Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File: W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier: GRD25vAWe/TaD5lizaTRo3sMMsEddp+dS4CXeIHgeQg=
Subject key identifier: 98:56:8D:29:F6:A9:7B:86:0B:10:E8:94:AC:B6:1C:83:FF:FA:A7:D9
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 01A0C5FBFF7D0577F1F079CF22640E8A6DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number: 021F
Signing time: Mon 21 Sep 2026 22:00:21 +0000
Manifest this update: Mon 21 Sep 2026 22:00:21 +0000
Manifest next update: Tue 22 Sep 2026 22:00:21 +0000
Files and hashes: 1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: o2CwErfM9x5Q4wH3jInbBti0xcAuCUaz3mTVqv8+iPQ=)
2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:ff:7d:05:77:f1:f0:79:cf:22:64:0e:8a:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Sep 21 22:00:21 2026 GMT
Not After : Sep 22 22:00:21 2026 GMT
Subject: CN=98568d29f6a97b860b10e894acb61c83fffaa7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:23:67:13:04:bf:ec:86:41:0c:ca:f3:91:
66:31:90:8d:ae:a8:ef:a6:b9:5d:bb:7b:db:7a:1d:
be:c0:65:c0:6a:12:68:dc:9c:f8:25:9a:e3:41:2a:
66:9e:84:c3:37:5a:fd:99:43:59:98:20:18:e8:aa:
2d:d6:f4:de:ab:82:6a:e7:0f:6f:c7:a2:66:00:7e:
9d:87:be:bb:26:98:42:7a:c4:7b:53:36:52:0f:47:
59:cb:a8:1e:5e:23:67:28:22:de:06:c2:08:1c:ed:
1f:61:ce:ed:b4:19:87:0b:06:36:40:81:61:7e:4a:
da:7a:45:56:70:ff:04:a0:61:94:78:e5:47:41:9a:
94:5a:97:ee:c4:e6:ba:e0:3e:e3:20:39:b6:8d:d0:
29:d5:aa:8e:77:20:4b:8d:74:ac:26:4a:74:32:b3:
aa:c4:47:73:2c:68:a9:b4:1d:3e:08:c5:e4:06:7c:
02:f5:ae:c4:2a:92:9c:40:cd:77:2e:a9:86:79:b4:
ac:64:eb:99:76:37:44:d9:00:56:28:52:0c:5b:d4:
09:7d:94:d4:e4:bd:df:a4:98:8e:6d:06:0c:64:e1:
32:88:5a:0f:31:3d:0b:e2:7f:b3:92:5b:83:28:4f:
99:c3:90:91:bf:af:ba:d6:ee:ad:be:dc:c2:c8:eb:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:56:8D:29:F6:A9:7B:86:0B:10:E8:94:AC:B6:1C:83:FF:FA:A7:D9
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:e4:db:54:4a:46:ac:22:f9:3c:bc:93:5c:f4:86:f9:07:
08:a0:04:67:ff:18:8e:2c:8f:c5:f9:04:31:e8:31:a6:a6:e1:
71:ba:11:f3:6c:57:8b:91:ad:70:ec:08:2c:70:bd:4f:cd:8b:
aa:e0:87:3f:b9:08:56:b9:27:67:f5:ea:1e:5e:14:c4:2b:36:
8c:ab:44:3f:4b:22:b1:f8:36:64:ca:21:5e:58:01:5e:7c:3a:
83:77:27:cd:38:8c:50:30:6b:08:a0:34:7c:60:85:ac:3e:7d:
6a:d4:4e:23:9c:6e:f7:52:ed:b5:95:5d:e1:5b:bf:ad:06:ba:
b9:53:81:b6:4a:c9:d7:0f:7a:32:52:9f:17:20:4a:a9:67:8c:
03:9c:0f:42:30:8c:5e:a2:08:47:7e:68:6f:dd:03:a0:39:1d:
ab:60:2c:7d:27:1d:67:80:25:ec:27:da:9a:6f:72:b0:33:5b:
b9:1e:2f:51:dd:aa:50:33:04:27:db:9f:cc:dd:65:57:72:1c:
aa:7e:82:d8:98:11:3b:a3:a3:17:cf:90:3e:02:5d:ef:b4:8b:
7c:bb:dc:2c:1e:1f:a1:da:f7:3a:9b:57:49:34:9c:50:71:39:
31:f6:40:b2:39:dd:0d:30:59:eb:ca:0e:f7:46:64:bf:42:61:
fd:b6:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:47:58 2026 by rpki-client