Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: yDEg9YOjdhsqjTvDnSg5F7yKHx59cj3gh3scjQy/h3Q=
Subject key identifier: 55:F6:6E:4E:D8:FD:36:3F:B9:B1:FF:1B:2A:AD:64:48:2D:9D:12:3B
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019E2C279026313F65886F14CDBAB65F33AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 15:00:50 +0000
Manifest this update: Fri 15 May 2026 15:00:50 +0000
Manifest next update: Sat 16 May 2026 15:00:50 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: bEUg+/u/VKZEUF7cF82o8lOKT1VclcsSyhAg/a+DWn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:27:90:26:31:3f:65:88:6f:14:cd:ba:b6:5f:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: May 15 15:00:50 2026 GMT
Not After : May 16 15:00:50 2026 GMT
Subject: CN=55f66e4ed8fd363fb9b1ff1b2aad64482d9d123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:c3:8f:2c:c2:92:22:4b:37:07:2e:c4:db:
dd:94:64:9b:6d:1c:66:70:51:c5:5f:cd:90:d9:5a:
2d:e7:c5:16:89:79:52:5a:75:55:ab:3a:2d:71:92:
a5:c9:b0:7f:19:f8:2f:38:7a:d8:0d:c2:a9:76:00:
68:a5:7d:50:03:3e:4f:0d:1e:62:d3:66:a2:2d:58:
e4:64:d6:da:fc:78:b0:81:53:4f:70:a1:9c:bc:6d:
f8:67:2f:a3:e8:2e:90:e8:ea:d4:2f:d7:c2:0e:59:
b7:ee:db:20:aa:87:97:34:3c:48:93:1a:43:c7:11:
75:a2:95:63:ba:01:2b:2a:93:0d:2c:12:d2:d0:fd:
da:9f:4e:46:e6:ae:d8:ed:98:f6:bf:a2:58:7b:9b:
1e:15:17:52:c9:31:2f:af:c5:c4:1a:11:1f:c7:21:
4d:c2:53:3f:8b:50:67:67:a3:e1:f3:98:a0:63:ac:
f9:d4:c8:02:0e:0b:b3:e1:3e:3c:ae:b5:22:0e:96:
3c:ea:17:43:87:4a:68:6b:ec:10:a8:6f:dc:f0:bf:
bb:4a:bc:e3:01:c7:87:51:6f:f9:ef:84:5e:85:ae:
93:4d:fd:eb:d8:75:b4:e4:47:67:e5:e1:9d:21:1b:
05:3e:b2:8a:e4:4d:73:a1:e5:a4:a7:71:90:d5:17:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:6E:4E:D8:FD:36:3F:B9:B1:FF:1B:2A:AD:64:48:2D:9D:12:3B
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:df:6c:c8:7e:72:9c:ef:1c:22:2a:65:6c:c2:b7:41:ae:
e4:f6:62:58:dc:dc:57:3c:f2:39:9c:76:36:6a:9e:7a:eb:07:
d8:03:f1:78:a8:39:cd:46:22:c8:f0:3d:f3:ca:6e:c0:f1:d4:
a9:8c:f0:0e:6b:66:5b:32:36:33:08:f4:71:00:6e:8b:87:45:
ba:24:b0:86:63:89:55:dc:2f:42:e9:00:0f:cb:c6:b1:40:f8:
03:b4:5c:fa:63:49:a7:67:bd:23:b1:bb:4c:88:1c:de:25:5f:
cc:3a:6e:3d:a4:7a:6b:2d:7e:1e:ec:64:0f:be:72:19:66:2b:
ff:aa:fb:35:d6:29:5b:09:16:18:1c:bb:9c:7f:dd:a9:93:c7:
09:2b:af:57:03:ac:f4:be:11:b4:54:54:8b:49:c6:49:5f:28:
bf:9c:f2:7a:c4:f7:19:bf:20:3f:f1:99:e6:63:43:f7:e6:ff:
aa:1d:2a:7c:9b:42:5e:6d:e2:ee:86:1e:06:ad:91:1f:aa:46:
b0:11:99:a6:9e:38:81:8f:9a:eb:4b:00:cd:d2:5e:47:f4:67:
1c:62:e2:15:56:2d:06:02:88:af:34:c4:e9:07:65:3e:f3:93:
0c:a3:42:02:9c:aa:e5:e6:06:ac:f5:13:28:6b:b2:f6:7c:39:
a4:cf:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:06:09 2026 by rpki-client