Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: jK026DZSNv8CXY3rmUenQGZooLpYvu6wU3pcEhm9iK0=
Subject key identifier: 19:2A:1F:B2:B4:CE:FA:5C:F4:80:44:EE:44:FD:C1:B9:A3:DC:B2:1B
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019CAD5A2940B02CB6C7B5C65F4B66F7825F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0B5E
Signing time: Mon 02 Mar 2026 07:01:32 +0000
Manifest this update: Mon 02 Mar 2026 07:01:32 +0000
Manifest next update: Tue 03 Mar 2026 07:01:32 +0000
Files and hashes: 1: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: a+KujJtOo7k6vcY6QGnvk5mEKSMBltV/F6rPgH1rc04=)
2: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:29:40:b0:2c:b6:c7:b5:c6:5f:4b:66:f7:82:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Mar 2 07:01:32 2026 GMT
Not After : Mar 3 07:01:32 2026 GMT
Subject: CN=192a1fb2b4cefa5cf48044ee44fdc1b9a3dcb21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:b2:f5:a1:2b:79:42:b7:1e:72:d8:8b:01:
16:e0:84:5f:6b:cf:b3:60:11:28:fc:2e:10:bc:f8:
6f:72:16:5e:7a:c6:dc:88:05:e0:c0:f7:6f:1d:f5:
c9:7a:f5:78:91:16:da:af:99:7f:6f:7a:cd:26:60:
75:c2:1f:f9:76:be:e3:3d:cd:a4:e0:b3:5b:f2:c5:
51:7d:88:1a:b3:13:c3:d1:a0:02:39:31:c2:05:a9:
ab:bb:9c:c1:55:76:26:7e:11:ac:e3:95:7c:f9:26:
0b:11:c5:6f:d2:0d:03:d4:03:5c:98:98:b3:8e:69:
61:57:65:54:9b:a2:18:c2:d8:04:73:1d:03:a2:d2:
d8:f2:88:55:cb:08:73:25:f7:eb:3e:0a:86:18:71:
fa:a6:20:27:b6:f0:52:33:36:41:b0:55:e3:bb:2b:
e6:04:90:5b:14:10:3a:52:81:77:2c:dc:47:fe:2d:
d6:22:89:92:dd:e3:b5:0b:4e:de:05:21:f5:02:90:
a6:69:cc:e2:9e:5e:4b:c4:cc:32:ef:3d:a5:90:76:
50:2f:e6:23:15:68:94:43:41:a4:2d:09:37:f5:93:
b2:65:c6:3a:a0:60:40:0e:06:7e:78:25:92:39:b1:
0b:56:f3:f1:a8:e7:37:34:de:f6:ff:17:65:c6:02:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:1F:B2:B4:CE:FA:5C:F4:80:44:EE:44:FD:C1:B9:A3:DC:B2:1B
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:97:f9:dd:31:e2:9c:f1:8a:91:37:11:d9:86:ef:ef:87:e7:
4c:83:61:a2:af:e5:a8:8a:84:64:43:53:8f:95:dc:68:da:db:
9d:dc:cd:5c:ce:2c:17:ab:d7:77:b1:14:57:fd:9c:ce:27:f1:
14:0f:df:65:f8:72:82:ae:14:87:cc:da:95:f1:69:91:f4:cf:
71:41:37:3a:42:ad:33:80:b7:54:f2:d8:96:90:1a:fd:a0:54:
dc:f9:bd:10:4d:89:74:dc:4b:04:a5:ce:df:22:da:77:1e:2d:
83:93:de:6a:db:6d:a1:b8:cb:8a:48:a9:28:1e:2e:9c:72:aa:
1b:df:39:ec:c4:6a:f9:0d:8b:65:43:d4:f7:35:e4:10:c3:57:
6a:b3:a3:25:c7:23:20:44:44:54:0e:fd:eb:54:94:52:09:e1:
89:7d:3d:c4:16:5b:02:4c:61:45:00:27:ba:94:86:86:dc:4f:
a2:56:eb:53:8c:1c:ad:8a:8a:4f:22:bc:5b:52:ea:66:4b:a1:
18:bc:cc:7f:44:8d:00:65:62:c2:32:d8:5b:75:26:82:03:86:
a8:3f:2e:ab:a8:b8:b5:2a:9a:08:e2:e5:e6:d2:e4:c4:a7:3b:
3c:b6:e9:99:bd:bf:ed:1e:d6:2a:9b:2f:a9:4b:f9:20:85:34:
24:e5:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:49 2026 by rpki-client