Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: MMTt/RDXb0zXM5XEwNsNCy2xF0hEeMzZpIUJqCUb3Ho=
Subject key identifier: 00:78:BB:E0:24:0E:90:0A:06:DB:73:39:6B:75:97:CC:81:3F:A7:6C
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019D3865B2F79BAE3E399B4EA7E756C8130F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0D05
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: Np5hFRaL+gNytpvSq9GRQjtoc2aCJpWLmc52zxS4Vt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b2:f7:9b:ae:3e:39:9b:4e:a7:e7:56:c8:13:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=0078bbe0240e900a06db73396b7597cc813fa76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:0a:2a:02:26:53:cd:1a:88:9c:86:cc:83:
ba:f2:ce:c1:dd:2f:71:8e:fa:a3:4c:76:a2:5b:b6:
0e:4a:c4:de:fd:34:c3:27:3a:fc:b8:df:f8:28:23:
cb:98:7d:79:f8:37:69:36:62:a7:6d:29:95:58:7f:
0f:a3:bc:60:e6:30:d1:14:96:e6:1d:53:77:66:53:
f3:fe:f8:91:79:63:58:36:c5:46:67:f1:a2:d8:f5:
47:90:d0:31:21:c4:3f:91:29:c3:c6:e5:05:40:c7:
4a:31:a7:b9:c3:03:57:60:fb:77:a2:76:87:91:77:
99:87:c4:23:c1:81:03:b3:ce:ba:76:fc:22:18:3d:
fb:eb:9e:22:3f:c7:53:58:4e:be:c6:36:a8:fc:45:
6c:f5:d2:12:42:b0:39:23:c9:1e:76:0c:16:87:2d:
00:e8:e5:f6:0c:7e:f2:b4:5e:66:7d:af:9a:d2:28:
75:23:78:00:25:fa:fb:1a:ca:75:b8:df:a4:cf:36:
81:87:22:85:a7:69:cc:a6:bd:97:a7:a4:c4:6a:da:
28:30:03:2a:c8:7a:56:a9:ca:e3:10:fa:78:ff:a9:
9b:e5:43:81:26:30:5f:61:1e:8f:34:94:6d:6b:d9:
01:8b:2c:21:00:3c:7a:0c:f3:f3:32:58:17:82:3a:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:BB:E0:24:0E:90:0A:06:DB:73:39:6B:75:97:CC:81:3F:A7:6C
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c8:97:02:6d:30:dc:bf:4c:ea:a8:86:0b:2a:d3:d3:65:13:
91:b7:e9:20:a1:40:00:9c:1b:d7:c2:a8:f7:5e:08:6a:11:9e:
7b:b4:27:52:0f:ed:6e:98:db:ce:ad:87:26:a0:67:be:41:4a:
71:cf:95:68:f2:87:e9:14:da:d4:a5:d8:cf:57:d9:c6:b7:8e:
a8:74:c9:f9:f0:c7:4a:89:2c:3f:b1:1d:86:b6:a4:18:a3:a1:
11:75:e3:67:71:c1:20:ed:dd:c0:78:89:b0:aa:36:16:be:92:
2b:93:48:01:59:90:f3:63:00:15:1f:05:b1:b7:bf:a9:3c:76:
77:d3:d3:65:35:e9:5d:1e:78:0f:d6:f3:1f:35:bd:66:4c:88:
0e:00:dd:2f:50:c3:35:c7:59:00:22:7b:26:8c:91:bf:94:66:
63:85:6d:07:c6:a1:58:66:9c:24:33:a6:8d:fc:bc:e0:8f:09:
a1:8d:ed:47:c7:e8:4d:a2:38:94:c1:15:00:57:44:d0:92:5b:
c9:1a:70:67:d8:67:c8:3d:ed:ee:ec:2a:4c:73:46:04:4c:5d:
50:63:47:28:ad:b1:89:5e:a3:7e:df:3c:41:bd:24:02:fb:80:
4e:13:0b:92:81:8d:26:fc:6c:bc:d5:2e:5f:13:cd:54:57:b0:
66:c7:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:35 2026 by rpki-client