Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: XACgyEaLjQpYDtTXzcv33lYZnxoeig8sCpujGFefaIw=
Subject key identifier: 61:54:D2:B8:A9:11:77:A9:FC:42:E7:B1:E2:BD:FD:BE:F4:68:33:D3
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 019D9CD1C2FE03113DB05FC692BF9EA79977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 7C
Signing time: Fri 17 Apr 2026 19:01:25 +0000
Manifest this update: Fri 17 Apr 2026 19:01:25 +0000
Manifest next update: Sat 18 Apr 2026 19:01:25 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: wxsaq+02px8nNYv1YgtVIDbnhQJREArypaNzVXGckAo=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:c2:fe:03:11:3d:b0:5f:c6:92:bf:9e:a7:99:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Apr 17 19:01:25 2026 GMT
Not After : Apr 18 19:01:25 2026 GMT
Subject: CN=6154d2b8a91177a9fc42e7b1e2bdfdbef46833d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:c4:80:d9:b7:35:eb:ef:ff:f3:63:94:13:
b7:a9:92:16:91:40:f8:56:20:09:ae:b6:e4:89:b4:
7e:ae:15:34:03:72:9a:b0:b9:9b:a1:d0:39:5a:4c:
8c:42:8c:c3:e7:fc:ca:3a:72:36:c8:04:35:8c:f2:
0d:a4:ba:c1:62:ba:56:d3:a5:f7:d7:b2:34:e6:58:
71:1c:0b:cd:28:ee:b8:f6:1a:e2:8f:38:56:25:ca:
21:7a:97:c4:f6:84:a3:d8:7f:f4:95:31:a0:fe:53:
be:c2:4e:10:2f:3f:f6:5d:de:e2:a3:a7:b2:9a:7d:
70:5e:eb:12:ed:f7:d0:29:9e:ad:f3:0e:50:3a:d9:
b5:5c:33:6a:90:b2:b9:0f:74:99:b7:47:3b:02:d9:
47:19:d6:90:89:88:40:a1:75:4d:0b:9a:30:ae:db:
6d:73:95:71:18:b9:72:e6:0d:06:ad:ac:9c:74:f4:
38:7c:c9:f4:df:17:35:4c:8c:86:06:93:32:e6:b1:
8c:e8:5d:7c:e0:8e:ec:94:da:5c:c0:1d:3e:96:3e:
e0:54:12:4e:44:63:bd:c3:7a:da:fb:71:bf:11:94:
26:0e:e3:01:57:02:47:66:f0:0d:a3:ea:bb:53:bd:
1e:4e:20:68:53:d2:81:5c:38:6d:09:0d:48:70:fe:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:D2:B8:A9:11:77:A9:FC:42:E7:B1:E2:BD:FD:BE:F4:68:33:D3
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:fc:dd:bf:b2:26:83:5a:54:8d:66:aa:eb:b1:76:be:1f:
1c:a7:78:f3:e0:df:aa:95:7b:51:2f:d7:1e:d6:2d:95:95:eb:
2e:b6:e8:8a:61:a4:9b:04:53:07:8b:e5:b0:44:cc:00:94:a6:
06:45:43:c6:0c:0b:6c:af:b6:05:e4:7d:1b:e5:3a:91:5f:91:
b5:36:36:a4:1a:b7:46:98:ef:82:b6:bd:fa:d2:23:f7:2e:48:
49:63:36:24:eb:b2:f1:cf:b0:5c:9a:e4:e6:ba:2c:a6:4c:34:
e5:04:cc:9e:61:4f:3a:11:ec:c6:a3:ca:39:79:68:5c:37:44:
55:32:a3:d3:01:8f:47:80:90:9d:e4:c5:50:ef:ad:5e:bd:d6:
5b:33:7f:29:2d:74:a6:c0:15:ae:5b:37:7b:58:ac:e3:3b:07:
e0:7d:ff:c0:87:c3:a6:1e:47:4a:c4:2a:99:df:fa:77:ca:be:
b6:3a:53:d0:a3:5c:3b:85:08:d7:2a:22:75:a7:2d:f8:0c:16:
78:e3:2a:05:10:37:db:33:be:82:e0:93:07:59:8b:74:16:c4:
eb:4e:1e:1b:09:98:de:62:45:18:e0:f6:a2:a9:43:46:15:58:
bb:b9:f9:17:9e:c6:2b:d3:cd:b4:f6:9e:76:77:d6:e4:89:d0:
ba:33:02:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:56 2026 by rpki-client