Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: FC+wVCFfocVb1/GUtLkAHrKK1St11dgq9MV1jMWPVRQ=
Subject key identifier: 23:5D:A0:1F:0D:9F:13:84:9B:79:95:68:1D:35:EE:BD:83:1B:27:07
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019D38D3D7CB027C10C6645C04F0E323C8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:40 +0000
Manifest this update: Sun 29 Mar 2026 09:01:40 +0000
Manifest next update: Mon 30 Mar 2026 09:01:40 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: wYRCYlTPYP2WOVxBKlDuk1h3i7kZrt/bjBvacIYT5So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d7:cb:02:7c:10:c6:64:5c:04:f0:e3:23:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Mar 29 09:01:40 2026 GMT
Not After : Mar 30 09:01:40 2026 GMT
Subject: CN=235da01f0d9f13849b7995681d35eebd831b2707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:da:8e:44:5e:ef:bf:89:6c:af:fd:cc:12:
81:14:ec:85:86:ec:8e:ae:f3:57:74:dc:cf:43:16:
f6:36:ca:15:b7:d2:06:f6:f9:9e:48:bd:3f:a2:e1:
58:4f:22:91:be:d7:cc:e4:16:75:8a:ba:bc:1c:1f:
f1:85:56:fd:53:4e:d2:50:ad:3b:66:07:03:1d:9a:
61:0d:23:ba:65:b1:e1:64:9f:ec:16:13:c0:3f:e2:
64:cb:7d:76:87:97:40:5a:1c:b1:e7:f8:c8:8c:57:
2c:5c:5f:2f:d9:cf:80:6b:29:22:9d:a1:47:c8:dc:
2c:6d:04:a7:09:f4:b9:ad:48:f1:89:42:b8:38:3f:
15:aa:1f:7b:9a:f1:45:ef:9c:57:1a:66:63:5f:cd:
4e:6c:19:8a:4d:f7:2f:31:15:6a:20:8b:d4:11:dd:
53:5e:39:c3:3c:74:9b:11:ea:85:9a:8c:bd:3f:24:
0b:87:d5:42:b6:53:f6:25:e3:45:57:af:1b:40:90:
79:e5:11:ac:cc:21:ae:b2:47:ec:e4:8b:3d:35:87:
01:5a:80:97:e6:a7:d7:13:d8:72:27:ff:bf:2c:be:
59:58:6d:41:ae:bf:36:2f:cc:0d:27:e2:c0:47:79:
b2:a5:40:0b:b4:46:8b:4a:84:f0:a2:5b:3a:8a:14:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:A0:1F:0D:9F:13:84:9B:79:95:68:1D:35:EE:BD:83:1B:27:07
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ef:35:f8:9b:78:81:7b:64:b9:b6:7e:a9:7d:86:ef:9b:f3:
6b:fb:6f:95:66:83:e2:cf:e2:a5:a8:64:1a:f3:26:9e:e9:96:
41:a8:18:5b:36:0c:a9:9c:19:5f:75:36:f1:f6:a4:9d:38:06:
9a:08:4e:bf:e9:e3:a3:ea:43:5a:de:7e:69:76:f7:d1:71:5f:
ab:e1:08:4b:01:5d:2c:ed:33:94:47:4c:d8:aa:f8:30:42:d1:
46:87:0a:14:a4:0b:63:50:70:40:3d:aa:46:55:6e:a6:26:35:
4e:76:8d:9a:1b:b4:62:a6:f3:71:f0:2c:ad:32:22:2e:8e:d4:
b9:b5:6e:9a:ed:17:f5:5c:2b:d4:ef:34:ff:d6:82:6f:b2:db:
5c:63:3e:a1:08:99:12:a7:b4:fe:01:9f:27:00:7b:f0:20:1d:
ad:02:b0:e8:d8:e8:ab:ec:12:fe:bb:26:5e:25:24:9e:65:0d:
2c:df:ce:97:65:ff:ca:9b:52:34:ca:e6:20:a0:2b:4e:f5:11:
c8:91:26:c5:ba:34:4b:d0:c9:50:3d:ab:2c:08:62:de:86:fe:
86:16:86:36:89:b4:a4:1a:88:77:c5:cd:37:eb:a2:af:c7:82:
b0:79:0f:8e:11:74:23:c1:b6:80:7d:0e:b0:7c:a9:83:63:92:
75:6e:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:34 2026 by rpki-client