Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
File: Wy17v8Kblv03I3vOZ4bFO604D70.mft (raw, json)
Hash identifier: vPTSy+rwIPYUpvGCnPYjHxnLiYJxkHJSGboNg+uXW3c=
Subject key identifier: 53:FC:57:93:9F:2B:F6:C0:10:DF:E0:C8:A5:AC:BC:D9:25:41:D0:0C
Authority key identifier: 5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD
Certificate issuer: /CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
Certificate serial: 019D3752EC79071A37015FCCA04BC03458B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
Manifest number: 0460
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: Wy17v8Kblv03I3vOZ4bFO604D70.crl (hash: PAY6/PVmmpHYg4BCWDD6apXV7oNSpr9Q+MAcONKt9KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ec:79:07:1a:37:01:5f:cc:a0:4b:c0:34:58:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=53fc57939f2bf6c010dfe0c8a5acbcd92541d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:cf:a5:81:32:9a:e9:29:9e:f6:ea:e2:cb:
5d:f8:b2:e4:84:07:f0:bb:22:7b:d6:34:d2:36:b7:
7c:fb:a5:69:66:4d:e2:1d:e4:8d:c4:6b:76:35:32:
f1:f8:2b:34:ba:6d:cd:72:8d:56:b9:4d:15:34:6f:
8e:b2:09:99:cc:46:fa:83:36:2c:cb:af:f3:00:a4:
16:84:2a:82:cd:e7:fc:be:69:1a:20:3a:30:c8:9e:
63:92:b5:f9:29:1a:1e:36:cf:cf:76:cf:c9:79:5b:
46:d7:f1:c9:7a:96:4c:b9:10:83:e4:c9:26:e8:2f:
20:3e:83:82:40:ef:b8:ca:28:86:22:eb:f0:b2:2a:
d6:42:7c:94:e8:29:4c:f8:26:60:d4:af:fd:6e:2c:
88:76:23:b6:6e:bd:2d:3e:6f:32:22:68:53:be:06:
59:d9:79:70:cc:d8:f1:1e:ec:b4:04:39:23:d8:02:
5b:95:c8:b4:78:18:c5:3e:13:4f:48:4d:02:f2:a7:
1c:3b:5d:c1:e6:d8:8a:09:b8:56:2e:aa:ca:e5:85:
58:c0:4f:8e:e3:b2:d0:6e:d1:e6:93:0e:c5:80:21:
a9:39:d7:93:8f:08:7c:e2:10:06:9b:4a:13:ff:d5:
ca:25:3d:5b:6f:9b:2e:58:24:78:23:e6:fd:9b:6d:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:57:93:9F:2B:F6:C0:10:DF:E0:C8:A5:AC:BC:D9:25:41:D0:0C
X509v3 Authority Key Identifier:
keyid:5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8f:0c:f8:35:e4:c4:74:c7:93:82:ed:7d:b6:d1:77:d6:cd:
b2:34:0b:30:fe:49:07:3f:0f:f8:85:ad:ab:e4:1e:82:04:c6:
2a:16:50:4f:d3:79:b7:17:0b:59:1c:e0:63:50:39:14:08:46:
6f:71:0f:80:ad:31:40:2b:69:c7:11:7d:7d:ed:ed:a2:71:7a:
68:e0:b9:9c:d5:7a:35:4d:7f:4f:e5:a4:0c:20:ba:70:18:63:
c4:9c:90:05:6a:96:a9:50:14:f4:58:76:5a:92:d6:7b:d4:ca:
b3:b0:24:5e:01:f7:ad:2f:05:28:c5:57:51:7b:c7:68:a9:48:
a9:1e:90:2b:c6:7b:c3:4c:4f:6b:6a:aa:9d:55:d4:d5:f7:a1:
02:da:f8:fc:96:50:23:66:82:55:c0:b0:ad:a9:77:76:e5:24:
b3:88:2d:05:f8:f7:e6:39:25:cd:17:56:0f:07:0a:93:a2:59:
f3:d9:21:6f:d5:65:50:6d:8c:8e:d5:b4:82:60:e1:bd:0f:e5:
51:e3:dc:13:5e:7a:ce:5b:31:48:4a:d7:64:fe:3a:d1:de:f5:
43:2f:cb:bd:fd:76:fa:58:1a:c0:bd:ce:91:17:f6:5c:b6:a6:
0c:c2:03:16:49:9e:c3:02:35:95:0c:67:c2:c4:a4:61:9d:f3:
11:da:d9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uux5Bxo3AV/MoEvANFi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMmQ3YmJmYzI5Yjk2ZmQzNzIzN2JjZTY3ODZjNTNiYWQz
ODBmYmQwHhcNMjYwMzI5MDIwMTE0WhcNMjYwMzMwMDIwMTE0WjAzMTEwLwYDVQQD
Eyg1M2ZjNTc5MzlmMmJmNmMwMTBkZmUwYzhhNWFjYmNkOTI1NDFkMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcXPpYEymukpnvbq4std+LLkhAfw
uyJ71jTSNrd8+6VpZk3iHeSNxGt2NTLx+Cs0um3Nco1WuU0VNG+OsgmZzEb6gzYs
y6/zAKQWhCqCzef8vmkaIDowyJ5jkrX5KRoeNs/Pds/JeVtG1/HJepZMuRCD5Mkm
6C8gPoOCQO+4yiiGIuvwsirWQnyU6ClM+CZg1K/9biyIdiO2br0tPm8yImhTvgZZ
2XlwzNjxHuy0BDkj2AJblci0eBjFPhNPSE0C8qccO13B5tiKCbhWLqrK5YVYwE+O
47LQbtHmkw7FgCGpOdeTjwh84hAGm0oT/9XKJT1bb5suWCR4I+b9m23YvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP8V5OfK/bAEN/gyKWsvNklQdAMMB8GA1UdIwQY
MBaAFFste7/Cm5b9NyN7zmeGxTutOA+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNTc4MDUtYTk3Zi00NDYyLWFlMzgt
ZDg2MTU2ZTYxYzQ3LzEvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNTc4MDUtYTk3Zi00NDYyLWFlMzgtZDg2MTU2ZTYxYzQ3
LzEvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY8M+DXk
xHTHk4LtfbbRd9bNsjQLMP5JBz8P+IWtq+QeggTGKhZQT9N5txcLWRzgY1A5FAhG
b3EPgK0xQCtpxxF9fe3tonF6aOC5nNV6NU1/T+WkDCC6cBhjxJyQBWqWqVAU9Fh2
WpLWe9TKs7AkXgH3rS8FKMVXUXvHaKlIqR6QK8Z7w0xPa2qqnVXU1fehAtr4/JZQ
I2aCVcCwral3duUks4gtBfj35jklzRdWDwcKk6JZ89khb9VlUG2MjtW0gmDhvQ/l
UePcE156zlsxSErXZP460d71Qy/Lvf12+lgawL3OkRf2XLamDMIDFkmewwI1lQxn
wsSkYZ3zEdrZIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:50 2026 by rpki-client