Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: 8vrS8yFcnTM6nwyA5Frr/yQ6AdT9YFWUd7wrdz4zL/g=
Subject key identifier: 74:A6:3E:E5:A2:51:93:32:6B:AD:AE:07:0F:91:B2:F5:1D:32:2C:F7
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019D3940B1E7E9F5CB3E04E8864CF05CC953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 10BE
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: OaQrq11ouEaiOOP0UVuB5ZNmqy40aDm9rtjdaD43Ur0=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b1:e7:e9:f5:cb:3e:04:e8:86:4c:f0:5c:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=74a63ee5a25193326badae070f91b2f51d322cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:62:5e:a2:f7:6a:73:f2:b7:6b:37:ca:50:
55:16:c9:59:fa:83:1e:d0:d5:8c:c7:36:6f:6d:d3:
f9:d7:96:b2:28:43:5b:fb:85:7a:b6:c1:92:fc:83:
96:90:61:0e:98:9a:08:43:69:cc:a1:8a:23:d2:51:
2c:1d:51:5e:58:dd:a8:f7:eb:fb:fa:5f:49:ec:6c:
b1:e0:a1:a2:cc:95:73:8a:96:81:71:9d:d4:56:64:
65:91:99:82:80:76:d4:33:36:55:15:62:e9:a5:20:
4d:1e:7e:80:48:45:64:11:df:41:33:1e:de:3d:1f:
cd:cf:21:3c:6b:e8:e6:f7:54:1f:8b:f5:b9:01:32:
c9:f4:fb:76:06:b6:9f:33:49:b1:97:94:7d:c2:86:
3d:29:0a:6c:37:ec:9f:3b:98:41:0b:5e:e8:8d:58:
ed:6a:c7:bb:d4:e4:58:d5:8f:c9:5e:95:86:67:a2:
ec:c9:86:fa:5a:70:62:5d:9e:5a:38:45:f3:b7:cd:
10:2b:40:8e:80:57:76:ee:ed:74:30:27:36:f0:e3:
af:02:9e:d2:35:72:d5:44:66:ab:4b:c4:b6:a8:1c:
e0:bf:fb:1e:7a:ac:d3:83:74:55:46:96:7c:9a:71:
5c:13:61:8d:ee:65:3a:61:50:a5:8f:94:4e:06:01:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:3E:E5:A2:51:93:32:6B:AD:AE:07:0F:91:B2:F5:1D:32:2C:F7
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9e:8a:16:c5:f4:6b:a4:4a:37:54:85:c5:a0:e6:bd:f7:03:
e8:b9:3e:2a:bf:3b:65:e1:8b:b9:72:d2:31:f8:30:20:37:c1:
f8:91:71:5a:42:04:b4:12:bd:cc:a4:2f:29:80:13:09:e7:f9:
41:76:84:05:36:d1:ad:6b:6a:88:84:8b:44:f3:d2:23:2d:10:
c9:32:3d:35:ca:d8:2c:5c:a7:86:11:cf:43:58:1d:ad:e3:f3:
aa:9f:e7:f9:50:98:3d:41:64:f9:4e:28:5b:36:15:3d:9d:b0:
55:02:0a:25:2b:ce:8a:c5:3b:cd:c7:06:63:2b:e5:1f:59:9e:
df:b8:1d:3a:81:08:e9:57:30:d8:25:89:7a:98:b2:8b:a2:62:
8c:69:ff:50:25:95:62:8f:43:bf:0e:e6:d2:c5:0b:a3:fc:b8:
b5:a4:5c:f0:6f:ef:5f:2d:c0:97:51:0c:5d:bc:12:14:8d:c1:
58:4b:da:c7:a5:c2:5b:d1:b1:26:bd:21:c3:35:e5:23:dd:2a:
e9:62:e8:07:07:b9:c2:af:67:b5:65:5b:8d:4f:19:32:ce:1f:
15:a3:a0:77:f6:90:93:ef:64:f2:b6:0a:5e:44:40:26:d1:a4:
d2:28:e5:40:d7:47:de:72:ec:1b:7c:10:62:69:af:66:a5:39:
fa:ad:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:44 2026 by rpki-client