Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: mhREg32ryL5FQv0AiPwWrIjS/pgkVD0nPP1WE+r+nGk=
Subject key identifier: AE:1F:74:EE:4E:41:11:C8:82:37:B1:0F:46:76:FC:F7:6A:51:E8:1A
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 019E7C9ECC26F5308365D3B2E27DF5C0CA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0ED9
Signing time: Sun 31 May 2026 06:00:42 +0000
Manifest this update: Sun 31 May 2026 06:00:42 +0000
Manifest next update: Mon 01 Jun 2026 06:00:42 +0000
Files and hashes: 1: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: 4lFiXt4sBSqpfll2cPGHLre+qW5RE1t7oplhftRUyKY=)
2: XcofZ2zUXbUkXhdjGHo_Ijp3eqY.roa (hash: G155Cwdr7xdTzfgF1ccmtV2g6/W9sVULFwUJkZWAH2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:9e:cc:26:f5:30:83:65:d3:b2:e2:7d:f5:c0:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: May 31 06:00:42 2026 GMT
Not After : Jun 1 06:00:42 2026 GMT
Subject: CN=ae1f74ee4e4111c88237b10f4676fcf76a51e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:c3:9f:ec:85:7f:28:e2:e7:18:1c:8b:29:
5f:a1:a0:7a:c5:be:ef:b5:70:6d:be:44:34:d7:56:
7d:62:14:9f:d1:13:0f:71:92:3d:0e:be:4c:a1:de:
72:92:d4:77:6a:65:fa:c2:72:8c:97:ff:81:50:02:
4b:59:ba:81:e8:19:bf:c7:e0:13:0c:87:d4:e7:4a:
0d:30:d1:10:c6:96:11:42:d1:07:3c:3a:b0:0a:5a:
ec:ce:e9:de:00:ad:f8:0a:7e:c6:c9:2b:21:fd:06:
4b:0d:03:f9:da:93:16:e7:b4:e7:8e:07:70:53:14:
ef:97:e9:02:a3:a9:5c:7e:0b:02:de:51:ea:40:03:
ba:9a:40:36:4c:ac:b0:9b:5b:84:75:ce:76:4a:9d:
ff:ef:69:94:ed:02:37:19:71:5c:b0:85:5b:b9:6a:
64:f0:36:90:3c:3b:0c:5c:ff:58:8f:0c:47:cc:df:
03:1f:06:2f:f4:27:4d:6c:aa:b4:86:6e:3c:8d:cc:
c9:1d:e1:93:c2:cc:bd:0b:06:0f:e8:3c:37:2e:aa:
96:97:33:da:2c:7a:f6:1a:d8:73:9d:32:52:96:40:
47:46:98:44:39:b3:bb:05:60:4e:60:c9:f0:38:a4:
cb:ba:a4:d4:55:68:df:00:87:dd:47:83:b0:aa:1b:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:74:EE:4E:41:11:C8:82:37:B1:0F:46:76:FC:F7:6A:51:E8:1A
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:cb:93:08:38:2e:0f:4f:72:60:e2:e8:e3:10:19:b5:16:
57:c2:77:b3:2d:e3:a9:7e:1b:0c:49:46:c6:de:c5:f3:a8:c6:
d4:ca:75:5f:be:72:02:d9:38:ec:33:1c:e4:78:3d:22:92:bc:
e9:c0:f8:32:56:c7:ab:5b:98:af:6f:6e:b7:e1:7b:b5:b9:ad:
72:50:50:4e:77:19:c1:af:8d:97:70:b6:d4:f6:36:6e:d8:ad:
f6:7e:da:bd:ca:ed:a2:f8:82:8e:82:bc:dd:bf:e5:6d:a5:b5:
1b:a4:4d:f1:47:a4:07:4e:86:1d:a9:6b:c2:02:43:af:c4:d1:
0a:e3:78:05:3b:a1:f2:bc:71:a7:ef:61:f2:85:f7:f4:15:8b:
77:5f:57:b4:25:db:66:2d:16:4d:cd:20:f4:09:e3:e5:24:de:
98:7b:80:34:ca:48:dd:84:c8:35:01:e7:a6:de:ad:d1:6a:a3:
95:a9:1d:42:70:43:fb:27:a2:44:0b:c7:88:18:cc:f7:38:76:
72:ad:b7:4f:c5:a4:dc:56:6f:a4:b9:90:4e:a6:21:2c:20:af:
51:de:c0:49:73:da:e9:53:ae:b4:39:c9:ed:46:07:f3:45:d9:
99:e2:c8:e1:b5:29:38:6f:6e:59:db:23:e6:e9:2d:0c:0e:26:
c6:48:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:43 2026 by rpki-client