Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier: YlOWgCR3zlzJtFwNdD1mLSg7zChnV5pzbLalmYBoR4s=
Subject key identifier: 25:50:86:5D:E8:13:69:35:7E:F7:35:D9:26:67:C1:B5:5F:15:D0:49
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial: 019D3865EBAE49D94D24C395F7D7C5D37B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number: 0438
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: z9K6IlhLiPK/28UAUpsEqC7wvU8JdoZHE7eDJ8fnTJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:eb:ae:49:d9:4d:24:c3:95:f7:d7:c5:d3:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=2550865de81369357ef735d92667c1b55f15d049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:79:8b:6a:f2:59:f2:5c:d9:92:d3:d2:d7:
fe:b3:68:11:73:59:df:1c:fa:32:a7:87:be:cf:e0:
64:e4:ec:5c:af:e0:35:d9:a2:38:59:1a:86:08:3c:
e8:e6:98:31:b4:30:9d:40:9d:d8:3d:02:1f:c1:db:
08:8b:38:76:ee:42:12:09:e6:a5:7c:92:53:c1:c1:
6c:82:ab:bf:58:84:cc:a8:6a:9e:c2:2c:29:30:8c:
95:89:8a:af:02:bd:de:15:d3:36:7e:08:e3:70:1e:
31:70:16:0b:d7:74:70:de:44:25:ce:91:4e:18:b4:
3f:1e:75:0c:65:1b:6f:89:39:8a:77:88:e2:68:92:
d2:aa:fb:46:a9:76:29:54:54:ba:47:b5:05:85:c6:
29:01:7a:9e:a0:75:1d:ec:38:94:db:63:5b:59:3f:
2d:be:13:4f:18:47:29:fd:bd:66:ee:21:4c:ba:c5:
d5:8c:57:71:e4:81:99:79:7d:84:8a:f5:58:e7:62:
a7:a4:95:de:49:6d:03:8b:0d:d7:91:a6:0f:7d:8b:
1e:6f:7e:3c:6c:6a:ff:b4:1b:37:f6:8d:61:be:4b:
e4:87:36:c8:a7:3c:4a:be:62:73:82:26:1f:61:6b:
e6:60:36:99:1d:b0:94:40:4c:9f:ff:38:82:97:34:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:50:86:5D:E8:13:69:35:7E:F7:35:D9:26:67:C1:B5:5F:15:D0:49
X509v3 Authority Key Identifier:
keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:ca:10:fa:69:f8:15:23:36:9c:10:c8:be:7d:8c:e1:78:
f8:9b:2a:6f:78:00:27:cb:25:37:7d:58:0a:6b:6f:6d:b3:f5:
b8:5a:25:1b:8f:c1:4d:f1:d3:75:87:b8:b1:20:ce:05:c8:90:
c4:86:e4:45:de:68:a5:07:3c:76:b1:60:ec:29:0c:9d:33:d4:
56:0d:d2:a4:6e:42:3d:90:6d:27:63:52:9f:b6:02:c2:1e:32:
44:53:0e:32:3c:ee:bb:57:ea:ac:82:ec:fd:b3:dd:66:c1:d8:
4f:b9:11:58:12:5b:ea:7c:01:38:e4:bc:8b:2e:af:6e:d0:66:
22:2a:44:1a:8d:14:3c:3a:7e:3a:a7:78:ee:66:d5:29:dd:b5:
05:10:c9:86:17:0d:23:da:ac:7a:0f:f9:bd:96:e6:93:77:3b:
1e:fc:ab:61:7a:3f:ba:4f:c8:f4:3a:5c:82:1f:4b:c5:1b:5c:
cf:9b:8d:a1:29:43:4b:ab:de:2f:0e:4d:1f:3f:87:44:9b:f1:
39:d3:d2:76:4a:bd:a7:ac:15:6f:7d:b4:f5:86:0a:ea:0c:7a:
96:99:97:8f:97:ed:0d:06:28:c4:ad:c0:2f:14:60:12:38:f8:
73:7d:4f:6d:0b:81:9c:59:56:c9:33:cb:77:7b:d5:3d:b5:7c:
da:82:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:18 2026 by rpki-client