Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
File: WqMimeK05SO32u82O36srTLFxkk.mft (raw, json)
Hash identifier: ztbow1JryGK2YFjzUyeJoDwF+w+7NgC/HJUn66MP8Xw=
Subject key identifier: F2:EB:2D:28:EF:45:F7:CF:48:68:BE:25:79:04:98:82:76:6C:D6:2E
Authority key identifier: 5A:A3:22:99:E2:B4:E5:23:B7:DA:EF:36:3B:7E:AC:AD:32:C5:C6:49
Certificate issuer: /CN=5aa32299e2b4e523b7daef363b7eacad32c5c649
Certificate serial: 019D38D2AB20458C8612A3F18EABEF96FDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
Manifest number: 45
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: WqMimeK05SO32u82O36srTLFxkk.crl (hash: xfDFmUkhvALc+mnBwlmQZfSOORZL2IVEHL9JjNvgRdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ab:20:45:8c:86:12:a3:f1:8e:ab:ef:96:fd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa32299e2b4e523b7daef363b7eacad32c5c649
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=f2eb2d28ef45f7cf4868be2579049882766cd62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:17:37:d3:ae:7d:9c:7a:8f:34:a5:67:c2:
e0:68:f6:22:6c:c8:51:1c:2a:eb:1b:01:ed:6c:65:
77:b9:5d:da:6f:ea:90:86:2f:56:f8:c8:0d:88:37:
ee:b6:d5:6d:28:dd:37:7a:9a:bf:3f:a2:d7:93:28:
e6:db:50:33:41:66:b7:c8:30:5c:1c:d0:51:56:89:
c7:63:77:eb:68:07:f3:c9:a5:bf:ce:b0:be:af:3c:
aa:5a:4a:f1:aa:26:d8:74:24:d8:d8:41:f6:ec:c9:
37:8e:90:6b:5f:26:90:9f:51:72:e7:5a:ec:cc:35:
e6:b4:11:35:b0:d3:43:81:22:ee:6b:64:58:7b:99:
cd:9b:17:21:83:3d:2a:ac:5c:aa:f1:8e:e2:2f:4a:
70:74:08:a9:00:05:51:a5:24:ee:76:47:1b:91:07:
21:d1:a7:6a:4e:8f:a1:33:e1:18:58:44:56:63:8c:
c5:a1:ee:63:03:83:5a:7f:4e:56:c2:d9:bb:d2:a1:
8f:55:62:82:e2:7d:1f:16:29:fb:aa:d3:01:d4:2d:
1d:2a:13:86:71:4a:ae:36:c8:7c:cf:20:dd:5f:ae:
60:4b:7b:08:d8:bf:2c:0d:b0:d8:0c:a6:06:f7:3d:
11:34:9e:35:8a:52:01:be:3a:84:81:13:c5:59:56:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:2D:28:EF:45:F7:CF:48:68:BE:25:79:04:98:82:76:6C:D6:2E
X509v3 Authority Key Identifier:
keyid:5A:A3:22:99:E2:B4:E5:23:B7:DA:EF:36:3B:7E:AC:AD:32:C5:C6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqMimeK05SO32u82O36srTLFxkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c313f2-6698-4163-b483-ac207878c72f/1/WqMimeK05SO32u82O36srTLFxkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:48:6e:27:ae:84:48:9b:37:4c:18:c8:ed:f1:5a:d6:ce:b9:
25:b3:cf:4e:5d:cc:2e:4b:08:71:9a:78:19:62:35:3f:61:de:
a5:23:2e:15:c1:f9:de:bc:ea:d5:4d:62:5a:b9:79:19:fa:ed:
46:03:7a:47:87:e4:23:93:c1:c8:ad:7b:4b:e6:e6:2c:25:02:
d5:8b:97:33:fc:34:82:67:ba:a0:47:b4:04:fc:4f:e4:ca:e4:
4f:42:98:68:1d:f6:33:f7:06:1f:89:f9:62:e1:62:ca:e2:19:
f3:94:e3:d5:4c:85:0e:3b:76:63:a9:d8:ed:4f:04:39:79:e7:
bd:08:68:f3:a4:fd:1e:02:89:46:07:03:43:be:b2:41:b3:88:
0c:06:a9:66:b3:3f:5a:3b:79:d6:86:d4:dc:ce:2b:de:da:b7:
0d:4d:58:a2:c3:f0:64:5e:45:69:e9:52:3e:e0:af:44:0a:6e:
dc:b6:fe:c7:3b:11:c1:f7:62:61:1b:31:17:31:10:18:51:bf:
23:67:cb:c8:1a:ae:09:63:da:6a:b7:1c:6a:87:69:44:94:64:
bc:06:fa:8c:0e:b3:77:4a:29:a0:1c:c3:e9:e8:b1:2a:8a:df:
82:64:62:5e:07:09:aa:1e:99:9b:4f:e8:5a:17:01:3c:4c:c1:
cd:b5:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:27 2026 by rpki-client