Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: CFXaXFJU3tpTvL4uJUG+RD3WdU1+wKRWiLr8dqo9bkM=
Subject key identifier: 45:1D:56:3F:7A:21:80:71:66:F8:03:22:87:1C:E9:14:FC:0E:AA:09
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 019D38662CEA7359926AC3B8E620A2768F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 0987
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: kuSD5T8E7K2X0sCEsN/oqecGNG0wBifKxuCGf6yWaAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2c:ea:73:59:92:6a:c3:b8:e6:20:a2:76:8f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=451d563f7a21807166f80322871ce914fc0eaa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:ef:cb:cc:15:d5:fd:23:af:23:a1:88:ec:
03:b1:1e:4a:4c:0b:0b:35:cb:d4:97:68:ba:db:fc:
2c:5f:26:e2:74:8a:2d:55:d3:c6:b6:aa:2e:c5:34:
8f:80:3a:c9:2f:ae:b7:a6:c2:69:91:5c:74:68:0b:
41:89:7a:37:a8:54:84:a5:8f:7e:61:b4:b9:f7:97:
6e:89:67:5d:9d:70:d3:25:08:04:89:87:49:e4:67:
50:72:73:4b:38:4f:0e:13:c3:ef:01:63:5b:4f:d0:
bc:e6:6a:ce:1a:08:f9:cf:bb:1b:67:df:e7:13:9a:
12:af:e9:5e:a1:03:22:7b:6f:97:60:41:86:44:93:
45:0e:0a:e5:63:41:a0:26:bd:ad:39:86:bc:ab:e9:
f9:89:48:5b:af:2d:d0:5b:02:27:5b:c3:9e:fb:37:
85:9d:bd:54:5d:60:e7:cc:d4:8e:f0:8d:18:f8:03:
bf:6a:45:90:fa:d4:01:40:71:9c:0a:34:8d:1a:de:
b2:bc:d8:78:ce:af:07:37:3f:03:ff:62:ec:c8:30:
a2:dd:62:4d:11:14:a4:6a:6c:6d:02:46:1f:13:62:
b5:fc:52:ac:29:f8:84:8e:ec:85:d4:a3:f9:6e:95:
eb:07:4e:ad:89:07:ae:09:aa:0c:4f:42:6a:29:43:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:56:3F:7A:21:80:71:66:F8:03:22:87:1C:E9:14:FC:0E:AA:09
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:83:57:26:ed:60:3b:da:d3:2c:c9:66:24:9a:cd:92:12:da:
0b:f9:63:1a:66:4b:e1:e6:ec:cc:58:19:3f:5f:47:19:ee:2f:
92:1e:76:7b:7f:fc:10:4f:db:a5:41:9a:e6:06:8c:ac:74:62:
9b:8e:49:fd:d3:d2:8d:12:0e:98:ae:98:9a:cd:7d:d6:de:e1:
2c:12:e5:35:2f:ae:6f:6f:e2:73:be:39:59:b9:c7:6e:f1:61:
2c:74:50:75:f9:5b:99:5d:e6:00:cc:4f:19:01:c0:85:2d:9c:
e8:b6:6a:5e:3d:6a:ca:53:77:f4:0f:c7:c9:4e:58:4d:bf:a2:
52:1a:25:12:f4:2e:4d:74:2e:59:7f:3a:19:bc:50:eb:12:e0:
3a:9c:37:d8:45:97:d4:a9:22:39:ee:5f:a9:68:68:6c:02:15:
1a:c6:33:1e:66:f9:33:06:a0:7f:24:b0:8f:4d:90:56:28:c0:
b4:5f:d7:f4:58:ac:b1:d7:3c:10:da:f6:72:c4:48:c3:b0:8d:
0d:12:a8:4a:05:e4:84:a9:23:dc:57:9d:da:1c:7c:93:f0:64:
e9:67:16:fa:82:97:eb:70:cb:31:a5:55:52:3f:5a:18:35:bd:
d6:4d:47:e5:da:63:53:5f:5d:1c:35:e3:d8:0f:bb:07:39:da:
2f:01:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:00 2026 by rpki-client