Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: fHfiyAMheIEgvRscDrY0VH0i9AGzUqaq95GFKIWMMWg=
Subject key identifier: CA:35:4A:E1:D7:BD:87:3C:AD:D3:E0:AD:CE:9E:2C:16:12:30:0C:99
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 019CAC7E622DC6E6327ECF1362A1E540DC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 03:01:29 +0000
Manifest this update: Mon 02 Mar 2026 03:01:29 +0000
Manifest next update: Tue 03 Mar 2026 03:01:29 +0000
Files and hashes: 1: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: F/Khr9jWFMRfv6tSwutlu/9DVXL5CCfeyXdxJsDmhwg=)
2: XWKWcGwWuxK442AqUwQOJoI0Riw.roa (hash: lPCDTJoNAlTYjYOQxRc8IFp9k2/Nouu3lyu3633P8Ys=)
3: vaTMXsKj9s2mYu4jK85sAAqXJgk.roa (hash: 9Sx8ua7dYYmRjEMlZOB1LM5xRgfZw4Tr41DAQH+beRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:62:2d:c6:e6:32:7e:cf:13:62:a1:e5:40:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Mar 2 03:01:29 2026 GMT
Not After : Mar 3 03:01:29 2026 GMT
Subject: CN=ca354ae1d7bd873cadd3e0adce9e2c1612300c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:60:6f:47:39:0c:dd:bf:f3:96:7c:88:9e:
88:e9:c5:7d:11:38:94:9c:13:6c:d3:fd:6c:81:db:
ed:74:b4:a3:de:4e:c1:2c:cf:91:76:a7:f1:c8:e0:
69:bf:f1:6e:58:17:f3:9e:ce:20:8e:d9:41:86:f3:
06:07:89:a6:d9:5d:63:56:71:09:79:d4:42:5a:6b:
1a:6f:bd:12:64:86:d9:72:08:09:2d:2d:9b:25:5a:
9f:91:2e:38:81:48:d6:c4:82:bc:07:27:06:4b:42:
37:42:52:5c:5e:f9:a7:9f:db:68:d2:fa:9a:cc:94:
39:c2:f1:97:e7:0e:1c:28:62:f6:b0:78:db:c0:e0:
8b:ac:f6:25:0d:c3:3c:97:22:b2:d1:e6:4a:0d:fb:
af:02:9a:85:56:34:17:ea:af:c6:96:12:4b:bc:a7:
56:95:39:22:de:9d:66:15:a2:4b:1f:22:94:3c:8a:
10:95:2d:24:04:e2:c5:85:df:b4:c4:3e:f4:8b:b0:
8f:dc:97:d4:0b:65:f3:50:28:ce:84:94:a1:11:e4:
84:d0:2e:af:6f:dd:3c:6c:41:a9:c5:03:ca:f0:6a:
36:98:82:75:98:76:2f:be:f1:82:30:55:ca:85:c6:
49:a0:b4:1d:4f:b9:d3:ca:73:f0:57:c6:29:45:b5:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:4A:E1:D7:BD:87:3C:AD:D3:E0:AD:CE:9E:2C:16:12:30:0C:99
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f4:e1:2a:21:12:5e:5a:45:95:d9:49:be:79:18:d0:8b:a4:
25:67:a4:24:d5:fd:fa:9b:70:8a:54:36:cf:2b:9d:90:d8:49:
c6:92:fc:46:7c:db:10:6d:74:7c:a9:df:9c:be:c5:86:f7:5a:
82:2f:6c:ce:e7:9c:78:1f:02:4a:3e:74:44:9f:cf:d6:9a:ee:
07:87:5b:61:07:e2:1d:8b:ba:d9:61:5b:94:6f:5d:45:46:b1:
b2:46:14:0c:4e:ba:20:cf:3b:a2:f7:8c:85:dd:30:14:ca:30:
89:2b:cb:b1:9f:8a:24:f6:fe:b8:74:4b:39:dc:80:f7:40:8c:
8f:c3:e1:4d:34:35:dd:b1:80:d5:0d:41:a6:fe:86:6f:68:2e:
d6:2e:e6:8d:4e:78:d8:95:94:3f:54:86:91:72:3d:4b:f3:f8:
00:73:ab:fa:5c:32:b6:79:9d:24:d1:2e:87:09:54:f6:ec:09:
04:b5:ab:45:02:6a:24:4a:12:de:06:f4:0a:45:e4:cd:21:b9:
92:fb:3d:15:6f:7e:7a:73:dd:dc:aa:9d:25:ab:3b:cc:bd:44:
5a:ff:73:69:d7:37:48:70:03:c1:67:f9:03:4e:10:69:f3:61:
bd:8e:a3:61:1a:c9:62:3a:6b:49:6e:3d:93:e9:45:be:10:de:
bc:59:08:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfmItxuYyfs8TYqHlQNwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWE4MWFhOWIyMTk3ZDkxMjdiNDQyNTI1MTAwZmZhYTM2
ZTBkNTIwHhcNMjYwMzAyMDMwMTI5WhcNMjYwMzAzMDMwMTI5WjAzMTEwLwYDVQQD
EyhjYTM1NGFlMWQ3YmQ4NzNjYWRkM2UwYWRjZTllMmMxNjEyMzAwYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow5gb0c5DN2/85Z8iJ6I6cV9ETiU
nBNs0/1sgdvtdLSj3k7BLM+RdqfxyOBpv/FuWBfzns4gjtlBhvMGB4mm2V1jVnEJ
edRCWmsab70SZIbZcggJLS2bJVqfkS44gUjWxIK8BycGS0I3QlJcXvmnn9to0vqa
zJQ5wvGX5w4cKGL2sHjbwOCLrPYlDcM8lyKy0eZKDfuvApqFVjQX6q/GlhJLvKdW
lTki3p1mFaJLHyKUPIoQlS0kBOLFhd+0xD70i7CP3JfUC2XzUCjOhJShEeSE0C6v
b908bEGpxQPK8Go2mIJ1mHYvvvGCMFXKhcZJoLQdT7nTynPwV8YpRbWnTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo1SuHXvYc8rdPgrc6eLBYSMAyZMB8GA1UdIwQY
MBaAFFvqgaqbIZfZEntEJSUQD/qjbg1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQt
ZmMwZGQ5MjUyYzlhLzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQtZmMwZGQ5MjUyYzlh
LzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPThKiES
XlpFldlJvnkY0IukJWekJNX9+ptwilQ2zyudkNhJxpL8RnzbEG10fKnfnL7Fhvda
gi9szueceB8CSj50RJ/P1pruB4dbYQfiHYu62WFblG9dRUaxskYUDE66IM87oveM
hd0wFMowiSvLsZ+KJPb+uHRLOdyA90CMj8PhTTQ13bGA1Q1Bpv6Gb2gu1i7mjU54
2JWUP1SGkXI9S/P4AHOr+lwytnmdJNEuhwlU9uwJBLWrRQJqJEoS3gb0CkXkzSG5
kvs9FW9+enPd3KqdJas7zL1EWv9zadc3SHADwWf5A04QafNhvY6jYRrJYjprSW49
k+lFvhDevFkI2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:39 2026 by rpki-client