Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: 5DcPMS4ymJj1bI7oOv7Ve+QaZQj/IsU6m12W/qnPmmo=
Subject key identifier: B3:67:FD:39:95:C7:69:66:B4:F1:D1:A0:BA:CD:A6:7C:57:93:2E:53
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019D397795BB3843D983FAC474E51C78BA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 03FD
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: pER8tmdDjx0igwufnm0smuI2fw5yYb3+ist5pZAZBcI=)
2: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:95:bb:38:43:d9:83:fa:c4:74:e5:1c:78:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=b367fd3995c76966b4f1d1a0bacda67c57932e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:16:bb:09:76:b5:22:b1:dc:b9:ff:f1:6d:
e0:dd:e1:31:17:45:bd:99:74:7e:4c:2e:dc:74:fb:
d2:87:cd:9a:a4:b1:a0:02:f8:3a:f8:1c:36:c2:74:
a7:8f:e0:d1:ee:25:70:b4:5b:4c:ba:a9:75:bb:23:
d2:e0:54:7d:39:d1:48:67:2a:85:91:9a:91:34:16:
f6:7b:17:85:7f:3c:20:4d:11:f6:ed:70:d7:ad:e1:
53:74:ef:db:0f:85:29:8a:69:86:e5:c9:31:55:7a:
2d:9b:5e:09:d8:d0:36:ba:a3:10:cb:96:51:1c:96:
02:60:19:59:ca:f2:0a:54:f5:1b:82:02:29:1a:39:
5d:09:1d:20:de:9f:95:b5:f1:05:86:b5:15:c4:c6:
63:5e:19:49:83:16:5f:1b:f8:da:ed:f1:ab:b2:37:
d8:7e:64:b2:cb:7f:a7:68:46:63:b8:39:94:39:d2:
12:57:9b:8a:55:e2:0c:1b:2e:47:e6:d0:9b:8e:c4:
e7:bb:dd:9c:05:7a:08:63:49:f8:9a:4f:ec:b4:78:
35:b9:65:5e:90:d4:7c:c5:8f:3e:8a:e6:a2:e5:54:
49:98:58:9a:ff:90:d4:fa:20:6b:be:bd:ca:3d:0b:
83:d7:2b:c5:f4:5b:62:3e:8d:a8:86:74:4a:ba:5d:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:FD:39:95:C7:69:66:B4:F1:D1:A0:BA:CD:A6:7C:57:93:2E:53
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:c5:d6:10:92:c7:11:41:df:e1:3f:15:27:51:8b:23:cc:
7a:71:3b:e4:34:c4:7b:d8:bd:9c:78:15:81:0d:81:95:bc:1f:
96:ae:1f:c4:93:79:9e:23:39:77:13:c6:b9:97:07:5e:ea:c9:
99:00:08:22:b8:84:35:cc:9e:77:f9:93:f1:16:0c:27:53:85:
df:e7:0c:b5:89:ff:3e:e5:56:9f:04:bd:6f:21:17:9e:f4:32:
75:92:cc:ab:c6:6c:f0:7c:fb:46:78:ec:d2:ca:0c:d6:f4:1e:
38:ef:b0:22:58:7e:c7:3f:7d:ab:68:d6:8d:63:0a:3a:1d:0a:
80:8f:2e:da:82:17:7d:75:94:67:9b:c9:de:c2:67:80:71:72:
00:67:ce:4d:16:4b:6b:5c:04:39:9e:a2:57:10:97:5b:6b:bf:
2c:6c:09:6f:6d:f0:de:bd:02:e6:35:2f:e5:3f:52:d4:2b:b3:
29:fd:c4:55:9d:97:78:53:eb:0b:4c:c8:58:88:73:91:d4:d0:
1f:b4:7c:01:02:c0:c7:86:0c:2c:25:e4:3b:3b:27:d1:9e:2a:
c8:02:8f:c4:a2:0a:a1:0f:63:7a:d0:09:47:dd:dd:9b:f6:e9:
51:5e:62:e4:02:4c:ff:ba:b5:f7:2c:42:f2:ff:09:14:7e:1a:
d2:ea:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:01 2026 by rpki-client