Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: xJEcwjYqpQ5nAttbgMMS0ucWq2mNG8p3dF2ayWCq2Cg=
Subject key identifier: 5E:F5:0B:18:4C:9A:F9:38:45:93:FA:67:C7:84:B8:25:C0:C6:F8:ED
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 019E039A12E2C2EB9B19606DB73EC119E670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 0664
Signing time: Thu 07 May 2026 18:01:29 +0000
Manifest this update: Thu 07 May 2026 18:01:29 +0000
Manifest next update: Fri 08 May 2026 18:01:29 +0000
Files and hashes: 1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: ZaznCa3bEUgEUtVyOweJhu28L72da1ID22EBgnKA6pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 14:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:9a:12:e2:c2:eb:9b:19:60:6d:b7:3e:c1:19:e6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: May 7 18:01:29 2026 GMT
Not After : May 8 18:01:29 2026 GMT
Subject: CN=5ef50b184c9af9384593fa67c784b825c0c6f8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:80:e9:43:11:3d:25:61:f4:85:bf:e9:9e:
01:9d:82:18:5e:4c:09:72:dd:1f:60:e9:06:1e:91:
65:c2:0b:58:bb:19:3a:b8:ff:a6:0a:df:40:f9:5e:
0b:55:7d:33:3a:92:3b:c6:cb:e2:9a:09:92:5a:db:
1d:2c:95:f0:3c:83:21:49:31:0e:0a:ba:62:34:0e:
b8:03:f6:6c:30:f8:02:a6:fc:21:25:4d:33:39:8d:
99:56:3e:8a:c5:13:d0:9e:5e:c5:66:87:25:4f:78:
85:5c:e8:88:99:d5:b2:e3:97:28:22:82:80:5b:54:
c0:47:e8:27:65:70:14:46:a8:4c:71:25:e7:74:e1:
6b:dd:75:f6:91:89:45:7b:f9:38:c7:26:b5:9b:0e:
e4:b0:89:44:8a:8f:29:4d:8b:c2:2d:18:8f:18:b8:
03:1f:71:0d:6c:74:c6:21:c2:38:bb:fd:44:39:b7:
b6:27:a5:cf:24:3b:8b:80:8c:65:20:b4:cb:11:ec:
e4:e7:4f:4f:56:1c:18:01:c2:86:57:6d:b4:7b:47:
41:c2:56:35:71:79:9d:cf:08:2a:f2:a4:9a:54:bf:
48:a8:40:87:bd:79:98:ed:c4:13:82:5f:5d:eb:61:
8e:c3:92:c2:0d:de:28:05:6b:bd:ac:69:7d:82:29:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:0B:18:4C:9A:F9:38:45:93:FA:67:C7:84:B8:25:C0:C6:F8:ED
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:a0:1a:8a:91:c7:a7:52:15:a3:d9:02:9b:b9:da:55:b6:
00:a3:62:01:0d:7b:cc:e4:ec:eb:ea:9f:76:80:72:a3:55:23:
99:e4:3f:c1:8d:f2:bd:cd:92:47:3c:23:06:70:1e:fe:9e:7c:
83:f3:8d:2d:62:68:96:0f:53:73:6e:9c:7b:d6:7a:a7:12:ec:
04:f5:07:54:e8:cf:52:5e:b3:4f:b8:4d:bc:85:77:15:84:37:
9f:f2:2a:3c:35:02:29:23:dd:8b:bd:88:3e:4a:2f:8c:a3:46:
2e:92:48:ab:44:0a:a3:1c:fb:6e:2a:1d:64:18:85:fe:ae:1a:
98:ca:cd:60:b3:75:9f:7d:d1:c1:14:64:06:b6:47:1c:9e:01:
76:4b:06:cc:c9:07:83:4b:f3:d5:51:1a:10:78:79:bb:56:26:
c6:7f:eb:fe:62:c7:cc:b1:c3:e8:10:a6:f9:ed:06:bd:b3:2d:
06:a1:93:13:0d:01:e3:2a:7d:b3:06:b3:23:52:f6:9d:7e:af:
70:54:95:6b:7a:8c:9f:cc:22:dc:9f:8f:9a:df:b3:bd:8e:f6:
52:ef:6f:c9:87:fb:1f:f7:b5:f1:c5:eb:9b:c9:c4:0c:79:95:
39:94:8e:2d:20:43:20:1f:03:d7:f8:c8:05:be:e6:22:34:0a:
22:a0:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:27:04 2026 by rpki-client