Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File: W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier: OYGPLe+TfSYwHmr6QdF7dKwdDNSv4oPrYLEuLrt71xM=
Subject key identifier: 3A:3A:5E:21:58:30:3B:9B:CD:8F:30:6C:DD:D2:1D:6B:5D:E1:87:80
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer: /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial: 019DDD6814365C9726FC6324AB0F78ACA514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number: 93
Signing time: Thu 30 Apr 2026 08:01:18 +0000
Manifest this update: Thu 30 Apr 2026 08:01:18 +0000
Manifest next update: Fri 01 May 2026 08:01:18 +0000
Files and hashes: 1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: hTnU/XgbCv6G5ZsqrJOxNxH/nULJJnT8Qv1BR9BblZs=)
2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:14:36:5c:97:26:fc:63:24:ab:0f:78:ac:a5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Validity
Not Before: Apr 30 08:01:18 2026 GMT
Not After : May 1 08:01:18 2026 GMT
Subject: CN=3a3a5e2158303b9bcd8f306cddd21d6b5de18780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:28:d4:75:bb:14:c9:25:20:6f:4f:76:ed:
c3:9a:83:15:fe:fe:0e:d9:95:ec:22:22:b8:9f:6f:
f1:45:77:7d:41:01:39:02:12:36:e5:06:a6:78:e7:
a0:18:52:2c:2a:49:6e:2b:18:44:94:90:39:85:01:
62:ec:73:b9:50:55:26:2a:3c:e7:1f:96:4d:d6:49:
a9:35:aa:56:8f:ea:93:ff:98:2d:fe:07:ad:68:ee:
79:81:c4:94:1e:07:a8:d2:bb:93:b8:a5:d7:be:b2:
da:9a:58:6e:db:f0:e7:2b:fe:d0:eb:6d:bb:fc:30:
cb:6c:2e:48:60:ab:2c:9b:ad:3a:b1:5a:1d:88:e0:
49:ba:cd:29:3a:54:52:4d:14:6d:a5:3d:70:79:13:
59:cc:31:25:46:e0:3d:64:c1:6c:5a:03:fe:ee:f0:
a1:7f:6d:1b:c8:ac:81:ed:c5:8f:5b:ce:8c:71:4e:
1c:dc:e4:20:ad:7d:ba:4d:73:aa:eb:29:bd:ba:50:
26:66:0c:57:3b:da:0c:d6:ae:7f:d9:30:8c:d2:2f:
e4:72:ad:5c:31:ec:56:e8:6e:bf:ca:eb:61:4e:3f:
cb:50:1d:58:38:4d:9e:7d:39:8a:95:ec:6f:66:ce:
de:32:23:94:ed:96:41:50:2e:9a:bc:73:ac:e7:06:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:5E:21:58:30:3B:9B:CD:8F:30:6C:DD:D2:1D:6B:5D:E1:87:80
X509v3 Authority Key Identifier:
keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:68:8d:34:f3:48:cc:1d:bf:f2:a1:91:bf:06:1b:8d:53:1f:
4a:dd:39:91:69:05:c4:fd:b6:f7:a2:da:e9:66:de:11:3f:05:
e6:3c:db:c6:20:aa:72:54:e2:dc:9a:13:67:e3:0a:b2:f5:7d:
3d:82:29:33:4c:38:9f:c8:00:df:ee:09:fc:75:e0:01:11:6e:
93:e0:75:8d:4d:a6:d7:af:91:8d:51:da:4e:83:91:67:76:71:
22:71:73:23:9e:c5:a8:66:25:11:a6:b1:7f:73:92:1b:9f:15:
4e:0c:ea:69:e2:6b:68:65:38:63:62:43:4b:38:8f:d9:63:61:
36:e1:25:c4:1a:a0:6e:47:3d:81:6f:d9:93:dd:8c:37:a0:08:
11:45:d6:51:97:76:4b:47:25:44:40:bd:0e:0b:7e:3a:00:f5:
db:b6:8e:70:3d:6b:c8:da:0c:b2:16:e5:16:b4:be:c6:d4:8f:
0f:10:5f:5d:ad:d8:f0:05:3e:c1:b9:e1:e3:c4:c1:02:7d:83:
b9:a2:a4:00:d1:7e:ae:f0:9f:ff:9c:41:81:3f:84:34:03:24:
4a:0a:46:b2:d4:5a:9b:df:8e:8d:9f:6c:83:0c:e5:5e:a6:60:
4b:36:79:93:93:99:a4:b3:1b:f4:fe:2b:e2:51:70:e7:ba:50:
18:c9:8e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3daBQ2XJcm/GMkqw94rKUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNGFjYzFkZjI4NTgzY2JlMzk4NmY2NWFkM2EwZDJhMTI3
MWQ3OTYwHhcNMjYwNDMwMDgwMTE4WhcNMjYwNTAxMDgwMTE4WjAzMTEwLwYDVQQD
EygzYTNhNWUyMTU4MzAzYjliY2Q4ZjMwNmNkZGQyMWQ2YjVkZTE4NzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIo1HW7FMklIG9Pdu3DmoMV/v4O
2ZXsIiK4n2/xRXd9QQE5AhI25QameOegGFIsKkluKxhElJA5hQFi7HO5UFUmKjzn
H5ZN1kmpNapWj+qT/5gt/getaO55gcSUHgeo0ruTuKXXvrLamlhu2/DnK/7Q6227
/DDLbC5IYKssm606sVodiOBJus0pOlRSTRRtpT1weRNZzDElRuA9ZMFsWgP+7vCh
f20byKyB7cWPW86McU4c3OQgrX26TXOq6ym9ulAmZgxXO9oM1q5/2TCM0i/kcq1c
MexW6G6/yuthTj/LUB1YOE2efTmKlexvZs7eMiOU7ZZBUC6avHOs5waZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo6XiFYMDubzY8wbN3SHWtd4YeAMB8GA1UdIwQY
MBaAFFtKzB3yhYPL45hvZa06DSoScdeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzByTUhmS0ZnOHZqbUc5bHJUb05LaEp4MTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yMGY0YWEtMWMxYi00OTY0LWEwMzMt
YjViNzA3MTZkODNkLzEvVzByTUhmS0ZnOHZqbUc5bHJUb05LaEp4MTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yMGY0YWEtMWMxYi00OTY0LWEwMzMtYjViNzA3MTZkODNk
LzEvVzByTUhmS0ZnOHZqbUc5bHJUb05LaEp4MTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2iNNPNI
zB2/8qGRvwYbjVMfSt05kWkFxP2296La6WbeET8F5jzbxiCqclTi3JoTZ+MKsvV9
PYIpM0w4n8gA3+4J/HXgARFuk+B1jU2m16+RjVHaToORZ3ZxInFzI57FqGYlEaax
f3OSG58VTgzqaeJraGU4Y2JDSziP2WNhNuElxBqgbkc9gW/Zk92MN6AIEUXWUZd2
S0clREC9Dgt+OgD127aOcD1ryNoMshblFrS+xtSPDxBfXa3Y8AU+wbnh48TBAn2D
uaKkANF+rvCf/5xBgT+ENAMkSgpGstRam9+OjZ9sgwzlXqZgSzZ5k5OZpLMb9P4r
4lFw57pQGMmOkw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:40 2026 by rpki-client