Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: v1UiHXqcNDGq2sSlITlQswobC0lihVFbH3jLOIRkYHU=
Subject key identifier: DF:6C:6D:AD:9E:C3:C7:1F:08:9B:BC:93:E4:CB:81:B5:68:58:81:F5
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019F14539EC9ED7CCBA0F7FE5396C44695F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 11B4
Signing time: Mon 29 Jun 2026 17:00:52 +0000
Manifest this update: Mon 29 Jun 2026 17:00:52 +0000
Manifest next update: Tue 30 Jun 2026 17:00:52 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: DSpDOlcyBrpMsR2TIsaD9oTd2jwRawTUwFN08gY+1J4=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:9e:c9:ed:7c:cb:a0:f7:fe:53:96:c4:46:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jun 29 17:00:52 2026 GMT
Not After : Jun 30 17:00:52 2026 GMT
Subject: CN=df6c6dad9ec3c71f089bbc93e4cb81b5685881f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:44:07:c1:d8:d1:71:1a:c3:e5:9a:69:90:
c2:f6:f8:84:ee:4e:60:81:bb:44:bd:f7:15:38:f9:
1d:71:a8:f0:11:58:9f:07:6e:03:67:23:1d:26:8b:
d0:0d:85:23:3f:f3:94:73:77:8b:9a:41:62:1e:3e:
a8:e6:46:9f:23:a9:a2:c3:3b:d8:a5:f2:ea:e9:eb:
69:1f:af:42:9e:16:f3:f9:01:22:22:b4:cc:cb:9b:
ff:30:fc:19:60:2d:4d:ba:d1:26:91:51:50:c3:93:
a4:49:0f:51:0d:96:17:b5:eb:55:94:08:18:c2:c1:
95:a6:30:0a:7e:fe:b1:90:b5:b4:cd:d5:21:49:8c:
48:87:a1:ce:57:e2:d6:d5:46:5d:d3:c8:ff:df:2f:
fe:c8:79:99:02:1f:67:5f:8e:65:c7:c7:52:8b:68:
75:9c:7c:a7:4b:4d:57:96:09:a2:fd:e1:f1:a0:eb:
31:6b:fd:28:5b:fb:1b:61:ac:75:fb:48:a3:33:ff:
1a:91:89:91:68:e7:d5:44:c4:49:9c:42:15:53:6b:
e3:b5:6b:99:c3:e4:ec:92:d4:6c:27:53:d4:56:9f:
4b:f1:0b:c4:a9:53:c4:1d:ea:1f:42:1c:a4:ae:31:
35:22:5c:05:2b:44:eb:71:64:1e:f8:2b:16:5c:ab:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:6D:AD:9E:C3:C7:1F:08:9B:BC:93:E4:CB:81:B5:68:58:81:F5
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fe:bf:3d:a5:49:95:d0:d3:d3:99:ec:c7:2e:3a:4b:d5:12:
8f:f2:50:1b:ad:e2:db:9c:31:e4:64:3c:1d:6f:2a:2a:a6:52:
50:76:2e:40:63:6c:59:33:7b:f5:f9:49:46:cb:ad:10:79:09:
a0:18:05:70:72:75:f5:9b:2b:a1:a0:d2:47:38:6d:bf:a3:aa:
0f:34:bb:f7:2b:bb:68:be:6e:9e:4a:9a:ec:98:a8:b0:49:69:
b0:1e:b0:74:3f:43:b3:72:b3:20:8d:d4:57:d9:2f:26:08:7b:
40:52:6b:a5:24:8c:c1:73:7e:39:39:ec:af:49:20:a1:a2:a1:
7e:db:62:1a:91:8f:a4:26:31:82:4f:fc:62:78:9f:8a:ca:b9:
7a:98:ce:ff:d2:36:56:91:ae:53:e8:5c:05:77:d1:4d:da:d6:
cb:96:dd:d5:87:8a:e0:0b:e6:85:f8:5b:02:61:f5:86:c5:da:
dc:a3:10:b4:b1:74:60:24:dd:20:f7:e8:94:53:4c:ad:25:41:
5f:de:70:f6:f8:0e:14:d5:9c:4e:41:50:43:02:90:30:b7:b2:
61:bb:98:7e:a1:42:df:e3:d9:c2:45:b2:0d:40:61:14:18:d4:
b2:97:e3:7a:73:40:88:3f:ea:bd:9c:76:84:b1:6e:46:35:e5:
b1:d3:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:54:57 2026 by rpki-client