Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
File: W0ShsaCcqepQ5aW9W3d737XzVls.mft (raw, json)
Hash identifier: aJDgA+n62TjhGW4/9r7aCZLi9th+2eO0pToQudycVKI=
Subject key identifier: F2:2B:34:7E:CA:FC:CF:30:09:43:B5:B7:62:8B:43:1B:16:FA:9A:66
Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
Certificate issuer: /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Certificate serial: 01A17CCF1224178D2FDB415B8C388FCF0885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
Manifest number: 02FE
Signing time: Tue 27 Oct 2026 10:01:47 +0000
Manifest this update: Tue 27 Oct 2026 10:01:47 +0000
Manifest next update: Wed 28 Oct 2026 10:01:47 +0000
Files and hashes: 1: W0ShsaCcqepQ5aW9W3d737XzVls.crl (hash: 424d0BjeWqubF55iVK+pbw0L36E2i30NbxT9xD9I8OI=)
2: y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (hash: w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:12:24:17:8d:2f:db:41:5b:8c:38:8f:cf:08:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Validity
Not Before: Oct 27 10:01:47 2026 GMT
Not After : Oct 28 10:01:47 2026 GMT
Subject: CN=f22b347ecafccf300943b5b7628b431b16fa9a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:6e:ad:11:11:20:da:70:42:db:df:bf:2a:
84:65:76:48:a6:08:2f:ab:63:08:0d:a9:af:77:fc:
dd:8d:b1:3d:85:82:de:1a:e4:9d:cd:64:70:3d:a9:
56:98:32:ac:c8:79:dd:c8:83:ff:29:cf:b1:db:59:
15:ac:9a:96:84:9e:e6:a7:b2:c4:03:71:12:31:bf:
88:54:9b:33:fd:51:eb:a0:cb:33:94:08:77:57:f4:
d8:79:f3:1a:59:14:47:9e:3f:5a:a8:36:73:88:c3:
cf:32:11:ba:b3:93:1f:4e:43:9c:fa:2b:58:de:8d:
26:cf:0c:49:6a:94:5c:91:7f:2f:c1:bd:8f:bc:3a:
f6:14:a9:5e:ee:56:5c:28:6c:b8:93:66:b1:c7:4c:
3b:d8:5b:12:20:18:1b:17:c2:6e:91:26:d2:58:11:
12:0e:e7:09:8d:36:bf:86:18:71:1c:2a:47:d5:28:
1f:92:98:97:e3:09:9e:92:c8:96:40:aa:b4:c8:c2:
48:1a:5b:52:1f:53:43:90:43:b3:5b:0d:3c:97:41:
5c:36:a3:4e:20:4b:24:11:11:b8:d3:cd:e0:d0:6f:
f0:30:0f:5a:b1:2a:9c:ba:a3:b5:15:94:70:1b:79:
dc:89:10:e6:3f:c0:75:97:01:d7:7b:9f:33:a4:4e:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:34:7E:CA:FC:CF:30:09:43:B5:B7:62:8B:43:1B:16:FA:9A:66
X509v3 Authority Key Identifier:
keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c1:8f:2f:ac:d8:0e:8e:72:e8:22:7e:7f:e4:94:fe:7a:96:
0f:65:52:53:9a:de:68:11:b2:14:fa:ba:d0:06:e4:cd:88:4d:
10:07:39:d9:06:fb:d9:a5:47:d1:2f:65:2c:28:18:9a:e1:94:
dd:21:56:b6:2d:01:06:fc:f5:72:9f:5e:75:44:a6:20:5d:45:
73:e4:8e:cd:e8:e7:1e:08:6b:ad:4d:4b:b0:8d:5d:a1:d6:d8:
a9:99:97:ec:09:87:83:3e:fd:df:ed:d1:62:17:98:e6:de:d2:
8d:4b:93:53:8f:10:f9:d5:fc:a4:2e:9a:13:38:6f:0f:62:54:
bd:3f:90:18:70:4b:73:7c:4d:96:2d:10:fa:4e:2c:d2:94:ab:
8b:be:c5:c8:cd:9c:55:54:a5:49:bd:1b:1c:41:63:f9:d4:38:
c1:f0:ce:2e:06:22:12:ca:43:fd:ee:8d:31:51:a2:42:85:4d:
2e:90:67:b3:22:ce:77:52:d7:e9:38:1a:63:2e:9d:e1:71:21:
61:92:8c:5b:20:76:27:a1:7f:2c:d0:8c:f0:35:9d:cf:d8:5c:
c3:5e:ec:41:35:7d:19:24:d0:c7:ff:24:17:80:44:e7:8a:38:
98:70:6c:b0:ba:4e:41:49:e6:3e:e6:c7:ac:32:a9:62:5e:a9:
dc:8e:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:29 2026 by rpki-client