Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: 1FVnvG0X3xR4mkY4b0LRJv/bFssMkxB6mxIskPWYKLs=
Subject key identifier: B1:8C:D8:8D:A9:22:F0:5D:D7:FB:AF:C1:6B:26:38:6C:41:40:20:86
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 019D389C22DE8FF309C823031485FF05ECE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0AD1
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: K8sRWc9TP4K0285qbD9iip6/gNocylM7vdeb4RT0MrQ=)
2: YxXsZlINFbnQqhmq0BwCtCd3rCY.roa (hash: oiaRCOkv2kOFQFoBqvT4f+V4BdFJ/TUUb8JSZ+N2nWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:22:de:8f:f3:09:c8:23:03:14:85:ff:05:ec:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=b18cd88da922f05dd7fbafc16b26386c41402086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:9a:7b:d8:20:c6:68:71:9e:ca:a4:a0:f7:
41:e7:0d:4e:58:92:17:14:15:46:99:30:ca:c1:a9:
5d:94:c0:6d:ea:b5:07:08:f5:fe:fb:a6:37:d2:19:
a0:93:2d:90:8c:5b:05:c8:27:35:b0:21:46:6a:60:
d6:84:25:4c:49:ee:7e:25:45:52:0c:08:d4:35:6c:
b4:d7:13:2d:0e:a8:5d:5d:3b:82:4e:f4:52:73:95:
fe:1d:1f:9f:1e:be:d6:9b:3f:0e:c3:d2:d7:de:29:
b9:aa:f9:69:dd:41:7e:7a:4d:8d:4e:ee:9d:3e:03:
0e:56:a9:52:96:7d:dd:b0:a9:49:85:83:70:ac:9a:
01:cf:32:d2:4d:4b:a0:7c:ab:84:64:00:c5:ef:fd:
ef:10:f6:45:eb:cb:e8:a9:1f:f0:cf:ea:1c:14:3a:
8f:7a:0e:84:06:f1:6f:97:7d:f4:50:62:28:87:03:
5e:a8:13:c1:9e:f3:0b:60:6b:99:2c:96:ae:27:0d:
bc:ef:f4:41:92:a9:16:87:b1:9c:fc:60:63:6d:e4:
99:dc:27:5b:a2:e4:12:fd:75:36:c8:ec:95:bd:6e:
35:5f:14:44:d1:f9:60:fd:8d:8d:e2:13:17:29:d7:
b9:c2:9e:ab:29:00:37:9f:28:06:8c:6a:6e:ad:db:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:D8:8D:A9:22:F0:5D:D7:FB:AF:C1:6B:26:38:6C:41:40:20:86
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ed:5a:11:25:aa:cf:ea:02:ab:60:d7:2d:06:92:36:7d:ce:
ce:cf:ba:68:a2:2a:97:fb:38:78:63:89:57:7e:1b:7c:2f:a8:
6d:31:c9:40:d0:4e:fc:d7:d0:b7:77:48:2c:15:ec:35:28:40:
31:4a:82:f1:2f:c2:06:8e:b2:2a:b5:c8:43:3c:2c:03:8b:7a:
46:7c:39:a3:dc:5e:cb:39:e0:ec:b7:38:d8:4c:c0:63:8a:6c:
02:ce:7c:9c:db:b7:9a:82:41:49:9e:5c:f6:1b:41:ad:f2:dd:
92:ea:ce:7d:dd:f5:ad:44:0f:18:bd:63:4a:02:66:b7:ba:d8:
a8:b4:05:58:47:78:18:78:91:cb:da:d9:ff:a7:4d:31:74:37:
81:19:b6:34:81:cc:63:78:e7:c9:78:39:b7:8f:cc:2e:10:0d:
d3:b5:22:af:6d:fa:49:b3:74:78:0a:38:9b:6f:04:40:f8:90:
15:af:26:94:6d:27:b1:1b:1b:4b:a0:a9:fe:77:2d:56:8d:4f:
51:b5:ad:1a:47:c5:69:b8:50:a1:f9:17:2e:9c:e1:3d:43:2f:
f8:96:a0:0e:3a:09:e3:94:5e:18:b6:33:c2:5e:e5:de:e9:01:
fe:5b:0f:45:58:0c:33:ba:8a:af:63:d3:29:a6:28:96:46:0c:
99:16:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:09 2026 by rpki-client