Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: Ka9uoCYtQJ2I7lBstm2hDfKJtWjbm5gIIskGpqrdQc0=
Subject key identifier: D1:F1:9B:56:93:4B:17:BC:97:A2:F5:83:C1:29:A1:D7:AA:3A:4C:C9
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 01A167C664485D470D44D6F6EF212252ECF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 1739
Signing time: Fri 23 Oct 2026 08:00:17 +0000
Manifest this update: Fri 23 Oct 2026 08:00:17 +0000
Manifest next update: Sat 24 Oct 2026 08:00:17 +0000
Files and hashes: 1: 460gpbF1-qqCopVmVYv6L3kkHt4.roa (hash: T/5gkOOg36xYZYGhY1BSI/Kds4ykDu2qme4aoQekPvU=)
2: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: SPLNsyUah63+EODcVQLvbCbEXVIumTHqps6knl49yVQ=)
3: jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa (hash: oupHuMBn+1iVvBy7YaBgSuAcJ/Oc6Y8+7+ZsGW3A7Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:c6:64:48:5d:47:0d:44:d6:f6:ef:21:22:52:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Oct 23 08:00:17 2026 GMT
Not After : Oct 24 08:00:17 2026 GMT
Subject: CN=d1f19b56934b17bc97a2f583c129a1d7aa3a4cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:a9:ae:29:d6:2c:9d:b7:b8:6c:2c:aa:42:
85:ef:fd:42:46:93:14:37:e9:3b:b1:dd:8b:71:0d:
62:92:dd:dd:19:05:e1:ad:b4:fd:51:e4:02:ac:fd:
e8:dd:c3:a6:9e:c9:55:00:2a:f5:3f:16:8b:44:be:
15:ae:3e:c4:26:f9:16:7f:ac:bb:c8:28:bc:eb:f9:
19:76:c8:54:17:95:7f:87:10:12:88:9b:1b:b7:de:
72:a2:2f:65:80:e2:66:07:a6:02:03:7b:10:8c:72:
8b:d9:7c:58:a2:10:b1:11:d9:3c:b2:fb:02:4e:d7:
1f:48:17:e2:8c:ea:c1:2d:18:91:a2:70:92:18:5a:
59:13:f7:94:c0:fc:da:9c:42:dc:23:85:c3:c5:fb:
38:1a:10:d2:5d:19:d8:81:e8:a3:e8:85:d0:04:ed:
e1:72:68:79:fd:83:65:d6:04:cd:39:1c:c7:39:55:
a7:25:b9:c8:68:4f:2d:b7:59:31:8a:38:bb:87:a9:
bd:23:0f:60:c7:f2:97:ca:27:d6:41:5e:05:80:e5:
53:8e:45:46:0a:80:4b:82:e7:23:ac:4e:f0:e4:61:
38:df:d7:23:32:13:ac:10:3a:d3:d6:9b:26:34:72:
72:f4:db:88:3b:d0:24:a0:93:17:0d:f2:b7:f9:8f:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:9B:56:93:4B:17:BC:97:A2:F5:83:C1:29:A1:D7:AA:3A:4C:C9
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:fc:b6:7c:ac:1e:32:51:de:e8:e9:92:a9:3e:0d:93:67:
1b:4e:88:da:2f:9c:27:06:54:e9:a9:1b:72:b3:ba:a3:82:c8:
b4:d2:93:41:fe:25:2b:c2:8c:1c:55:cf:a9:73:7a:9d:f7:2d:
29:9f:bc:77:6b:a5:df:e3:a4:be:db:f1:4d:5b:47:89:b0:f4:
7e:45:a6:69:a1:e2:d5:3c:2b:9d:96:17:20:60:0b:e9:28:6d:
2e:b4:a6:ab:3e:76:2d:3c:64:44:aa:0d:c4:4c:18:1c:a7:b1:
27:68:b2:4c:c7:76:a6:e9:74:ce:8c:1f:e6:a7:ca:54:61:01:
45:f2:6e:1a:b3:fb:9f:03:64:92:bc:71:96:e0:e0:41:d4:c3:
59:fc:39:61:a2:58:78:9f:70:17:21:61:c0:64:b7:ec:c9:6a:
73:25:03:f0:62:88:49:45:d3:e7:90:84:56:fd:c6:4c:fe:0e:
80:e2:41:82:8c:27:03:fc:8a:7b:b8:c7:c7:aa:0f:b9:5c:74:
2d:f2:6d:6a:33:d2:bc:7f:fa:4c:64:85:1b:b6:0c:4b:0e:b7:
50:9a:b4:6a:f1:9d:87:fe:56:a0:4a:de:10:4c:73:b2:b8:80:
fc:d5:fa:3e:69:39:d0:4a:9f:f4:49:0a:a0:fc:3a:80:a1:b8:
f8:1f:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:30:09 2026 by rpki-client