Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: +SdCb7cnrANqRc4nYk8flBJ5mcAioIB6WZb57FvLa6g=
Subject key identifier: D2:1B:90:8B:F3:AC:2B:0D:8D:C8:99:E7:B5:CC:69:C9:E6:66:CA:E6
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 019D389BF1C37E3DB4099B1EC5AF8D1FCCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: dX2VWVhxkJMNlsfJLrJlz/athsM2R+OYR5Rd0lC4LCw=)
2: qTJkke2DmFNJyiG7jfJcZx_vW34.roa (hash: vKcHwa2tV+EZb/fHgrN6A1horjD1vZRSzMun772SEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f1:c3:7e:3d:b4:09:9b:1e:c5:af:8d:1f:cc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=d21b908bf3ac2b0d8dc899e7b5cc69c9e666cae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:d8:1d:b7:c6:a4:46:f6:a8:b5:13:34:ad:
93:f5:75:15:00:4e:c3:20:0a:25:db:3d:16:d6:84:
07:17:a6:69:b8:e9:b2:7f:66:9a:d7:62:85:da:8f:
95:87:a2:6b:bd:03:69:15:7e:6b:a4:d4:5f:85:5a:
62:89:37:ad:af:39:f8:b8:31:7d:a3:0f:c0:62:76:
f8:68:38:80:c4:02:33:6e:bd:d6:28:41:04:84:50:
d3:92:99:b5:6f:68:64:e2:86:59:f6:4e:57:f5:c2:
70:05:cb:f4:ff:bb:4e:f7:74:3a:6a:90:d6:d5:d4:
91:d1:25:dd:88:7d:10:70:21:2d:4f:5c:ea:9c:4e:
5a:c2:47:74:97:03:a7:78:98:6e:f0:61:6f:85:ed:
3a:8f:c6:cc:b8:73:84:37:5f:d3:47:b3:6e:a5:fa:
d0:b6:77:63:23:bc:9f:b9:3e:02:89:a8:fd:4e:12:
37:05:de:b9:8e:41:98:c9:89:8f:1c:dd:2a:47:fb:
b1:ec:5c:b1:27:05:1f:ee:70:00:28:41:d2:a5:3d:
5c:4a:fc:ea:b1:53:2a:12:c8:d9:22:ac:0d:d6:d3:
d0:f0:d1:f2:b3:28:70:8c:d1:1f:6d:e1:10:8b:63:
3c:a2:e9:6b:4a:20:49:c2:fa:63:83:c4:04:89:6d:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:90:8B:F3:AC:2B:0D:8D:C8:99:E7:B5:CC:69:C9:E6:66:CA:E6
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3d:cb:3e:a1:5c:30:aa:d4:80:8d:25:96:38:94:07:cd:33:
e6:56:71:a7:ea:f8:99:7a:a3:2f:c3:e7:a1:aa:51:8d:f8:5c:
5e:0b:62:a7:bc:55:70:90:92:e9:c1:4a:75:48:fc:0e:29:5d:
e5:79:78:ee:39:8e:97:4d:98:b9:80:d4:f7:0c:f7:24:fb:32:
60:04:b4:a2:64:16:f9:52:97:d5:07:bf:d5:d5:47:a8:9d:95:
67:b8:a0:76:b0:df:d0:d3:67:d3:4b:82:7c:b1:11:31:d7:9e:
85:da:7f:9e:dc:0e:ef:d6:10:48:63:d9:9f:10:9d:75:df:4a:
4b:ea:ff:6f:b6:1a:1d:8d:4e:42:ec:3d:87:73:71:1d:77:47:
b6:fc:61:9f:a2:0b:60:00:86:a7:b5:7f:2d:67:fe:75:4e:f0:
45:8c:c3:bd:25:51:3e:1e:7b:5f:92:f9:f2:fd:4e:1c:88:d4:
a7:27:2b:b9:6f:6c:81:77:8e:50:8e:a0:73:bf:3c:f5:87:3e:
f1:e3:93:3b:8d:27:d7:6d:d4:01:ae:bd:0e:ae:33:20:6a:b6:
37:fd:47:95:20:f8:bb:10:29:fc:45:b1:cc:1f:d4:c4:6a:d5:
39:3a:29:1f:7c:3c:5f:71:22:95:39:e3:09:b2:0b:85:3f:0c:
f5:ae:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:36 2026 by rpki-client