Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: um56NIvETqLR9ExjNT08yxUcurl6TJMBwOsxnM3a2d0=
Subject key identifier: B6:68:45:9C:E6:C0:BE:76:04:88:7B:DB:36:7C:9A:2E:92:71:3D:74
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 019D38D349360350A291B6981019DC691ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 0436
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: 4gS9OM9nIajXbkfjnuhd7skaDwIAJkf8MwW0V9upjFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:49:36:03:50:a2:91:b6:98:10:19:dc:69:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=b668459ce6c0be7604887bdb367c9a2e92713d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:ca:48:65:e7:8b:96:9c:1d:e6:6b:45:35:
d1:79:15:9a:24:4c:05:55:70:03:80:77:bc:18:4e:
47:dd:1a:2d:cd:52:0a:ce:12:d1:79:7c:f7:b9:00:
2c:3e:3d:4d:d4:f0:c4:27:33:82:a9:70:d1:a5:27:
d1:89:65:f3:03:29:11:71:e0:f7:78:61:a1:0f:d5:
02:a0:47:d5:72:36:89:8f:0b:bb:cf:6b:2f:de:1b:
91:de:a1:12:8e:62:b2:92:30:97:1f:55:3c:d0:a9:
5e:99:8a:1d:e6:03:74:80:dd:9a:68:c5:12:26:ae:
41:bb:50:56:66:32:b8:7a:52:29:0e:8a:e1:a7:a1:
27:d2:41:1c:34:71:33:4a:de:d1:07:1b:d7:8b:8a:
cb:58:f0:86:b8:41:35:e6:1e:87:6f:ce:c3:3f:c2:
06:00:74:20:1b:74:1d:49:20:6f:d8:b5:d0:a1:88:
8d:6e:8c:3e:b9:1d:38:ca:0b:db:6b:f4:ed:53:04:
bc:6d:66:3a:a2:9f:bb:6a:8a:cf:41:9b:ae:d0:d7:
aa:a8:39:10:fb:99:ae:04:81:98:95:13:81:4e:98:
b2:53:0f:fb:a9:a1:1d:e5:62:18:b7:3e:0a:78:0a:
f9:54:03:0b:b8:f5:8d:16:77:30:bf:b1:37:84:ae:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:45:9C:E6:C0:BE:76:04:88:7B:DB:36:7C:9A:2E:92:71:3D:74
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8a:01:88:a2:4a:49:c0:fb:f5:a0:50:59:33:e6:71:9b:7e:
07:1e:45:e9:55:32:b7:4b:0c:4a:c1:1a:a1:76:36:d7:55:e3:
d7:a7:3d:b5:90:79:63:9f:64:a6:d6:3c:39:b3:9b:93:bc:a5:
1f:97:2f:fa:73:76:60:6d:71:82:78:6f:b2:d5:da:0c:05:53:
36:2b:0c:f9:91:fa:4f:37:85:f5:0f:33:82:3e:39:45:1f:c2:
58:2f:82:f6:83:89:89:46:70:f2:b9:4b:70:5c:73:19:f5:c1:
78:9a:1e:d2:89:aa:17:d4:30:ef:f4:df:b8:a7:32:71:fd:32:
27:d2:e4:13:18:42:ef:f8:1a:8a:48:39:e4:a1:5e:b8:ab:75:
19:90:61:ec:d8:f5:77:1b:33:35:a1:27:f9:39:ee:98:6b:f3:
11:05:90:fd:db:9a:eb:f3:6b:7a:55:eb:62:3f:1e:b9:9b:7c:
f5:f7:46:3a:07:71:5a:c7:b6:01:e4:d1:ab:1f:73:6c:cc:aa:
66:5d:9e:33:ed:a4:03:02:82:9f:74:9f:b2:23:b9:55:ee:ce:
08:d3:9f:01:fe:0d:50:1b:5d:68:8f:64:9c:a9:28:43:d2:e7:
2c:24:c1:96:ca:66:6a:a9:02:4e:5f:ba:e4:22:a6:7b:66:85:
87:86:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:09 2026 by rpki-client