Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: IGxKhvd8xiway7UnHBp5rmK0KQ7BCqVNbmHx1aj9IfU=
Subject key identifier: FC:35:28:A7:68:5D:8C:A0:52:16:CF:9A:28:EA:87:B5:7C:A3:E3:21
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 019D382E16AD810C8B688F60971358597153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 03CA
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: DrL-3puYiO1XcvOHU3z8CMJINeA.roa (hash: cuMSInirqa12rGsZAI3BCtXNacI0/0nGWC9/J3U/TsU=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: eQbUiCpOwSYFpammAnrbpDYzr5F9IZCxIXCfa0t2p14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:16:ad:81:0c:8b:68:8f:60:97:13:58:59:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=fc3528a7685d8ca05216cf9a28ea87b57ca3e321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:53:fd:f9:1c:ba:ec:25:e6:fd:88:85:e0:
5a:c5:07:86:51:7d:17:9f:06:23:11:ed:e3:c3:a6:
8b:66:db:ba:ee:2a:f3:9e:c9:a5:73:23:d0:3e:82:
b3:d9:ff:89:3e:75:34:58:87:8c:b4:de:58:ab:cb:
aa:51:6b:71:b7:9f:f0:7c:17:54:00:eb:f5:fa:97:
f6:d3:38:fc:f5:c5:3b:e6:e3:a2:00:80:c3:1a:5f:
0f:14:ed:5e:86:96:db:cd:f6:4c:86:53:ab:19:60:
f7:af:38:f1:c3:f3:c4:1d:d4:70:68:7c:d4:98:96:
6a:08:01:be:0e:5c:d8:2a:0d:cc:7e:0f:b1:e1:85:
f5:ba:e9:28:29:5d:3c:66:df:64:e1:d2:22:15:24:
58:99:66:9c:e8:0e:50:64:3a:12:8f:e4:72:ed:47:
e4:52:3f:41:dd:24:32:c9:5a:7a:c9:12:11:31:64:
3f:58:82:48:6b:b2:e9:14:c5:5f:3f:af:bb:c6:75:
5e:ae:03:2d:5e:39:2b:af:71:f8:a1:5d:0c:c9:9e:
3d:bf:f7:b3:40:f9:f9:ff:05:c4:88:e5:15:d5:d3:
35:6f:09:43:97:d7:16:6e:75:31:04:6a:e7:08:aa:
c6:0f:f2:5e:06:c9:20:73:26:e6:01:cb:1e:a6:65:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:28:A7:68:5D:8C:A0:52:16:CF:9A:28:EA:87:B5:7C:A3:E3:21
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:60:f8:8e:cd:a0:23:b2:2d:cc:11:ed:16:e8:00:6f:d2:22:
79:70:37:2d:bf:42:3c:fc:cd:7a:f8:b9:c0:a3:4f:1a:dd:7b:
64:7e:6f:05:f4:35:99:b1:fd:20:cf:71:20:27:5d:c7:a0:41:
03:36:f7:01:4b:8a:83:88:8d:ef:35:94:2b:cb:be:87:2f:1f:
61:9e:23:d5:06:fc:4d:9b:fc:95:81:a7:ec:77:94:9c:cc:85:
82:1f:30:31:1d:3e:e9:86:16:a9:34:c9:27:cf:fd:19:81:04:
d4:5f:3c:d2:cb:63:30:8d:8d:29:93:07:a6:83:ae:dc:7c:33:
d1:0c:68:91:97:e5:00:0f:06:c1:9a:c8:89:ec:c1:87:ee:a8:
f0:08:3a:86:a7:36:fa:75:30:ad:2d:6f:8a:83:1a:39:0a:1d:
3b:91:04:96:c6:da:ef:88:c2:37:ea:e1:73:20:21:52:aa:dd:
7b:89:36:4f:d5:25:32:86:cb:03:05:bb:be:20:27:f1:ea:0d:
07:8f:9b:f0:18:04:35:5d:79:31:61:a2:7c:dd:6c:73:f8:76:
c8:85:f2:bb:a7:ac:fe:96:72:de:70:27:44:bc:af:ae:64:e2:
fc:b2:ea:06:89:c0:c0:5f:70:7c:2f:d4:b2:60:d9:73:cc:76:
53:59:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client