Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier: Jy4ZRauw0/cFUOj2jjKIyPuxbHCJH81HhcAibvmrdDA=
Subject key identifier: 8F:4D:C0:29:09:DD:03:7C:E2:96:A1:14:F7:C0:D9:79:56:6C:A7:9D
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial: 019D3865EE67AD8716CC846949F086850023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number: 0F45
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: OZXNlKSU4HlDQrt7u84QISF0bNI+wojs3N5hK27DVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ee:67:ad:87:16:cc:84:69:49:f0:86:85:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=8f4dc02909dd037ce296a114f7c0d979566ca79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:5c:40:cc:94:f3:ee:fd:5b:3c:1f:e1:1a:
03:8f:21:fb:bd:8c:e0:e2:47:64:65:4e:23:d8:e2:
47:57:8c:39:9e:e0:83:e0:cc:0d:30:a0:92:d7:1c:
5d:73:8e:bf:bb:3d:cd:1c:6d:5b:ba:c2:2e:eb:17:
62:4a:fe:c5:8c:ac:b7:8e:8c:62:eb:fd:46:ea:69:
54:64:53:0f:a5:04:e0:25:cb:b0:6b:1d:4a:24:82:
e1:33:18:a3:c7:d4:ba:cf:a0:98:52:ed:c9:08:2c:
51:69:84:a0:0f:43:8f:bc:71:93:d6:fb:e1:ec:c3:
b8:86:3a:2c:53:e4:9d:c4:01:3c:4e:69:9c:f8:f8:
85:16:d8:5a:b2:4d:08:f4:ee:70:ae:11:fd:2f:0b:
05:d2:29:87:94:74:d0:78:be:e5:b6:2f:f7:2d:39:
ce:ae:51:47:84:69:32:33:c7:d8:10:09:10:32:b3:
91:bd:12:d0:6d:e6:11:e0:00:91:7e:ab:5f:a0:f5:
43:4d:ac:41:96:0f:4c:85:96:d9:27:50:7e:48:1e:
a7:49:ec:8d:ff:5b:53:fb:97:a1:b9:d4:ec:aa:5f:
08:32:c2:06:96:b6:12:04:da:8b:20:9a:24:4d:5c:
fc:6f:c9:0c:80:31:a8:08:9e:88:98:53:8d:8b:50:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4D:C0:29:09:DD:03:7C:E2:96:A1:14:F7:C0:D9:79:56:6C:A7:9D
X509v3 Authority Key Identifier:
keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:73:55:5d:26:be:41:51:b2:a7:8c:c7:71:44:cf:5a:3e:
98:58:8a:5f:c8:76:ac:00:4e:e0:1f:58:1f:99:28:f1:5e:b8:
e6:86:7c:1d:82:10:5f:97:cb:63:60:4c:5e:32:53:49:8a:2a:
ac:cf:13:eb:9f:8a:7b:ff:f2:a1:66:8a:fc:26:a7:41:71:a8:
ee:05:81:e9:94:54:09:c7:69:9d:59:df:72:f7:03:c9:62:5a:
01:22:c1:1b:26:c9:8d:3b:b5:f9:de:81:86:e3:08:c8:dd:d1:
36:d5:b2:ca:3b:52:ae:e6:06:6f:db:d9:f9:a8:b6:f9:b2:94:
29:a3:2d:d7:f5:b6:a1:b9:c5:25:34:05:eb:34:5b:b3:27:03:
45:cf:02:9e:4f:c5:e2:db:9e:08:88:61:37:35:ce:05:35:2d:
bd:8c:61:ca:97:65:12:6e:cb:81:0a:a4:de:38:26:7c:32:d2:
61:28:a7:66:dd:17:6a:f3:52:a5:1d:05:6e:22:eb:0d:a1:e4:
a4:d2:ab:76:41:71:4c:d7:23:6b:36:8c:c6:e8:99:17:9b:e0:
04:8b:1e:cb:2c:3d:c7:ad:90:be:00:59:00:bd:c7:2e:e9:93:
2b:2f:ee:53:75:f9:82:28:98:7f:3e:41:d5:b7:66:e0:b3:3c:
d5:a7:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:21 2026 by rpki-client