Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
File: W3EQDctuS1m2AWEkSd9pBIPWdQY.mft (raw, json)
Hash identifier: 7411wWFlhhFYx1grk4YCaUAJs/cf4HxMZuvjnA8WEOQ=
Subject key identifier: 95:55:1C:5E:84:E8:43:F5:DF:0F:C8:1F:17:B9:81:42:01:F0:77:F8
Authority key identifier: 5B:71:10:0D:CB:6E:4B:59:B6:01:61:24:49:DF:69:04:83:D6:75:06
Certificate issuer: /CN=5b71100dcb6e4b59b601612449df690483d67506
Certificate serial: 019D397760069391EAD5904593A040EA5418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3EQDctuS1m2AWEkSd9pBIPWdQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
Manifest number: 63
Signing time: Sun 29 Mar 2026 12:00:17 +0000
Manifest this update: Sun 29 Mar 2026 12:00:17 +0000
Manifest next update: Mon 30 Mar 2026 12:00:17 +0000
Files and hashes: 1: W3EQDctuS1m2AWEkSd9pBIPWdQY.crl (hash: HP6GO0yUrRFOBpFxWbIqPXThVtO1On83Rpcu+EqiPMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3EQDctuS1m2AWEkSd9pBIPWdQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:60:06:93:91:ea:d5:90:45:93:a0:40:ea:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71100dcb6e4b59b601612449df690483d67506
Validity
Not Before: Mar 29 12:00:17 2026 GMT
Not After : Mar 30 12:00:17 2026 GMT
Subject: CN=95551c5e84e843f5df0fc81f17b9814201f077f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:9a:0a:9d:cf:02:26:6d:c6:4b:dc:65:7b:
ff:d0:de:21:3c:14:57:e2:b1:35:1a:92:dc:c6:76:
b9:d9:1d:05:c2:b5:81:a1:c7:21:7d:51:db:a4:cc:
4c:06:d1:24:cf:79:d3:41:69:06:91:c5:ca:1a:3c:
65:1a:8d:b9:09:b5:fb:05:ae:52:85:e8:18:b7:3f:
dc:dc:f7:12:0c:44:25:83:26:db:35:ce:e2:ea:e7:
14:66:2f:ec:ba:68:78:74:91:cb:ba:f9:86:35:8f:
5a:77:15:86:b9:ec:0f:87:27:28:0b:d0:66:03:94:
3b:bd:40:3e:ee:36:eb:ef:64:7d:19:48:31:7e:7f:
e3:f0:98:67:e3:6e:10:82:9d:6a:6f:4d:54:da:09:
d2:13:be:17:25:d6:33:65:a8:f3:31:05:e7:2f:da:
30:41:89:02:f8:91:98:5e:e4:4b:c2:be:3e:6c:ae:
c0:3a:cc:18:aa:18:01:0e:af:53:a8:8d:d4:e7:c0:
a1:1b:bd:f3:1e:a9:82:23:8d:6f:39:fe:5e:55:17:
1a:53:79:8b:38:35:2f:49:be:8d:a3:29:13:48:d8:
1a:75:f2:67:84:e9:c3:11:a6:31:04:3f:aa:53:39:
f4:09:d9:f3:56:38:42:6e:c9:3d:eb:5c:f3:00:0e:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:1C:5E:84:E8:43:F5:DF:0F:C8:1F:17:B9:81:42:01:F0:77:F8
X509v3 Authority Key Identifier:
keyid:5B:71:10:0D:CB:6E:4B:59:B6:01:61:24:49:DF:69:04:83:D6:75:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3EQDctuS1m2AWEkSd9pBIPWdQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7b6354-e9a3-4de1-92af-4aa64e4dab73/1/W3EQDctuS1m2AWEkSd9pBIPWdQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8c:e7:97:1b:61:2e:a5:5b:95:bf:79:e1:e7:1b:0b:a2:f6:
8a:35:33:a2:d7:27:b2:8b:7a:d0:ec:5c:3b:a0:27:61:a1:f9:
ed:5a:02:cf:1d:c5:3c:64:8c:71:2e:db:bc:f1:ec:6a:b0:0b:
81:e7:ed:c2:f8:d0:bd:f2:cd:38:f0:e7:a7:18:b7:88:1e:1d:
6f:ea:36:84:5b:ba:61:4a:df:5e:6d:da:23:29:67:2a:54:7d:
9d:17:a7:91:c6:c8:33:1e:13:6b:eb:72:68:59:60:64:f5:ba:
cb:4d:93:fa:2b:dd:14:f8:b9:e4:2a:f3:0e:0d:b5:56:df:db:
e3:96:82:9d:4b:f9:82:48:58:f7:94:79:3d:76:97:9e:97:c0:
47:78:0c:6d:09:cb:c2:04:92:44:19:3e:2c:0d:24:66:e1:72:
02:94:7f:55:44:3f:9d:3e:6a:f0:1c:98:d4:a8:38:42:e0:c4:
b5:af:57:48:d4:ec:9a:4e:c0:33:48:74:6c:96:4d:5e:0e:d5:
ef:5a:1c:e7:95:89:7e:f5:bd:d9:85:e3:13:c8:34:3f:7a:c0:
b9:34:40:0a:1a:ed:8d:15:7c:b5:0f:8a:66:0b:d1:dc:5e:b5:
5e:f7:0c:bf:92:7e:91:5f:67:1a:97:80:bb:be:9c:88:15:95:
69:99:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:40 2026 by rpki-client