Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File: W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier: mF9MydIH8xPsf0zQ5fZHljOX/b9bwqGILxly15FyNWo=
Subject key identifier: 28:29:9C:19:C9:3E:7D:CD:16:95:FE:01:19:EE:49:E0:DD:0F:DD:4E
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 019D37532F2FD195FF525BBF01C47075B468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number: 0ED6
Signing time: Sun 29 Mar 2026 02:01:31 +0000
Manifest this update: Sun 29 Mar 2026 02:01:31 +0000
Manifest next update: Mon 30 Mar 2026 02:01:31 +0000
Files and hashes: 1: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: qnWhAkqkKGgnQZPPe6FzpwmOUZAPWQ6hieNWtr+E7jo=)
2: ew4ZARbjdwXdrbDoqVd1qEolX-0.roa (hash: sQsSV+rzZKH9rDG5YPbrMoDEZndllCXJsFtPwY4l5I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2f:2f:d1:95:ff:52:5b:bf:01:c4:70:75:b4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Mar 29 02:01:31 2026 GMT
Not After : Mar 30 02:01:31 2026 GMT
Subject: CN=28299c19c93e7dcd1695fe0119ee49e0dd0fdd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:13:d8:1b:07:f0:09:fa:bb:35:1a:c5:d8:
07:90:e6:ea:3d:30:29:06:51:5b:d8:c5:75:a2:9c:
30:d2:1d:f6:d1:48:67:b7:58:4e:e0:5f:28:fe:a3:
f9:86:ea:d0:54:1f:6c:44:9b:74:f0:22:70:52:af:
db:5a:96:d1:60:8d:8f:66:bf:97:ca:5a:9a:a6:ad:
e3:1b:2a:a8:21:9e:cc:03:7a:5c:e7:17:dd:07:2d:
3a:13:8c:2e:cd:0b:74:75:da:63:84:ca:ca:c1:75:
95:49:f5:dc:5c:d4:e3:f4:9c:8d:71:6d:c1:25:81:
6a:6d:cf:a1:83:31:86:ae:76:e7:54:77:8a:f0:78:
2e:15:fa:8a:a4:f6:22:c8:7a:df:8b:ac:85:c3:fe:
07:d0:59:0b:3f:b2:0a:de:8f:c0:e3:32:86:ce:ea:
57:96:f5:9a:41:ec:ca:ad:88:f4:3a:ad:b6:35:65:
1d:60:3b:d0:92:02:aa:e1:b8:83:70:ed:f0:f6:03:
48:f5:a9:7b:e5:0c:f1:3d:78:69:7d:2a:9c:c7:45:
3d:49:c5:56:4d:3a:8f:7b:21:ba:27:2e:09:47:6b:
1e:eb:5a:ae:13:e6:2b:3d:c2:b3:47:2f:d4:9c:68:
eb:86:9d:e0:67:af:17:90:d8:d7:21:39:e1:a2:59:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:9C:19:C9:3E:7D:CD:16:95:FE:01:19:EE:49:E0:DD:0F:DD:4E
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:70:07:53:2f:ba:e6:39:6c:a6:ff:aa:9e:14:14:5b:6f:40:
52:7c:74:ce:8e:08:45:5d:58:1c:62:eb:71:9d:32:a5:18:7d:
d4:e0:a9:63:9a:91:c5:ab:ad:64:92:50:dd:6f:2f:5c:84:9e:
25:8b:84:fa:a0:f3:d7:31:7e:bb:08:26:94:b3:4a:18:b1:ba:
9d:48:fa:81:09:e9:9f:c9:67:95:d3:16:64:82:d5:08:b2:b2:
ca:4e:36:43:8b:95:3f:93:b0:6d:53:e8:b2:4a:f0:34:33:45:
48:74:6a:27:51:31:3b:e9:ef:d2:3f:4c:55:ef:ec:bf:8f:95:
88:e9:e6:45:3c:53:6d:54:0b:49:71:fc:8b:24:10:c0:d7:7b:
4f:9e:a0:ea:5b:b1:bd:d0:ac:47:1e:5d:32:4b:3d:d1:86:d0:
57:1a:e3:23:2b:51:de:da:ab:3c:86:49:bf:d1:3a:bc:8e:25:
1f:7a:c3:50:da:6c:3c:32:68:dc:12:99:70:75:67:5e:73:aa:
0e:e4:38:d4:3c:2d:01:12:c9:04:87:6e:c5:2d:9e:26:0c:24:
27:7c:b3:1b:36:b7:e1:48:71:35:6a:e7:11:32:07:19:25:55:
d9:b4:8a:ad:61:03:aa:a7:52:cf:06:d8:37:72:ba:b5:b9:89:
2c:bb:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client