Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: y1f3tV4aDjkC1iGR7T350gTulu5QefHS/GJ/Z29hO2g=
Subject key identifier: 62:C0:55:59:AB:D6:6C:D1:56:79:DE:66:E3:4F:E2:78:F3:17:4B:38
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 019D38D30227DC1AA4D1250E90AA523370F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: FdD4oHB3pQugBZ0pMMHG/UYJghKpWtiKLvAH9Yu7wYU=)
2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:27:dc:1a:a4:d1:25:0e:90:aa:52:33:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=62c05559abd66cd15679de66e34fe278f3174b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:f5:5c:24:e9:1d:7c:bf:68:ce:5e:80:dc:
fb:fc:0c:83:58:e7:4f:3e:4f:27:99:33:05:71:a1:
27:f1:5e:9e:91:e9:96:d5:de:68:04:de:bf:ea:95:
b9:34:b7:f6:eb:ee:57:82:f2:7d:34:0c:52:ab:d6:
32:99:0b:ca:45:8f:12:82:17:21:9f:b8:b8:cc:c5:
b8:74:73:e0:40:79:ff:ff:84:2f:14:c8:99:b2:45:
de:05:6b:5d:66:c5:e1:ee:71:da:dc:ef:8d:78:80:
0e:77:2e:87:6c:bc:be:61:6f:08:e0:f5:ae:47:8f:
47:4d:93:de:6b:0b:2a:e6:f7:1e:07:07:e5:1e:84:
69:11:30:5b:a5:2e:fa:52:bb:d3:e2:4c:f5:ff:c9:
82:11:69:ad:34:50:b0:12:6a:c7:4a:bb:58:5c:76:
aa:70:db:cb:e9:9a:aa:e4:8b:24:df:9f:ae:a0:97:
09:4f:12:d7:e2:da:b1:b8:77:ad:f8:aa:fb:5c:e5:
3b:7f:02:d8:84:cd:6a:e0:6e:46:be:99:5a:d5:be:
41:43:0b:f8:b8:0d:12:57:c9:29:f8:22:10:77:3a:
37:2c:cd:53:9a:e2:75:4d:05:a1:26:e9:31:1a:63:
72:0b:60:64:a0:76:d2:21:95:86:e5:d0:f7:87:7d:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:55:59:AB:D6:6C:D1:56:79:DE:66:E3:4F:E2:78:F3:17:4B:38
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:08:f6:d7:56:d4:7a:43:c5:23:8f:51:cc:25:80:eb:4a:
69:e6:47:8c:3e:e2:7a:0f:27:c6:25:1f:64:07:d5:79:00:66:
58:97:fc:e4:a6:4d:d7:2b:be:6f:ad:f3:0e:68:45:4a:90:ba:
09:10:10:89:4b:33:e5:71:aa:6d:55:80:48:42:c7:1b:72:be:
8b:ba:be:9e:eb:51:2b:a1:b5:15:06:7f:f3:fd:54:fb:49:16:
43:f9:23:01:a4:ef:ff:42:95:14:eb:59:1f:52:84:1d:f3:12:
84:c2:16:00:c6:46:ed:fb:36:f7:9e:00:3c:aa:67:72:49:49:
b1:c1:24:9d:0b:af:b7:d8:26:a7:0c:75:40:15:a7:8b:8b:99:
ff:68:33:4f:97:35:29:ed:74:2d:43:18:40:ab:8f:a3:6e:6b:
f0:05:d4:59:dc:19:89:f0:3e:5a:a8:89:dc:57:57:9a:ce:46:
6e:fc:9e:d7:d9:bb:5f:33:6d:54:e4:30:47:2e:22:ec:e8:e6:
9c:58:d2:c7:92:00:b9:9a:49:a3:7f:1b:b3:d3:e5:ab:77:76:
77:55:d7:32:f6:53:2a:12:6d:d6:5c:82:7b:33:8c:89:00:bb:
66:1a:6f:7d:9e:cc:73:66:87:12:79:ce:29:79:3e:63:f2:28:
92:ee:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client