Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: MKeQYbyTQYlybv3HHc7MfLMaKZXAFozPTu2VmGUWlnQ=
Subject key identifier: 6F:9F:20:61:DC:FA:F6:0E:B4:16:BE:DC:E2:C6:53:47:97:A7:6D:B8
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 019CAD59D2014BCB3AFCDB2ADF58ADB87D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 0493
Signing time: Mon 02 Mar 2026 07:01:10 +0000
Manifest this update: Mon 02 Mar 2026 07:01:10 +0000
Manifest next update: Tue 03 Mar 2026 07:01:10 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: SLkDjfpeSuoZTT1sa7hi4x7+cTPpkLlErW7x+jnuhZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d2:01:4b:cb:3a:fc:db:2a:df:58:ad:b8:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Mar 2 07:01:10 2026 GMT
Not After : Mar 3 07:01:10 2026 GMT
Subject: CN=6f9f2061dcfaf60eb416bedce2c6534797a76db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:02:63:b0:66:1c:b1:3f:ca:be:8d:da:97:
2e:a0:56:36:6c:3f:a4:0d:5c:0f:21:95:60:d0:0a:
84:d6:b4:0b:41:48:6d:dd:f9:40:0c:0f:4a:7a:cb:
b2:08:f6:65:c1:ef:4d:62:54:dc:de:95:16:d8:24:
9b:9c:50:96:28:0c:85:be:2a:13:d2:37:de:42:90:
63:13:17:e6:b1:0a:5e:40:fc:97:74:1c:8d:cd:7d:
bf:e6:58:35:d9:b3:9b:dc:68:be:1e:44:b8:ab:54:
c4:0a:a7:38:98:b9:4a:73:08:10:af:00:b4:e4:c0:
e0:79:f1:39:26:bb:8a:4c:09:3d:41:32:c6:d6:20:
aa:74:de:1c:f0:70:2f:5e:9e:04:a9:2f:46:44:41:
f8:82:e7:96:8d:47:f9:27:f3:a2:2a:b1:6f:65:1a:
d7:b3:2c:6a:5f:ab:46:95:76:17:ce:b0:01:ba:2c:
ed:08:81:68:bd:72:d2:3d:d0:97:ec:31:b5:d1:8f:
1d:dd:4a:1a:d8:d4:b7:c8:1a:30:77:7d:04:85:c2:
3e:ba:c0:49:d9:1c:b0:41:eb:70:54:04:6c:f9:30:
6b:2d:aa:4f:86:08:ef:5d:8e:5d:2d:ac:cd:84:a3:
44:fb:a9:fd:db:ab:53:b1:d2:62:77:d6:0b:79:ab:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:20:61:DC:FA:F6:0E:B4:16:BE:DC:E2:C6:53:47:97:A7:6D:B8
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:45:a1:5c:cb:fc:7d:aa:14:84:c2:78:66:14:f0:e7:83:
bb:2a:c7:9f:de:c3:ed:42:a0:d9:2f:8e:27:79:9d:3a:97:d5:
a1:69:00:fd:a0:70:4b:df:6a:7e:09:22:3a:5f:47:3e:ab:a4:
e8:50:e2:3c:35:bc:10:06:71:be:61:53:89:df:5f:09:66:41:
f9:c9:b1:09:19:b9:d4:a0:ad:98:89:0f:94:db:55:00:17:b3:
40:bc:f7:ee:c6:6d:9e:e6:b9:4a:36:03:fd:88:fb:bf:dc:e8:
ad:a5:b7:c1:a5:e8:a6:af:5d:a2:fa:69:ee:86:44:27:32:22:
5e:ab:ee:90:94:f0:a0:bc:3d:1d:96:3b:64:03:da:f5:78:1e:
1e:17:66:20:b8:03:38:5f:35:e2:38:aa:b9:6b:f0:da:ec:dd:
d4:15:4c:a8:1f:13:31:7f:de:04:f9:3b:43:22:6b:b5:fa:cb:
1a:ed:3e:95:7b:6c:62:6d:6d:b1:22:39:a5:0f:63:a2:74:76:
9c:5d:a7:d3:4b:cf:c6:77:da:13:11:4e:9d:42:36:79:7c:ea:
79:d3:20:c2:98:bc:d4:0d:01:bd:6c:0e:d3:41:96:20:e2:33:
eb:d7:dd:10:8f:6a:9e:0c:f8:2b:ee:90:a4:7e:aa:91:ac:e7:
6c:84:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:34 2026 by rpki-client