Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: TZzwuRmpNI9XkfsdHLgBb9JcSdXw0fX2LwCLGF4uKyA=
Subject key identifier: 91:BF:BB:BF:AC:AF:AC:14:4C:9F:D6:F2:C5:D4:CB:B8:63:A8:1E:34
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 01A1DFF127D6CA2E0241F256DF50A3AED44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 02B1
Signing time: Sun 15 Nov 2026 16:01:25 +0000
Manifest this update: Sun 15 Nov 2026 16:01:25 +0000
Manifest next update: Mon 16 Nov 2026 16:01:25 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: 3mYK7GJUvF/H1/SPVAH+sS61fosAvvEf+lbOF2r1fas=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:27:d6:ca:2e:02:41:f2:56:df:50:a3:ae:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Nov 15 16:01:25 2026 GMT
Not After : Nov 16 16:01:25 2026 GMT
Subject: CN=91bfbbbfacafac144c9fd6f2c5d4cbb863a81e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:45:6c:73:a9:44:59:05:77:39:32:55:95:
43:26:e7:f8:ba:e8:0f:1d:40:63:cb:f7:6b:1c:f8:
12:73:54:58:b5:09:3e:b6:a9:65:c6:be:03:7d:da:
0a:92:7e:07:77:34:54:01:dc:53:df:28:0c:cd:78:
87:0b:25:2f:ba:7e:ac:35:62:f1:21:82:51:a5:82:
eb:28:19:60:78:80:98:a5:b5:bb:ce:a8:03:0b:08:
f2:ae:a2:aa:a1:a4:30:f9:c6:5a:76:60:ba:4b:5e:
d0:1e:08:8b:38:d9:7f:ee:36:6c:95:60:72:ac:a1:
3b:08:7f:06:8f:14:2b:22:8c:b7:f1:b6:32:43:31:
b6:e6:c2:49:4f:e0:fe:47:e3:d6:52:bf:f0:e2:e6:
46:38:04:98:05:e2:7c:b9:3b:dd:a3:58:d6:1f:57:
af:fe:c9:e8:1d:d8:46:d3:67:e1:71:66:a9:d2:20:
c5:fc:22:78:aa:33:1c:ca:93:79:78:53:35:fe:d1:
09:2e:fd:01:fb:88:eb:97:21:4a:57:01:bf:cb:0d:
11:20:0b:73:af:95:1c:fc:d1:c1:68:16:42:4b:8d:
49:db:59:fb:a8:01:3b:fe:6d:70:72:c9:ab:e9:10:
88:8b:16:73:ed:74:64:a7:d6:72:a8:08:87:2f:ce:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:BB:BF:AC:AF:AC:14:4C:9F:D6:F2:C5:D4:CB:B8:63:A8:1E:34
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:c3:86:ce:b4:76:54:ab:aa:8b:22:ee:2d:ca:ab:22:26:
8a:d4:08:f7:86:41:ef:5a:42:0e:a6:37:22:7a:48:85:7e:e2:
51:af:a6:92:b7:b7:92:5f:cf:4d:bf:13:83:ae:58:bb:1b:0b:
90:24:93:96:67:cd:08:05:54:aa:20:b2:9d:9a:3d:fa:ee:e3:
91:03:24:6d:ac:25:71:63:19:39:39:bc:fe:c7:8a:64:d9:0d:
91:1b:f7:c1:cc:38:3d:de:35:63:f2:e6:cd:13:d0:85:21:88:
d9:75:30:6d:86:20:47:8a:e6:9f:ca:2f:ee:83:83:2e:53:54:
e8:3b:f2:35:ce:62:a4:a3:c2:ea:00:9e:29:29:8b:af:d8:e9:
14:b3:75:6f:57:e8:47:0e:1b:9a:aa:b5:46:34:1b:6f:9d:18:
4f:a2:ac:70:ab:e5:cd:5c:19:d5:4f:1e:46:38:cd:db:3b:6d:
6a:25:02:9b:a2:2d:9c:5d:a9:d0:ec:d0:52:2d:a2:b2:a3:d0:
c3:4f:9f:75:9f:25:cf:1a:dc:0d:15:cf:eb:74:fa:3f:bd:a3:
12:f8:42:11:9d:df:27:1a:42:d4:bd:fb:91:cb:c1:ee:eb:b5:
08:55:3d:df:93:75:28:b5:6f:7e:63:1d:fd:d7:c4:e3:2e:a6:
58:5a:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:56:36 2026 by rpki-client