Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: dli9xWCr7YdMwkHM6u0LgD+qtnJKAQP/Xrf85LmQQd8=
Subject key identifier: 22:23:9A:53:E2:53:6D:05:E5:0F:7D:6E:E3:94:BD:08:F4:16:1A:43
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019DCDF580DE13337927D9D71A36AE376AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 0D1E
Signing time: Mon 27 Apr 2026 08:01:51 +0000
Manifest this update: Mon 27 Apr 2026 08:01:51 +0000
Manifest next update: Tue 28 Apr 2026 08:01:51 +0000
Files and hashes: 1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: ddFGiDs7KSo6TV7JbnPfXmuQZUXbVLL/smFbSQM0yQo=)
2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:80:de:13:33:79:27:d9:d7:1a:36:ae:37:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Apr 27 08:01:51 2026 GMT
Not After : Apr 28 08:01:51 2026 GMT
Subject: CN=22239a53e2536d05e50f7d6ee394bd08f4161a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:eb:d4:3e:71:56:30:ba:71:ac:d5:a4:8d:
11:86:20:1c:72:aa:cf:64:71:ae:e2:d7:71:6e:0b:
2a:b8:3e:14:43:5c:05:9a:f6:86:d3:d2:fe:ea:d9:
ea:59:18:48:78:43:f3:91:3a:71:c4:da:0d:f9:2d:
64:bd:39:40:12:42:26:b1:39:69:cf:46:92:d1:b5:
43:d8:c7:4f:e2:b8:6d:04:47:7b:7c:d6:68:6d:cb:
1b:96:b8:c7:65:7e:15:57:1a:5d:c9:da:be:26:c8:
24:4b:5f:f0:22:cb:2a:11:ba:de:10:53:b6:33:67:
5d:4f:05:f4:c3:c5:1a:12:e6:3c:37:62:53:8c:b9:
b1:3e:4d:28:0c:f4:39:fa:b7:80:aa:41:7f:d7:b1:
5a:3d:a3:6f:f4:59:fc:c3:fe:27:13:b5:6d:8a:ee:
06:c6:6b:2e:60:47:db:cb:5a:7f:8c:96:40:06:87:
08:c6:a0:67:69:ce:1f:b2:a1:f8:ed:19:2e:ff:66:
ad:92:44:57:1d:01:e9:ed:71:42:d5:2b:81:cb:cc:
ff:9a:92:05:9e:6b:5c:84:dc:5d:fd:ab:fd:f2:01:
5e:75:6d:23:37:bc:06:57:90:e9:14:f4:02:90:7e:
f4:59:4d:4b:22:19:55:b8:3b:2a:4c:0a:43:b5:b1:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:9A:53:E2:53:6D:05:E5:0F:7D:6E:E3:94:BD:08:F4:16:1A:43
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:37:c1:e0:ec:a7:10:0e:6e:fd:af:e9:90:b5:a0:30:95:f1:
a3:61:f1:2e:f0:2c:c4:7f:c1:44:cf:ce:fc:e3:3a:95:6a:9c:
d3:90:7c:56:0d:01:82:f9:c7:89:98:a6:72:ae:6a:d3:57:e9:
f6:7f:b6:04:9f:3a:1f:bf:58:69:95:d5:1a:28:cf:13:7a:8f:
49:50:11:d4:8f:55:c2:3c:dc:0e:ac:41:7a:bc:9d:fa:c4:be:
71:71:80:86:71:03:6f:23:7f:5d:06:82:87:c7:d1:9e:53:03:
eb:26:09:d4:b9:ff:c1:b6:84:30:6c:67:72:27:2f:6d:89:8f:
83:a3:a6:bf:eb:d0:d1:3d:d3:91:bd:c7:e7:00:db:1d:10:e6:
c6:b9:8f:d7:97:73:aa:72:5f:5c:8e:f0:76:23:c6:56:ac:78:
f7:b6:27:c7:a4:68:89:18:f2:de:c1:79:ab:5b:44:1a:4b:a8:
12:fe:ee:2d:d4:b6:63:8a:99:b1:a9:0b:f6:a5:11:9f:bc:9c:
a0:89:70:2a:ea:45:49:77:46:31:2b:56:fe:02:49:e6:6b:8d:
43:01:7c:30:bc:ee:1e:b7:36:c2:90:e3:58:fe:15:e5:f0:70:
e7:f2:01:9f:16:05:f5:0a:75:e5:c9:a6:94:9d:5b:e9:7e:75:
62:d8:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:59 2026 by rpki-client