Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: qWQ6aPLBdS9F1n89s1E7iTKaZSV1j7UnmHsnegjH/ik=
Subject key identifier: 4A:47:DC:62:97:6D:31:01:2A:4C:0E:15:9A:52:72:F6:89:A1:76:AD
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019CE4481315E7F45412B32786903ED2B5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 0CA5
Signing time: Thu 12 Mar 2026 23:00:54 +0000
Manifest this update: Thu 12 Mar 2026 23:00:54 +0000
Manifest next update: Fri 13 Mar 2026 23:00:54 +0000
Files and hashes: 1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: 0J2cUGIefqckGXxQXSeTX1yXKeDn/OXulCD2BvnD6rg=)
2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:13:15:e7:f4:54:12:b3:27:86:90:3e:d2:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Mar 12 23:00:54 2026 GMT
Not After : Mar 13 23:00:54 2026 GMT
Subject: CN=4a47dc62976d31012a4c0e159a5272f689a176ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:43:ca:d8:d2:3f:aa:4f:ad:59:c2:d1:05:
75:e3:d5:9d:9a:6b:d3:d5:a9:6f:d9:c5:9c:ca:4d:
89:62:8c:6b:2d:bc:cf:a4:08:b2:5e:6f:9a:67:18:
90:dc:f6:80:1a:64:71:95:9d:76:0e:df:ef:25:74:
be:f3:88:a4:30:b7:3b:e6:72:d3:13:6d:cd:8a:b3:
bc:34:10:06:c5:7d:88:27:01:06:6f:e8:0d:38:c6:
5b:34:02:6e:e1:3f:25:89:96:03:cd:76:1b:95:c8:
b9:16:34:14:b5:38:cf:34:68:17:d5:ed:8f:0d:73:
77:4f:4d:64:ad:43:f5:7d:71:c7:ae:bb:48:28:a3:
3b:69:b8:25:a8:b7:52:d1:c8:ab:0c:2b:c0:75:34:
6a:af:95:36:f4:80:b3:a6:c9:46:cb:71:03:30:74:
4c:19:fb:e9:83:f2:77:ac:5a:fa:46:1e:34:20:0c:
0b:0d:fa:85:45:f0:c3:83:c3:41:de:ce:53:e3:0b:
b1:08:c0:57:11:db:39:db:43:09:61:86:18:3b:53:
67:59:67:16:dd:4e:b0:c4:b7:57:75:52:c0:77:b6:
f1:ce:42:71:d4:7f:28:13:7d:2e:fa:d9:12:cb:d5:
38:f4:6e:58:1a:bd:7a:cf:70:8e:c5:bf:69:c0:d9:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:DC:62:97:6D:31:01:2A:4C:0E:15:9A:52:72:F6:89:A1:76:AD
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:24:ac:42:8f:43:04:1f:7b:3b:db:81:76:ed:61:cf:38:
be:33:1b:27:2c:b9:1d:13:7c:ef:d8:e3:b2:c6:81:fe:7b:ed:
76:da:42:af:b8:55:95:32:c9:b5:d5:82:c8:25:42:9c:88:2f:
39:77:63:13:b5:c1:03:ed:a6:2b:39:bb:17:b6:83:7b:f4:56:
ce:3c:1b:32:90:6c:63:66:da:69:02:c5:84:ff:d9:33:da:e1:
28:1d:a6:27:c2:cb:8e:98:56:78:e4:75:8c:5e:12:db:43:3e:
23:bb:c8:b0:8a:39:bf:b6:5b:7b:1c:4b:1d:4e:27:19:8f:26:
71:7b:56:4c:92:49:11:60:a5:dc:a8:e0:d2:67:9a:ea:ab:ee:
38:d1:32:a1:b7:46:3f:af:06:82:73:f1:c6:e6:94:ee:83:b9:
cc:e2:e1:9c:cd:98:df:e1:0c:45:09:50:37:f2:4b:ec:3b:55:
4c:ba:fc:f6:7b:fc:bf:14:10:44:2e:9f:bf:0c:62:00:de:53:
da:9d:b6:4f:5a:1c:68:40:70:cf:63:36:f2:f2:ed:d7:70:0c:
9c:db:fa:b1:5b:15:1b:02:a4:a7:43:87:49:fd:b4:0b:ef:cb:
05:09:b1:29:cc:13:ad:03:15:35:db:33:d4:1c:b5:d7:34:35:
e3:b9:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:51 2026 by rpki-client