfyCad49jzoBuu
V5Fs/5IjY6BX7jYawmeos7gpmC9oReckNHO1z6CV/peBLlahNTnqloPBHL4swEd+
zxvccsEgSm5FEE21i/VU6ohhbnMQ1YVrzRJckr22kFxEt7SfklgMZOXcW+RfaEVu
WfWG+mQVJFSjgmy2r5Hjl1ZelmTFSNkZ4bRVob+RFOxNQMrDyQkMrmZ5V8TPdquL
nSV2SrQxpusV5qhV3e1wRIW3bSAyiVixfiHprGa5nK2yG+ynQ/D8KqztmAhdVY8v
7v1Ql1n3EPXd+ykgFpqDFvCVoV7qkbm6+eEYPrbhU7Tg/cFGw5j0m+tOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu/O6uBz/ArW0QRphDlK8Up4v8gMB8GA1UdIwQY
MBaAFFgK1CxkxPVf7OeLJCcHH+ZoTCDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEt
NzM2OWE0MjU3MDE0LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEtNzM2OWE0MjU3MDE0
LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlyvsuJO
AlFWtKKDJpjk5gZCuDolHzEyxXA4D9I0+YOYuYCWBGAKesZZ8qnwT2UeEeI3lszw
RVC2Y1K3RuYbF4tB73lC0uZaAFOQp40Pg87xSOwEIvgVpInU6S/EqoSUAbzFhxft
SfdoK1YKzfwDOTjpK6VDUP7vovKEoiHKWNdHDeZ0IFkKNeFBoqRZqs9arX59Feai
EDO8gpNW4gMdQD4XOdrq9NKj14hlRuWHBWuu7kSrUmd7S0YdGlhAAenYCf7FSX/J
67cOfexnVMnwgNJwbL3pBSaQOIjPBSY3A0s+VfbLcuniHEHMFsa2YyjvBU2C+58i
4EUznPkf9bEDEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:35 2026 by rpki-client